assiette 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 53dcdd2252625c13acb100e88de0f7a0bdefe7e09ddf560a4505b8134488129a
+  data.tar.gz: b564439804f77d5630efee16e9102ba40e10e9d5b29295dff081ea51db921b03
+SHA512:
+  metadata.gz: 0da513d9800eb7f4041a2d3ce754d30da6ea05276a2dd868c6d094868a82f37d4040485040463f8885c25cac2f12fdd2c193be1c94b82a9fec46654d36b45c07
+  data.tar.gz: fbbceda42225f3dadc09e885909f66d7711593a62e491a80583d1f8a8e856223ecb0e8f2fcf4e714ac42e4d082badba92af003ee4fd1e1438958e2d74887792b

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2025 Julik Tarkhanov
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/Rakefile

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+require "bundler/gem_tasks"
+require "rake/testtask"
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << "test"
+  t.pattern = "test/**/*_test.rb"
+  t.verbose = false
+end
+
+require "standard/rake"
+
+task default: %i[test standard]

data/config/routes.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+Assiette::Engine.routes.draw do
+  # No routes — asset serving is handled by Assiette::Server middleware
+end

data/lib/assiette/engine.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+require "rails/engine"
+
+module Assiette
+  class Engine < ::Rails::Engine
+    isolate_namespace Assiette
+
+    # Inject helpers into all ActionView contexts so host apps
+    # get assiette_asset_path() and assiette_modulepreload_tags() for free
+    initializer "assiette.helpers" do
+      ActiveSupport.on_load(:action_view) do
+        include Assiette::Helpers
+      end
+    end
+  end
+end

data/lib/assiette/helpers.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+module Assiette
+  module Helpers
+    # Returns the URL path to an asset served by Assiette, with a cache-busting
+    # version tag appended.
+    def assiette_asset_path(path)
+      entry = request.env["assiette.stack"]&.last
+      raise "No Assiette::Server in middleware stack" unless entry
+      entry[:server].absolute_asset_url_path(path, entry[:script_name])
+    end
+
+    # Returns the SRI integrity hash for an asset, computed over the served
+    # (rewritten) content. Returns nil if the file is not found.
+    def assiette_asset_integrity(path)
+      entry = request.env["assiette.stack"]&.last
+      raise "No Assiette::Server in middleware stack" unless entry
+      entry[:server].asset_integrity(path)
+    end
+
+    # Generates a <link rel="stylesheet"> tag with SRI integrity.
+    def assiette_stylesheet_tag(path)
+      tag.link(rel: "stylesheet", href: assiette_asset_path(path),
+        integrity: assiette_asset_integrity(path), crossorigin: "anonymous")
+    end
+
+    # Generates <link rel="modulepreload"> tags for all detected ES modules
+    # under the configured asset roots. Each tag includes an SRI integrity
+    # hash computed over the served (rewritten) content.
+    def assiette_modulepreload_tags
+      entry = request.env["assiette.stack"]&.last
+      raise "No Assiette::Server in middleware stack" unless entry
+      modules = entry[:server].js_modules
+      safe_join(modules.map { |mod|
+        tag.link(rel: "modulepreload", href: assiette_asset_path(mod[:path]),
+          integrity: mod[:integrity], crossorigin: "anonymous")
+      }, "\n")
+    end
+  end
+end

data/lib/assiette/rewriter.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+module Assiette
+  module Rewriter
+    # Matches quoted strings that look like relative/absolute JS import paths.
+    # Handles ./  ../  /  but NOT protocol-relative //
+    # $1 = quote char, $2 = path including extension
+    JS_IMPORT_RE = /(["'])(\.{0,2}\/(?!\/)[^"']*\.(?:js|mjs|es))\1/
+
+    # Matches url() in CSS with relative/absolute paths.
+    # Handles url(./path), url("./path"), url('../path'), url(/path)
+    # but NOT url(data:...), url(https://...), url(//...)
+    # $1 = opening (quote or empty), $2 = path, $3 = closing (quote or empty)
+    CSS_URL_RE = /url\((\s*["']?)(\.{0,2}\/(?!\/)[^)"']*?)(\s*["']?\s*)\)/
+
+    module_function
+
+    def rewrite_js_imports(source, version_tag)
+      source.gsub(JS_IMPORT_RE) do
+        "#{$1}#{$2}?v=#{version_tag}#{$1}"
+      end
+    end
+
+    def rewrite_css_urls(source, version_tag)
+      source.gsub(CSS_URL_RE) do
+        "url(#{$1}#{$2}?v=#{version_tag}#{$3})"
+      end
+    end
+  end
+end

data/lib/assiette/server.rb

@@ -0,0 +1,170 @@
+# frozen_string_literal: true
+
+require "digest/sha1"
+require "digest/sha2"
+require "base64"
+require "pathname"
+
+module Assiette
+  class Server
+    CONTENT_TYPES = {
+      ".js" => "application/javascript",
+      ".mjs" => "application/javascript",
+      ".css" => "text/css",
+      ".svg" => "image/svg+xml",
+      ".png" => "image/png",
+      ".ico" => "image/x-icon"
+    }.freeze
+
+    JS_EXTENSIONS = %w[.js .mjs].to_set.freeze
+
+    CACHE_CONTROL = "public, max-age=432000, must-revalidate"
+
+    def initialize(app, root:, additional_directory_mappings: {})
+      @app = app
+      @mappings = build_mappings(root, additional_directory_mappings)
+      @integrity_cache = {}
+      @integrity_mutex = Mutex.new
+      @modules_cache = nil
+      @modules_mutex = Mutex.new
+      @modules_version = nil
+    end
+
+    def call(env)
+      stack = (env["assiette.stack"] ||= [])
+      stack << {server: self, script_name: env["SCRIPT_NAME"].to_s}
+
+      result = serve(env)
+      return result if result
+
+      @app.call(env)
+    end
+
+    # Public API for helpers
+    def absolute_asset_url_path(path, script_name = "")
+      clean = path.sub(%r{\A/}, "")
+      return nil unless resolve_file(clean)
+      "#{script_name}/#{clean}?v=#{Assiette.version_tag}"
+    end
+
+    def asset_integrity(path)
+      version_tag = Assiette.version_tag
+      @integrity_mutex.synchronize do
+        if @integrity_version != version_tag
+          @integrity_cache = {}
+          @integrity_version = version_tag
+        end
+        return @integrity_cache[path] if @integrity_cache.key?(path)
+
+        clean = path.sub(%r{\A/}, "")
+        @integrity_cache[path] = compute_integrity(clean, version_tag)
+      end
+    end
+
+    def js_modules
+      version_tag = Assiette.version_tag
+      @modules_mutex.synchronize do
+        return @modules_cache if @modules_version == version_tag
+
+        @modules_cache = @mappings.flat_map { |prefix, root|
+          Dir[File.join(root, "**/*.{js,mjs}")].filter_map { |abs|
+            next unless File.foreach(abs).any? { |line| line.match?(/\A\s*(import|export)\s/) }
+            relative = Pathname.new(abs).relative_path_from(root).to_s
+            mod_path = "/#{"#{prefix}/" unless prefix.empty?}#{relative}".squeeze("/")
+            {path: mod_path, integrity: asset_integrity(mod_path)}
+          }
+        }.uniq { |m| m[:path] }.sort_by { |m| m[:path] }
+
+        @modules_version = version_tag
+        @modules_cache
+      end
+    end
+
+    private
+
+    def build_mappings(root, additional_directory_mappings)
+      mappings = [["", Pathname.new(root).expand_path]]
+      additional_directory_mappings.each do |prefix, path|
+        clean_prefix = prefix.to_s.sub(%r{\A/}, "").chomp("/")
+        mappings << [clean_prefix, Pathname.new(path).expand_path]
+      end
+      mappings
+    end
+
+    def serve(env)
+      return unless env["REQUEST_METHOD"] == "GET" || env["REQUEST_METHOD"] == "HEAD"
+
+      path_info = Rack::Utils.unescape_path(env["PATH_INFO"])
+      path_info = path_info.sub(%r{\A/}, "")
+
+      extension = File.extname(path_info)
+      content_type = CONTENT_TYPES[extension]
+      return unless content_type
+
+      file_path = resolve_file(path_info)
+      return unless file_path
+
+      raw_bytes = File.binread(file_path)
+
+      # ETag from raw bytes for stability
+      etag = %("#{Digest::SHA1.hexdigest(raw_bytes)}")
+      if env["HTTP_IF_NONE_MATCH"] == etag
+        return [304, {"etag" => etag, "cache-control" => CACHE_CONTROL}, []]
+      end
+
+      query = Rack::Utils.parse_query(env["QUERY_STRING"])
+      tag = query["v"].to_s.empty? ? Assiette.version_tag : query["v"]
+
+      body = if JS_EXTENSIONS.include?(extension)
+        Rewriter.rewrite_js_imports(raw_bytes, tag)
+      elsif extension == ".css"
+        Rewriter.rewrite_css_urls(raw_bytes, tag)
+      else
+        raw_bytes
+      end
+
+      headers = {
+        "content-type" => content_type,
+        "content-length" => body.bytesize.to_s,
+        "cache-control" => CACHE_CONTROL,
+        "etag" => etag
+      }
+
+      [200, headers, [body]]
+    end
+
+    def resolve_file(path)
+      clean = path.sub(%r{\A/}, "")
+      @mappings.each do |prefix, root|
+        if prefix.empty?
+          relative = clean
+        elsif clean.start_with?(prefix + "/")
+          relative = clean[(prefix.length + 1)..]
+        elsif clean == prefix
+          next
+        else
+          next
+        end
+
+        abs = root.join(relative).cleanpath
+        next unless abs.to_s.start_with?(root.to_s + "/")
+        return abs if abs.exist? && abs.file?
+      end
+      nil
+    end
+
+    def compute_integrity(clean, version_tag)
+      file_path = resolve_file(clean)
+      return nil unless file_path
+
+      raw = File.read(file_path)
+      ext = File.extname(clean)
+      served = case ext
+      when ".js", ".mjs" then Rewriter.rewrite_js_imports(raw, version_tag)
+      when ".css" then Rewriter.rewrite_css_urls(raw, version_tag)
+      else raw
+      end
+      "sha256-#{Base64.strict_encode64(Digest::SHA256.digest(served))}"
+    end
+  end
+end

data/lib/assiette/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module Assiette
+  VERSION = "0.1.0"
+end

data/lib/assiette/version_tag.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+require "digest/sha1"
+
+module Assiette
+  # Computes a short version tag for cache busting.
+  # In development: timestamp for instant invalidation on each request
+  # In production: derived from APP_REVISION env var or Gemfile.lock digest
+  def self.version_tag
+    @version_tag ||= compute_version_tag
+  end
+
+  def self.reset_version_tag!
+    @version_tag = nil
+  end
+
+  def self.compute_version_tag
+    if Rails.env.development?
+      Time.now.utc.strftime("%Y%m%d%H%M%S")
+    elsif (app_revision = ENV["APP_REVISION"]).present?
+      Digest::SHA1.hexdigest(app_revision)[0, 4]
+    else
+      gemfile_lock_path = Rails.root.join("Gemfile.lock")
+      if gemfile_lock_path.exist?
+        Digest::SHA1.file(gemfile_lock_path).hexdigest[0, 4]
+      else
+        (Time.now.utc.to_i / 300).to_s(16)
+      end
+    end
+  end
+
+  private_class_method :compute_version_tag
+end

data/lib/assiette.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+require_relative "assiette/version"
+require_relative "assiette/version_tag"
+require_relative "assiette/rewriter"
+require_relative "assiette/server"
+require_relative "assiette/helpers"
+require_relative "assiette/engine"
+
+module Assiette
+end

data/lib/generators/assiette/install/install_generator.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+require "rails/generators"
+
+module Assiette
+  module Generators
+    class InstallGenerator < Rails::Generators::Base
+      source_root File.expand_path("templates", __dir__)
+
+      desc "Creates an Assiette initializer with middleware configuration"
+
+      def create_initializer
+        template "initializer.rb.tt", "config/initializers/assiette.rb"
+      end
+    end
+  end
+end

data/lib/generators/assiette/install/templates/initializer.rb.tt

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+# Assiette serves static assets (JS, CSS, SVG, etc.) from your app with
+# cache headers, SRI integrity hashes, and automatic JS import rewriting.
+#
+# This file runs during :load_config_initializers, which is before the
+# middleware stack is frozen (:build_middleware_stack) in Rails 8.1+.
+
+# Serve files from app/assets (JS modules, CSS, SVGs, etc.)
+Rails.application.config.middleware.use(
+  Assiette::Server,
+  root: Rails.root.join("app/assets")
+)
+
+# Serve files from public/ (favicons, static images, etc.)
+Rails.application.config.middleware.use(
+  Assiette::Server,
+  root: Rails.root.join("public")
+)

metadata

@@ -0,0 +1,85 @@
+--- !ruby/object:Gem::Specification
+name: assiette
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Julik Tarkhanov
+bindir: bin
+cert_chain: []
+date: 2026-05-20 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: railties
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.2'
+- !ruby/object:Gem::Dependency
+  name: actionpack
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.2'
+description: Serves static assets with cache-busting version tags and on-the-fly JS/CSS
+  URL rewriting, without requiring any asset pipeline
+email:
+- me@julik.nl
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE.txt
+- Rakefile
+- config/routes.rb
+- lib/assiette.rb
+- lib/assiette/engine.rb
+- lib/assiette/helpers.rb
+- lib/assiette/rewriter.rb
+- lib/assiette/server.rb
+- lib/assiette/version.rb
+- lib/assiette/version_tag.rb
+- lib/generators/assiette/install/install_generator.rb
+- lib/generators/assiette/install/templates/initializer.rb.tt
+homepage: https://github.com/julik/assiette
+licenses:
+- MIT
+metadata:
+  allowed_push_host: https://rubygems.org
+  homepage_uri: https://github.com/julik/assiette
+  source_code_uri: https://github.com/julik/assiette
+  changelog_uri: https://github.com/julik/assiette/blob/main/CHANGELOG.md
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.1.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.6
+specification_version: 4
+summary: Zero-build asset serving for Rails engines
+test_files: []