sass-embedded 1.77.5 → 1.86.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 631464c3270dfeddd024e782fed7e3354594b03afa25ca5b9efc0509ccd70af4
-  data.tar.gz: bd6224dff05c20e442feee188d1ae9f9b0066db7c1ad0725c253ccb25c3b6aa0
+  metadata.gz: 16ad6e7bdf2e7314d688d0942f5455d6cfaaf411516710e3847f164ce84855d4
+  data.tar.gz: 714fbb69aaf672c0229fe81abb1a5e6de6ff0300a9ab4b07e9b1e73ea625cd6a
 SHA512:
-  metadata.gz: 6292f26854e7d873b7168d6e172fab1044eb7ca75754b2dc6b3ca158462abdaf49cc351a2cf58cb6da71bb81a1854b1da06267d76b2a779c67c9bd513a8736a1
-  data.tar.gz: '0958f5d6cd79525a5ba9d591e540bd2eb23e31a2acaa59a74f0a896c0596ad6709e6332d7f7d328bfa95835b6f3262797f321958c88ef83d17d8f6de78284713'
+  metadata.gz: 4d8a7b51668022e4a81db26522190d398100d2d581737ea5261cefc23a27bd25eb3a996dfc907e6309793a6be0bc668a5803177a505ec5a32b926aac1781a340
+  data.tar.gz: 60a050686e1f88bf2c9c9c4b2ba0db78bff5d41fd47f84d5dddf0844665a7a9f856360a3d1503b1483e7cb4d5e5af992618fe5b0b0abc89e319ececeaaf74365

data/exe/sass

@@ -6,15 +6,7 @@ require_relative '../ext/sass/cli'
 module Sass
   # The `sass` command line interface
   module CLI
-    begin
-      Kernel.exec(*COMMAND, *ARGV)
-    rescue Errno::ENOENT
-      require_relative '../lib/sass/elf'
-
-      raise if ELF::INTERPRETER.nil?
-
-      Kernel.exec(ELF::INTERPRETER, *COMMAND, *ARGV)
-    end
+    Kernel.exec(*COMMAND, *ARGV)
   end
 
   private_constant :CLI

data/ext/sass/Rakefile

@@ -2,75 +2,289 @@
 
 require 'rake/clean'
 
+require_relative '../../lib/sass/elf'
+
+ELF = Sass.const_get(:ELF)
+
 task default: %i[install clean]
 
 task install: %w[cli.rb] do
   Rake::Task['embedded_sass_pb.rb'].invoke unless File.exist?('embedded_sass_pb.rb')
 end
 
-CLEAN.include %w[protoc.exe ruby *.proto *.tar.gz *.zip]
-
-CLOBBER.include %w[dart-sass cli.rb embedded_sass_pb.rb]
+CLEAN.include %w[
+  protoc.exe
+  ruby
+  true
+  *.proto
+  *.tar.gz
+  *.zip
+]
+
+CLOBBER.include %w[
+  dart-sass
+  cli.rb
+  embedded_sass_pb.rb
+  node_modules
+  bun.lockb
+  package-lock.json
+  pnpm-lock.yaml
+  yarn.lock
+]
 
 file 'protoc.exe' do |t|
-  fetch(ENV.fetch('PROTOC_BIN') { SassConfig.default_protoc }, t.name)
+  fetch(SassConfig.protoc, t.name)
+  chmod 'a+x', t.name
+rescue NotImplementedError
+  File.write(t.name, <<~PROTOC_EXE)
+    #!#{RbConfig.ruby}
+    # frozen_string_literal: true
+    Kernel.exec('protoc', *ARGV)
+  PROTOC_EXE
   chmod 'a+x', t.name
 end
 
-file 'dart-sass' do |t|
-  raise if ENV.key?('DART_SASS')
-
-  gem_install 'sass-embedded', SassConfig.gem_version, SassConfig.gem_platform do |dir|
-    mv File.absolute_path("ext/sass/#{t.name}", dir), t.name
+file 'dart-sass/sass' do
+  gem_install 'sass-embedded', SassConfig.gem_version, SassConfig.gem_platform do |installer|
+    gh_attestation_verify(installer.gem, repo: 'sass-contrib/sass-embedded-host-ruby')
+    mv File.absolute_path('ext/sass/dart-sass', installer.gem_dir), 'dart-sass'
   end
 rescue StandardError
-  archive = fetch(ENV.fetch('DART_SASS') { SassConfig.default_dart_sass })
+  archive = fetch(SassConfig.dart_sass)
+  gh_attestation_verify(archive, repo: 'sass/dart-sass')
   unarchive archive
   rm archive
 end
 
+file 'node_modules/sass' do
+  sh 'npm', 'install'
+rescue StandardError
+  begin
+    sh 'yarn', 'install'
+  rescue StandardError
+    begin
+      sh 'pnpm', 'install'
+    rescue StandardError
+      sh 'bun', 'install'
+    end
+  end
+end
+
+task 'dart-sass' do
+  Rake::Task['dart-sass/sass'].invoke
+rescue NotImplementedError
+  Rake::Task['node_modules/sass'].invoke
+end
+
 file 'cli.rb' => %w[dart-sass] do |t|
-  exe = 'dart-sass/sass'
-  exe = "#{exe}#{['', '.bat', '.exe'].find { |ext| File.exist?("#{exe}#{ext}") }}"
-
-  raise "#{exe} not found" unless File.exist?(exe)
-
-  runtime = 'dart-sass/src/dart'
-  runtime = "#{runtime}#{['', '.exe'].find { |ext| File.exist?("#{runtime}#{ext}") }}"
-  snapshot = 'dart-sass/src/sass.snapshot'
-
-  command = if File.exist?(runtime) && File.exist?(snapshot)
-              "
-      File.absolute_path('#{runtime}', __dir__).freeze,
-      File.absolute_path('#{snapshot}', __dir__).freeze
-    "
-            else
-              "
-      File.absolute_path('#{exe}', __dir__).freeze
-    "
-            end
-
-  File.write(t.name, <<~CLI_RB)
-    # frozen_string_literal: true
+  begin
+    exe = 'dart-sass/sass'
+    exe = "#{exe}#{['', '.bat', '.exe'].find { |ext| File.exist?("#{exe}#{ext}") }}"
+
+    raise Errno::ENOENT, exe unless File.exist?(exe)
+
+    runtime = 'dart-sass/src/dart'
+    runtime = "#{runtime}#{['', '.exe'].find { |ext| File.exist?("#{runtime}#{ext}") }}"
+    snapshot = 'dart-sass/src/sass.snapshot'
+
+    command = if File.exist?(runtime) && File.exist?(snapshot)
+                [runtime, snapshot]
+              else
+                [exe]
+              end
+
+    interpreter = File.open(command[0], 'rb') do |file|
+      ELF.new(file).interpreter
+    rescue ArgumentError
+      nil
+    end
+
+    command_source = command.map do |argument|
+      "File.absolute_path('#{argument}', __dir__).freeze"
+    end.join(',
+      ')
+  rescue Errno::ENOENT
+    package = 'node_modules/sass'
+
+    script = File.join(package, SassConfig.package_json(package)['bin']['sass'])
+
+    interpreter = nil
+
+    command_source = [
+      "'node'",
+      "File.absolute_path('#{script}', __dir__).freeze"
+    ].join(',
+      ')
+  end
 
-    module Sass
-      module CLI
-        COMMAND = [#{command}].freeze
+  if interpreter.nil?
+    File.write(t.name, <<~CLI_RB)
+      # frozen_string_literal: true
+
+      module Sass
+        module CLI
+          COMMAND = [
+            #{command_source}
+          ].freeze
+        end
+
+        private_constant :CLI
       end
+    CLI_RB
+  else
+    File.write(t.name, <<~CLI_RB)
+      # frozen_string_literal: true
 
-      private_constant :CLI
-    end
-  CLI_RB
+      require_relative '../../lib/sass/elf'
+
+      module Sass
+        module CLI
+          INTERPRETER = '#{interpreter}'
+
+          INTERPRETER_SUFFIX = '/#{File.basename(interpreter)}'
+
+          COMMAND = [
+            *(ELF::INTERPRETER if ELF::INTERPRETER != INTERPRETER && ELF::INTERPRETER&.end_with?(INTERPRETER_SUFFIX)),
+            #{command_source}
+          ].freeze
+        end
+
+        private_constant :CLI
+      end
+    CLI_RB
+  end
 end
 
 file 'embedded_sass.proto' => %w[cli.rb] do |t|
-  fetch(ENV.fetch('EMBEDDED_SASS_PROTOCOL') { SassConfig.default_embedded_sass_protocol }, t.name)
+  fetch(SassConfig.embedded_sass_protocol, t.name)
 end
 
 rule '_pb.rb' => %w[.proto protoc.exe] do |t|
   sh './protoc.exe', '--proto_path=.', '--ruby_out=.', t.source
 end
 
+file 'true' do |t|
+  case Platform::CPU
+  when 'aarch64'
+    ei_class  = ELF::ELFCLASS64
+    ei_data   = ELF::ELFDATA2LSB
+    e_machine = 0xb7
+    e_flags   = 0
+
+    # 0000000000400078 <PT_LOAD#0>:
+    #   400078: d2800ba8     	mov	x8, #0x5d               // =93
+    #   40007c: d2800000     	mov	x0, #0x0                // =0
+    #   400080: d4000001     	svc	#0
+    entry_point = [0xd2800ba8, 0xd2800000, 0xd4000001].pack('L<3')
+  when 'arm'
+    ei_class  = ELF::ELFCLASS32
+    ei_data   = ELF::ELFDATA2LSB
+    e_machine = 0x28
+    e_flags   = 0x5000400
+
+    # 00400054 <PT_LOAD#0>:
+    #   400054: 2701         	movs	r7, #0x1
+    #   400056: 2000         	movs	r0, #0x0
+    #   400058: df00         	svc	#0x0
+    entry_point = [0x2701, 0x2000, 0xdf00].pack('S<3')
+  when 'riscv64'
+    ei_class  = ELF::ELFCLASS64
+    ei_data   = ELF::ELFDATA2LSB
+    e_machine = 0xf3
+    e_flags   = 0x5
+
+    # 0000000000400078 <PT_LOAD#0>:
+    #   400078: 05d00893     	li	a7, 0x5d
+    #   40007c: 4501         	li	a0, 0x0
+    #   40007e: 00000073     	ecall
+    entry_point = [0x05d00893, 0x4501, 0x00000073].pack('L<S<L<')
+  when 'x86_64'
+    ei_class  = ELF::ELFCLASS64
+    ei_data   = ELF::ELFDATA2LSB
+    e_machine = 0x3e
+    e_flags   = 0
+
+    # 0000000000400078 <PT_LOAD#0>:
+    #   400078: 31 ff                        	xorl	%edi, %edi
+    #   40007a: b8 3c 00 00 00               	movl	$0x3c, %eax
+    #   40007f: 0f 05                        	syscall
+    entry_point = %w[31ffb83c0000000f05].pack('H*')
+  when 'i386'
+    ei_class  = ELF::ELFCLASS32
+    ei_data   = ELF::ELFDATA2LSB
+    e_machine = 0x03
+    e_flags   = 0
+
+    # 00400054 <PT_LOAD#0>:
+    #   400054: 31 db                        	xorl	%ebx, %ebx
+    #   400056: b8 01 00 00 00               	movl	$0x1, %eax
+    #   40005b: cd 80                        	int	$0x80
+    entry_point = %w[31dbb801000000cd80].pack('H*')
+  else
+    raise NotImplementedError
+  end
+
+  case ei_class
+  when ELF::ELFCLASS32
+    e_ehsize    = ELF::Elf32_Ehdr.sizeof
+    e_phentsize = ELF::Elf32_Phdr.sizeof
+    e_shentsize = ELF::Elf32_Shdr.sizeof
+  when ELF::ELFCLASS64
+    e_ehsize    = ELF::Elf64_Ehdr.sizeof
+    e_phentsize = ELF::Elf64_Phdr.sizeof
+    e_shentsize = ELF::Elf64_Shdr.sizeof
+  else
+    raise EncodingError
+  end
+
+  e_phoff  = e_ehsize
+
+  p_offset = e_phoff + e_phentsize
+  p_vaddr  = (2**22) + p_offset
+  p_filesz = entry_point.length
+  p_memsz  = p_filesz
+
+  e_entry  = p_vaddr
+  e_entry += 1 if Platform::CPU == 'arm'
+
+  ELF.allocate.instance_eval do
+    @ehdr = {
+      e_ident: [127, 69, 76, 70, ei_class, ei_data, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0],
+      e_type: ELF::ET_EXEC,
+      e_machine:,
+      e_version: 1,
+      e_entry:,
+      e_phoff:,
+      e_shoff: 0,
+      e_flags:,
+      e_ehsize:,
+      e_phentsize:,
+      e_phnum: 1,
+      e_shentsize:,
+      e_shnum: 0,
+      e_shstrndx: 0
+    }
+    @phdrs = [
+      {
+        p_type: ELF::PT_LOAD,
+        p_flags: ELF::PF_R | ELF::PF_X,
+        p_offset:,
+        p_vaddr:,
+        p_paddr: 0,
+        p_filesz:,
+        p_memsz:,
+        p_align: 4096
+      }
+    ]
+    @shdrs = []
+
+    File.open(t.name, 'wb', 0o755) do |file|
+      dump(file)
+      file.write(entry_point)
+    end
+  end
+end
+
 # This is a FileUtils extension that defines several additional commands to be
 # added to the FileUtils utility functions.
 module FileUtils
@@ -102,7 +316,7 @@ module FileUtils
       entry = entries.nextElement
       name = entry.getName
       path = dest_path.resolve(name).normalize
-      raise unless path.startsWith(dest_path)
+      raise SecurityError unless path.startsWith(dest_path)
 
       Rake.rake_output_message "  inflating: #{name}" if Rake::FileUtilsExt.verbose_flag
 
@@ -138,7 +352,7 @@ module FileUtils
   def fetch(source_uri, dest_path = nil)
     require 'rubygems/remote_fetcher'
 
-    source_uri = "/#{source_uri}" if File.absolute_path?(source_uri) && !source_uri.start_with?('/')
+    source_uri = "/#{source_uri}" if !source_uri.start_with?('/') && File.absolute_path?(source_uri)
 
     source_uri = begin
       Gem::Uri.parse!(source_uri)
@@ -198,7 +412,7 @@ module FileUtils
       s.platform == platform
     end
 
-    raise if resolver_spec.nil?
+    raise Gem::UnsatisfiableDependencyError, dependency_request if resolver_spec.nil?
 
     options = { force: true, install_dir: }
     if Rake::FileUtilsExt.nowrite_flag
@@ -209,63 +423,165 @@ module FileUtils
       installer.install
     end
 
-    yield installer.dir
+    yield installer
   ensure
     rm_rf install_dir unless Rake::FileUtilsExt.nowrite_flag
   end
+
+  def gh_attestation_verify(path, repo:, hostname: 'github.com')
+    if SassConfig.development? && system('gh', 'auth', 'status', '--hostname', hostname, %i[out err] => File::NULL)
+      sh 'gh', 'attestation', 'verify', path, '--hostname', hostname, '--repo', repo
+    end
+  end
 end
 
-# The {SassConfig} module.
-module SassConfig
-  module Platform
-    OS = case RbConfig::CONFIG['host_os'].downcase
-         when /darwin/
-           'darwin'
-         when /linux-android/
-           'linux-android'
-         when /linux-musl/
-           'linux-musl'
-         when /linux-uclibc/
-           'linux-uclibc'
-         when /linux/
-           'linux'
-         when *Gem::WIN_PATTERNS
-           'windows'
-         else
-           RbConfig::CONFIG['host_os'].downcase
-         end
+# The {Platform} module.
+module Platform
+  # @see https://docs.freebsd.org/en/articles/linux-emulation/
+  # @see https://docs.freebsd.org/en/books/handbook/linuxemu/
+  module Linuxulator
+    module_function
 
-    CPU = case RbConfig::CONFIG['host_cpu'].downcase
-          when /amd64|x86_64|x64/
-            'x86_64'
-          when /i\d86|x86|i86pc/
-            'x86'
-          when /arm64|aarch64/
-            'aarch64'
-          when /arm/
-            'arm'
-          when /ppc64le|powerpc64le/
-            'powerpc64le'
-          else
-            RbConfig::CONFIG['host_cpu']
-          end
+    def enabled?
+      return false unless RbConfig::CONFIG['host_os'].include?('freebsd')
+
+      return true if defined?(Platform::OS) && Platform::OS.include?('linux')
+
+      begin
+        Rake::Task['true'].invoke unless File.exist?('true')
+      rescue NotImplementedError
+        return false
+      end
 
-    ARCH = "#{CPU}-#{OS}".freeze
+      system('./true', %i[out err] => File::NULL) == true
+    end
+
+    def host_os(root = compat_linux_emul_path)
+      return 'linux-none' unless File.symlink?(File.absolute_path('proc/self/exe', root))
+
+      if (Platform::CPU == 'aarch64' &&
+          File.exist?(File.absolute_path('lib/ld-linux-aarch64.so.1', root))) ||
+         (Platform::CPU == 'riscv64' &&
+          File.exist?(File.absolute_path('lib/ld-linux-riscv64-lp64d.so.1', root))) ||
+         (Platform::CPU == 'x86_64' &&
+          File.exist?(File.absolute_path('lib64/ld-linux-x86-64.so.2', root))) ||
+         (Platform::CPU == 'i386' &&
+          File.exist?(File.absolute_path('lib/ld-linux.so.2', root)))
+        return 'linux-gnu'
+      end
+
+      if Platform::CPU == 'arm' &&
+         File.exist?(File.absolute_path('lib/ld-linux-armhf.so.3', root))
+        return 'linux-gnueabihf'
+      end
+
+      if %w[aarch64 riscv64 x86_64 i386].include?(Platform::CPU) &&
+         File.exist?(File.absolute_path("lib/ld-musl-#{Platform::CPU}.so.1", root))
+        return 'linux-musl'
+      end
+
+      if Platform::CPU == 'arm' &&
+         File.exist?(File.absolute_path('lib/ld-musl-armhf.so.1', root))
+        return 'linux-musleabihf'
+      end
+
+      if (%w[aarch64 riscv64 x86_64].include?(Platform::CPU) &&
+          File.exist?(File.absolute_path('system/bin/linker64', root))) ||
+         (Platform::CPU == 'i386' &&
+          File.exist?(File.absolute_path('system/bin/linker', root)))
+        return 'linux-android'
+      end
+
+      if Platform::CPU == 'arm' &&
+         File.exist?(File.absolute_path('system/bin/linker', root))
+        return 'linux-androideabi'
+      end
+
+      'linux-none'
+    end
+
+    def compat_linux_emul_path
+      require 'fiddle'
+
+      lib = Fiddle.dlopen(nil)
+      sysctlbyname = Fiddle::Function.new(
+        lib['sysctlbyname'],
+        [Fiddle::TYPE_VOIDP, Fiddle::TYPE_VOIDP, Fiddle::TYPE_VOIDP, Fiddle::TYPE_VOIDP, Fiddle::TYPE_SIZE_T],
+        Fiddle::TYPE_INT
+      )
+
+      name = Fiddle::Pointer.to_ptr('compat.linux.emul_path')
+      oldp = Fiddle::NULL
+      oldlenp = Fiddle::Pointer.malloc(Fiddle::SIZEOF_SIZE_T, Fiddle::RUBY_FREE)
+      newp = Fiddle::NULL
+      newlen = 0
+      raise SystemCallError.new(nil, Fiddle.last_error) if sysctlbyname.call(name, oldp, oldlenp, newp, newlen) == -1
+
+      oldp = Fiddle::Pointer.malloc(oldlenp.ptr.to_i, Fiddle::RUBY_FREE)
+      raise SystemCallError.new(nil, Fiddle.last_error) if sysctlbyname.call(name, oldp, oldlenp, newp, newlen) == -1
+
+      oldp.to_s
+    rescue SystemCallError
+      nil
+    end
   end
 
-  private_constant :Platform
+  HOST_CPU = RbConfig::CONFIG['host_cpu'].downcase
+
+  CPU = case HOST_CPU
+        when /amd64|x86_64|x64/
+          'x86_64'
+        when /i\d86|x86|i86pc/
+          'i386'
+        when /arm64|aarch64/
+          'aarch64'
+        when /arm/
+          'arm'
+        when /ppc64le|powerpc64le/
+          'ppc64le'
+        else
+          HOST_CPU
+        end
+
+  HOST_OS = (Linuxulator.enabled? ? Linuxulator.host_os : RbConfig::CONFIG['host_os']).downcase
+
+  OS = case HOST_OS
+       when /darwin/
+         'darwin'
+       when /linux-android/
+         'linux-android'
+       when /linux-musl/
+         'linux-musl'
+       when /linux-none/
+         'linux-none'
+       when /linux-uclibc/
+         'linux-uclibc'
+       when /linux/
+         'linux'
+       when *Gem::WIN_PATTERNS
+         'windows'
+       else
+         HOST_OS
+       end
+
+  ARCH = "#{CPU}-#{OS}".freeze
+end
 
+# The {SassConfig} module.
+module SassConfig
   module_function
 
-  def dart_sass_version
+  def package_json(path = '.')
     require 'json'
 
-    spec = JSON.parse(File.read(File.absolute_path('package.json', __dir__)))
+    JSON.parse(File.read(File.absolute_path('package.json', path)))
+  end
 
-    spec['dependencies']['sass']
+  def dart_sass_version
+    package_json['dependencies']['sass']
   end
 
-  def default_dart_sass
+  def dart_sass
     repo = 'https://github.com/sass/dart-sass'
 
     tag_name = dart_sass_version
@@ -291,7 +607,7 @@ module SassConfig
          end
 
     cpu = case Platform::CPU
-          when 'x86'
+          when 'i386'
             'ia32'
           when 'x86_64'
             'x64'
@@ -310,7 +626,7 @@ module SassConfig
     "#{repo}/releases/download/#{tag_name}/dart-sass-#{tag_name}-#{os}-#{cpu}#{env}.#{ext}"
   end
 
-  def default_protoc
+  def protoc
     require 'rubygems/remote_fetcher'
 
     repo = 'https://repo.maven.apache.org/maven2/com/google/protobuf/protoc'
@@ -326,7 +642,7 @@ module SassConfig
     os = case Platform::OS
          when 'darwin'
            'osx'
-         when 'linux'
+         when 'linux', 'linux-android', 'linux-musl', 'linux-none', 'linux-uclibc'
            'linux'
          when 'windows'
            'windows'
@@ -335,13 +651,13 @@ module SassConfig
          end
 
     cpu = case Platform::CPU
-          when 'x86'
+          when 'i386'
             'x86_32'
           when 'x86_64'
             'x86_64'
           when 'aarch64'
             'aarch_64'
-          when 'powerpc64le'
+          when 'ppc64le'
             'ppcle_64'
           when 's390x'
             's390_64'
@@ -374,7 +690,7 @@ module SassConfig
     raise NotImplementedError, message
   end
 
-  def default_embedded_sass_protocol
+  def embedded_sass_protocol
     require 'json'
     require 'open3'
 
@@ -388,6 +704,8 @@ module SassConfig
     tag_name = JSON.parse(stdout)['protocolVersion']
 
     "https://github.com/sass/sass/raw/embedded-protocol-#{tag_name}/spec/embedded_sass.proto"
+  rescue StandardError # TODO: remove after https://github.com/sass/dart-sass/pull/2413
+    'https://github.com/sass/sass/raw/HEAD/spec/embedded_sass.proto'
   end
 
   def development?
@@ -401,7 +719,7 @@ module SassConfig
   end
 
   def gem_platform
-    platform = Gem::Platform.new("#{Platform::CPU}-#{RbConfig::CONFIG['host_os']}")
+    platform = Gem::Platform.new("#{Platform::CPU}-#{Platform::HOST_OS}")
     case Platform::OS
     when 'darwin'
       case platform.cpu