diff --git a/core/core.services.yml b/core/core.services.yml
index 6310c21..4693c46 100644
--- a/core/core.services.yml
+++ b/core/core.services.yml
@@ -1499,8 +1499,8 @@ services:
     class: Drupal\Core\Asset\CssCollectionRenderer
     arguments: [ '@state' ]
   asset.css.collection_optimizer:
-    class: Drupal\Core\Asset\CssCollectionOptimizer
-    arguments: [ '@asset.css.collection_grouper', '@asset.css.optimizer', '@asset.css.dumper', '@state' ]
+    class: Drupal\Core\Asset\CssCollectionOptimizerLazy
+    arguments: [ '@asset.css.collection_grouper', '@asset.css.optimizer', '@theme.manager' ]
   asset.css.optimizer:
     class: Drupal\Core\Asset\CssOptimizer
   asset.css.collection_grouper:
@@ -1511,8 +1511,8 @@ services:
     class: Drupal\Core\Asset\JsCollectionRenderer
     arguments: [ '@state' ]
   asset.js.collection_optimizer:
-    class: Drupal\Core\Asset\JsCollectionOptimizer
-    arguments: [ '@asset.js.collection_grouper', '@asset.js.optimizer', '@asset.js.dumper', '@state' ]
+    class: Drupal\Core\Asset\JsCollectionOptimizerLazy
+    arguments: [ '@asset.js.collection_grouper', '@asset.js.optimizer', '@theme.manager' ]
   asset.js.optimizer:
     class: Drupal\Core\Asset\JsOptimizer
   asset.js.collection_grouper:
diff --git a/core/lib/Drupal/Core/Asset/AssetCollectionGroupOptimizerInterface.php b/core/lib/Drupal/Core/Asset/AssetCollectionGroupOptimizerInterface.php
new file mode 100644
index 0000000..6a78faa
--- /dev/null
+++ b/core/lib/Drupal/Core/Asset/AssetCollectionGroupOptimizerInterface.php
@@ -0,0 +1,20 @@
+<?php
+
+namespace Drupal\Core\Asset;
+
+/**
+ * Interface defining a service that optimizes a collection of assets.
+ */
+interface AssetCollectionGroupOptimizerInterface extends AssetCollectionOptimizerInterface {
+
+  /**
+   * Optimizes a specific group assets.
+   *
+   * @param array $group
+   *   An asset group.
+   *
+   * @return array
+   *   The optimized string for the group.
+   */
+  public function optimizeGroup(array $group);
+}
diff --git a/core/lib/Drupal/Core/Asset/AssetCollectionOptimizerInterface.php b/core/lib/Drupal/Core/Asset/AssetCollectionOptimizerInterface.php
index 526acf5..249db77 100644
--- a/core/lib/Drupal/Core/Asset/AssetCollectionOptimizerInterface.php
+++ b/core/lib/Drupal/Core/Asset/AssetCollectionOptimizerInterface.php
@@ -23,6 +23,8 @@ public function optimize(array $assets);
    *
    * @return string[]
    *   URIs for all optimized asset collection assets.
+   *
+   * @deprecated as off Drupal 8.3.x, will be removed before 9.0.0
    */
   public function getAll();
 
diff --git a/core/lib/Drupal/Core/Asset/AssetDumper.php b/core/lib/Drupal/Core/Asset/AssetDumper.php
index 227ef0c..7c3afdd 100644
--- a/core/lib/Drupal/Core/Asset/AssetDumper.php
+++ b/core/lib/Drupal/Core/Asset/AssetDumper.php
@@ -7,7 +7,7 @@
 /**
  * Dumps a CSS or JavaScript asset.
  */
-class AssetDumper implements AssetDumperInterface {
+class AssetDumper implements AssetDumperUriInterface {
 
   /**
    * {@inheritdoc}
@@ -17,12 +17,19 @@ class AssetDumper implements AssetDumperInterface {
    * browsers to download new CSS when the CSS changes.
    */
   public function dump($data, $file_extension) {
+    $path = 'public://' . $file_extension;
     // Prefix filename to prevent blocking by firewalls which reject files
     // starting with "ad*".
     $filename = $file_extension . '_' . Crypt::hashBase64($data) . '.' . $file_extension;
-    // Create the css/ or js/ path within the files folder.
-    $path = 'public://' . $file_extension;
     $uri = $path . '/' . $filename;
+    return $this->dumpToUri($data, $file_extension, $uri);
+  }
+
+  /**
+   * {@inheritdoc}
+   */
+  public function dumpToUri($data, $file_extension, $uri) {
+    $path = 'public://' . $file_extension;
     // Create the CSS or JS file.
     file_prepare_directory($path, FILE_CREATE_DIRECTORY);
     if (!file_exists($uri) && !file_unmanaged_save_data($data, $uri, FILE_EXISTS_REPLACE)) {
diff --git a/core/lib/Drupal/Core/Asset/AssetGroupSetHashTrait.php b/core/lib/Drupal/Core/Asset/AssetGroupSetHashTrait.php
new file mode 100644
index 0000000..e9f41cd
--- /dev/null
+++ b/core/lib/Drupal/Core/Asset/AssetGroupSetHashTrait.php
@@ -0,0 +1,28 @@
+<?php
+
+namespace Drupal\Core\Asset;
+
+/**
+ * Provides a method to generate a normalized hash of a given asset group set.
+ */
+trait AssetGroupSetHashTrait {
+
+  /**
+   * Generate a hash for an asset group set.
+   *
+   * @param array $groups
+   *   A set of asset groups.
+   *
+   * @return string
+   *   A hash to uniquely identify the set.
+   */
+  protected function generateHash(array $groups) {
+    $normalized = $groups;
+    foreach ($normalized as $order => $group) {
+      foreach ($group['items'] as $key => $asset) {
+        unset($normalized[$order]['items'][$key]['weight']);
+      }
+    }
+    return hash('sha256', serialize($normalized));
+  }
+}
diff --git a/core/lib/Drupal/Core/Asset/AssetResolver.php b/core/lib/Drupal/Core/Asset/AssetResolver.php
index 9e1bcce..003d88c 100644
--- a/core/lib/Drupal/Core/Asset/AssetResolver.php
+++ b/core/lib/Drupal/Core/Asset/AssetResolver.php
@@ -148,6 +148,7 @@ public function getCssAssets(AttachedAssetsInterface $assets, $optimize) {
           // Always add a tiny value to the weight, to conserve the insertion
           // order.
           $options['weight'] += count($css) / 1000;
+          $options['library'] = $library;
 
           // CSS files are being keyed by the full path.
           $css[$options['data']] = $options;
@@ -264,6 +265,7 @@ public function getJsAssets(AttachedAssetsInterface $assets, $optimize) {
             // Always add a tiny value to the weight, to conserve the insertion
             // order.
             $options['weight'] += count($javascript) / 1000;
+            $options['library'] = $library;
 
             // Local and external files must keep their name as the associative
             // key so the same JavaScript file is not added twice.
diff --git a/core/lib/Drupal/Core/Asset/CssCollectionOptimizer.php b/core/lib/Drupal/Core/Asset/CssCollectionOptimizer.php
index eb47cb2..a27b009 100644
--- a/core/lib/Drupal/Core/Asset/CssCollectionOptimizer.php
+++ b/core/lib/Drupal/Core/Asset/CssCollectionOptimizer.php
@@ -8,6 +8,7 @@
  * Optimizes CSS assets.
  */
 class CssCollectionOptimizer implements AssetCollectionOptimizerInterface {
+  use CssCollectionOptimizerTrait;
 
   /**
    * A CSS asset grouper.
@@ -104,19 +105,7 @@ public function optimize(array $css_assets) {
               $uri = $map[$key];
             }
             if (empty($uri) || !file_exists($uri)) {
-              // Optimize each asset within the group.
-              $data = '';
-              foreach ($css_group['items'] as $css_asset) {
-                $data .= $this->optimizer->optimize($css_asset);
-              }
-              // Per the W3C specification at
-              // http://www.w3.org/TR/REC-CSS2/cascade.html#at-import, @import
-              // rules must precede any other style, so we move those to the
-              // top.
-              $regexp = '/@import[^;]+;/i';
-              preg_match_all($regexp, $data, $matches);
-              $data = preg_replace($regexp, '', $data);
-              $data = implode('', $matches[0]) . $data;
+              $data = $this->optimizeGroup($css_group);
               // Dump the optimized CSS for this group into an aggregate file.
               $uri = $this->dumper->dump($data, 'css');
               // Set the URI for this group's aggregate file.
@@ -169,19 +158,4 @@ public function getAll() {
     return $this->state->get('drupal_css_cache_files');
   }
 
-  /**
-   * {@inheritdoc}
-   */
-  public function deleteAll() {
-    $this->state->delete('drupal_css_cache_files');
-
-    $delete_stale = function($uri) {
-      // Default stale file threshold is 30 days.
-      if (REQUEST_TIME - filemtime($uri) > \Drupal::config('system.performance')->get('stale_file_threshold')) {
-        file_unmanaged_delete($uri);
-      }
-    };
-    file_scan_directory('public://css', '/.*/', array('callback' => $delete_stale));
-  }
-
 }
diff --git a/core/lib/Drupal/Core/Asset/CssCollectionOptimizerTrait.php b/core/lib/Drupal/Core/Asset/CssCollectionOptimizerTrait.php
new file mode 100644
index 0000000..d4788b4
--- /dev/null
+++ b/core/lib/Drupal/Core/Asset/CssCollectionOptimizerTrait.php
@@ -0,0 +1,55 @@
+<?php
+
+namespace Drupal\Core\Asset;
+
+/**
+ * Optimizes CSS assets.
+ */
+trait CssCollectionOptimizerTrait {
+
+  /**
+   * The CSS asset optimizer.
+   *
+   * @var \Drupal\Core\Asset\CssOptimizer
+   */
+  protected $optimizer;
+
+  /**
+   * Optimizes a specific group assets.
+   *
+   * @param array $group
+   *   An asset group.
+   *
+   * @return array
+   *   The optimized string for the group.
+   */
+  public function optimizeGroup(array $group) {
+    // Optimize each asset within the group.
+    $data = '';
+    foreach ($group['items'] as $asset) {
+      $data .= $this->optimizer->optimize($asset);
+    }
+    // Per the W3C specification at
+    // http://www.w3.org/TR/REC-CSS2/cascade.html#at-import, @import
+    // rules must precede any other style, so we move those to the
+    // top.
+    $regexp = '/@import[^;]+;/i';
+    preg_match_all($regexp, $data, $matches);
+    $data = preg_replace($regexp, '', $data);
+    return implode('', $matches[0]) . $data;
+  }
+
+  /**
+   * Deletes all optimized asset collections assets.
+   */
+  public function deleteAll() {
+    $delete_stale = function($uri) {
+      // Default stale file threshold is 30 days.
+      if (REQUEST_TIME - filemtime($uri) > \Drupal::config('system.performance')->get('stale_file_threshold')) {
+        file_unmanaged_delete($uri);
+      }
+    };
+    file_scan_directory('public://css', '/.*/', array('callback' => $delete_stale));
+  }
+
+}
diff --git a/core/lib/Drupal/Core/Asset/JsCollectionOptimizer.php b/core/lib/Drupal/Core/Asset/JsCollectionOptimizer.php
index 566722d..4d996a3 100644
--- a/core/lib/Drupal/Core/Asset/JsCollectionOptimizer.php
+++ b/core/lib/Drupal/Core/Asset/JsCollectionOptimizer.php
@@ -9,6 +9,7 @@
  * Optimizes JavaScript assets.
  */
 class JsCollectionOptimizer implements AssetCollectionOptimizerInterface {
+  use JsCollectionOptimizerTrait;
 
   /**
    * A JS asset grouper.
@@ -105,22 +106,7 @@ public function optimize(array $js_assets) {
               $uri = $map[$key];
             }
             if (empty($uri) || !file_exists($uri)) {
-              // Concatenate each asset within the group.
-              $data = '';
-              foreach ($js_group['items'] as $js_asset) {
-                // Optimize this JS file, but only if it's not yet minified.
-                if (isset($js_asset['minified']) && $js_asset['minified']) {
-                  $data .= file_get_contents($js_asset['data']);
-                }
-                else {
-                  $data .= $this->optimizer->optimize($js_asset);
-                }
-                // Append a ';' and a newline after each JS file to prevent them
-                // from running together.
-                $data .= ";\n";
-              }
-              // Remove unwanted JS code that cause issues.
-              $data = $this->optimizer->clean($data);
+              $data = $this->optimizeGroup($js_group);
               // Dump the optimized JS for this group into an aggregate file.
               $uri = $this->dumper->dump($data, 'js');
               // Set the URI for this group's aggregate file.
@@ -173,18 +159,4 @@ public function getAll() {
     return $this->state->get('system.js_cache_files');
   }
 
-  /**
-   * {@inheritdoc}
-   */
-  public function deleteAll() {
-    $this->state->delete('system.js_cache_files');
-    $delete_stale = function($uri) {
-      // Default stale file threshold is 30 days.
-      if (REQUEST_TIME - filemtime($uri) > \Drupal::config('system.performance')->get('stale_file_threshold')) {
-        file_unmanaged_delete($uri);
-      }
-    };
-    file_scan_directory('public://js', '/.*/', array('callback' => $delete_stale));
-  }
-
 }
diff --git a/core/lib/Drupal/Core/Asset/JsCollectionOptimizerLazy.php b/core/lib/Drupal/Core/Asset/JsCollectionOptimizerLazy.php
new file mode 100644
index 0000000..cff1978
--- /dev/null
+++ b/core/lib/Drupal/Core/Asset/JsCollectionOptimizerLazy.php
@@ -0,0 +1,130 @@
+<?php
+
+namespace Drupal\Core\Asset;
+
+use \Drupal\Component\Utility\UrlHelper;
+use \Drupal\Core\Theme\ThemeManagerInterface;
+
+/**
+ * Optimizes JavaScript assets.
+ */
+class JsCollectionOptimizerLazy implements AssetCollectionGroupOptimizerInterface {
+  use AssetGroupSetHashTrait;
+  use JsCollectionOptimizerTrait;
+
+  /**
+   * A JS asset grouper.
+   *
+   * @var \Drupal\Core\Asset\JsCollectionGrouperInterface
+   */
+  protected $grouper;
+
+  /**
+   * The theme manager.
+   *
+   * @var \Drupal\Core\Theme\ThemeManagerInterface
+   */
+  protected $themeManager;
+
+  /**
+   * Constructs a JsCollectionOptimizer.
+   *
+   * @param \Drupal\Core\Asset\AssetCollectionGrouperInterface $grouper
+   *   The grouper for JS assets.
+   * @param \Drupal\Core\Asset\AssetOptimizerInterface
+   *   The asset optimizer.
+   * @param \Drupal\Core\Theme\ThemeManagerInterface;
+   *   The theme manger.
+   */
+  public function __construct(AssetCollectionGrouperInterface $grouper, AssetOptimizerInterface $optimizer, ThemeManagerInterface $theme_manager) {
+    $this->grouper = $grouper;
+    $this->optimizer = $optimizer;
+    $this->themeManager = $theme_manager;
+  }
+
+  /**
+   * {@inheritdoc}
+   *
+   * File names are generated based on library/asset definitions. This includes
+   * a hash of the assets and the group index. Additionally the full set of
+   * libraries, already loaded libraries and theme are sent as query parameters
+   * to allow a PHP controller to generate a valid file with sufficient
+   * information. Files are not generated by this method since they're assumed
+   * to be successfully returned from the URL created whether on disk or not.
+   */
+  public function optimize(array $js_assets) {
+    // Group the assets.
+    $js_groups = $this->grouper->group($js_assets);
+    $key = $this->generateHash($js_groups);
+
+    $js_assets = array();
+    $libraries = [];
+    foreach ($js_groups as $order => $js_group) {
+      // We have to return a single asset, not a group of assets. It is now up
+      // to one of the pieces of code in the switch statement below to set the
+      // 'data' property to the appropriate value.
+      $js_assets[$order] = $js_group;
+      unset($js_assets[$order]['items']);
+
+      switch ($js_group['type']) {
+        case 'file':
+          // No preprocessing, single JS asset: just use the existing URI.
+          if (!$js_group['preprocess']) {
+            $uri = $js_group['items'][0]['data'];
+            $js_assets[$order]['data'] = $uri;
+          }
+          else {
+            // To reproduce the full context of assets outside of the request,
+            // we must know the entire set of libraries used to generate all CSS
+            // groups, whether or not files in a group are from a particular
+            // library or not.
+            foreach ($js_group['items'] as $js_asset) {
+              $libraries[$js_asset['library']] = $js_asset['library'];
+            }
+            $js_assets[$order]['preprocessed'] = TRUE;
+          }
+          break;
+
+        case 'external':
+          // We don't do any aggregation and hence also no caching for external
+          // JS assets.
+          $uri = $js_group['items'][0]['data'];
+          $js_assets[$order]['data'] = $uri;
+          break;
+        case 'setting':
+          $js_assets[$order]['data'] = $js_group['data'];
+          break;
+      }
+    }
+    if ($libraries) {
+      // Generate a URL for the group, but do not process it inline, this is
+      // done by \Drupal\system\controller\JsAssetController
+      $minimal_set = \Drupal::service('library.dependency_resolver')->getMinimalRepresentativeSubset($libraries);
+      $theme_name = $this->themeManager->getActiveTheme()->getName();
+      $ajax_page_state = \Drupal::request()->get('ajax_page_state');
+      $already_loaded = isset($ajax_page_state) ? explode(',', $ajax_page_state['libraries']) : [];
+      $minimal_already_loaded_set = \Drupal::service('library.dependency_resolver')->getMinimalRepresentativeSubset($already_loaded);
+      $header_query = UrlHelper::buildQuery(['libraries' => $minimal_set, 'theme' => $theme_name, 'already_loaded' => $minimal_already_loaded_set, 'scope'  => 'header']);
+      $footer_query = UrlHelper::buildQuery(['libraries' => $minimal_set, 'theme' => $theme_name, 'already_loaded' => $minimal_already_loaded_set, 'scope'  => 'footer']);
+      $path = 'public://' . 'js';
+      foreach ($js_assets as $order => $js_asset) {
+        if (!empty($js_asset['preprocessed'])) {
+          $query = $js_asset['scope'] == 'header' ? $header_query : $footer_query;
+          $filename = 'js' . '_' . $order . '_' . $key . '.' . 'js';
+          $uri = $path . '/' . $filename;
+          $js_assets[$order]['data'] = file_create_url($uri) . '?' . $query;
+        }
+      }
+    }
+
+    return $js_assets;
+  }
+
+  /**
+   * {@inheritdoc}
+   */
+  public function getAll() {
+    return [];
+  }
+
+}
diff --git a/core/lib/Drupal/Core/Asset/JsCollectionOptimizerTrait.php b/core/lib/Drupal/Core/Asset/JsCollectionOptimizerTrait.php
new file mode 100644
index 0000000..cdd66ec
--- /dev/null
+++ b/core/lib/Drupal/Core/Asset/JsCollectionOptimizerTrait.php
@@ -0,0 +1,57 @@
+<?php
+
+namespace Drupal\Core\Asset;
+
+/**
+ * Optimizes JavaScript assets.
+ */
+trait JsCollectionOptimizerTrait {
+
+  /**
+   * A JS asset optimizer.
+   *
+   * @var \Drupal\Core\Asset\AssetOptimizerInterface
+   */
+  protected $optimizer;
+
+  /**
+   * Optimizes a specific group assets.
+   *
+   * @param array $group
+   *   An asset group.
+   *
+   * @return array
+   *   The optimized string for the group.
+   */
+  public function optimizegroup(array $group) {
+    $data = '';
+    foreach ($group['items'] as $js_asset) {
+      // Optimize this JS file, but only if it's not yet minified.
+      if (isset($js_asset['minified']) && $js_asset['minified']) {
+        $data .= file_get_contents($js_asset['data']);
+      }
+      else {
+        $data .= $this->optimizer->optimize($js_asset);
+      }
+      // Append a ';' and a newline after each JS file to prevent them
+      // from running together.
+      $data .= ";\n";
+    }
+    // Remove unwanted JS code that cause issues.
+    return $this->optimizer->clean($data);
+  }
+
+  /**
+   * Deletes all optimized asset collections assets.
+   */
+  public function deleteAll() {
+    $delete_stale = function($uri) {
+      // Default stale file threshold is 30 days.
+      if (REQUEST_TIME - filemtime($uri) > \Drupal::config('system.performance')->get('stale_file_threshold')) {
+        file_unmanaged_delete($uri);
+      }
+    };
+    file_scan_directory('public://js', '/.*/', array('callback' => $delete_stale));
+  }
+
+}
diff --git a/core/modules/system/src/Controller/AssetControllerBase.php b/core/modules/system/src/Controller/AssetControllerBase.php
new file mode 100644
index 0000000..9544605
--- /dev/null
+++ b/core/modules/system/src/Controller/AssetControllerBase.php
@@ -0,0 +1,249 @@
+<?php
+
+namespace Drupal\system\Controller;
+
+use Drupal\Component\Utility\Crypt;
+use Drupal\Core\Asset\AssetCollectionGrouperInterface;
+use Drupal\Core\Asset\AssetCollectionOptimizerInterface;
+use Drupal\Core\Asset\AssetDumperUriInterface;
+use Drupal\Core\Asset\AssetGroupSetHashTrait;
+use Drupal\Core\Asset\AssetResolverInterface;
+use Drupal\Core\Asset\AttachedAssets;
+use Drupal\Core\Asset\AttachedAssetsInterface;
+use Drupal\Core\Asset\LibraryDependencyResolverInterface;
+use Drupal\Core\Theme\ThemeInitializationInterface;
+use Drupal\Core\Theme\ThemeManagerInterface;
+use Drupal\system\FileDownloadController;
+use Symfony\Component\HttpFoundation\BinaryFileResponse;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\HttpKernel\Exception\BadRequestHttpException;
+
+/**
+ * Defines a controller to serve asset aggregates.
+ */
+abstract class AssetControllerBase extends FileDownloadController {
+  use AssetGroupSetHashTrait;
+
+  /**
+   * The library dependency resolver.
+   *
+   * @var \Drupal\Core\Asset\LibraryDependencyResolverInterface
+   */
+  protected $libraryDependencyResolver;
+
+  /**
+   * The Asset Resolver.
+   *
+   * @var \Drupal\Core\Asset\AssetResolverInterface
+   */
+  protected $assetResolver;
+
+  /**
+   * The Theme Initialization.
+   *
+   * @var Drupal\Core\Theme\ThemeInitializationInterface;
+   */
+  protected $themeInitialization;
+
+  /**
+   * The theme manager.
+   *
+   * @var Drupal\Core\Theme\ThemeManagerInterface;
+   */
+  protected $themeManager;
+
+  /**
+   * An asset collection grouper.
+   *
+   * @var Drupal\Core\Asset\AssetCollectionGrouperInterface
+   */
+  protected $grouper;
+
+  /**
+   * An asset collection optimizer.
+   *
+   * @var \Drupal\Core\Asset\AssetCollectionOptimizerInterface
+   */
+  protected $optimizer;
+
+  /**
+   * An asset dumper.
+   *
+   * @var \Drupal\Core\Asset\AssetDumperUriInterface
+   */
+  protected $dumper;
+
+  /**
+   * The asset type.
+   *
+   * @var string
+   */
+  protected $assetType;
+
+  /**
+   * The aggregate file extension.
+   *
+   * @var string
+   */
+  protected $fileExtension;
+
+  /**
+   * The asset aggregate content type to send as Content-Type header.
+   *
+   * @var string
+   */
+  protected $contentType;
+
+  /**
+   * The cache control header to use.
+   */
+  protected $cacheControl = 'private, no-store';
+
+  /**
+   * Constructs a CssAssetController object.
+   *
+   * @param \Drupal\Core\Asset\LibraryDependencyResolverInterface
+   *    The library dependency resolver.
+   * @param \Drupal\Core\Asset\AssetResolverInterface
+   *   The Asset resolver.
+   * @param \Drupal\Core\Theme\ThemeInitializationInterface
+   *   The theme initializer.
+   * @param \Drupal\Core\Theme\ThemeManagerInterface
+   *   The theme manager.
+   * @param \Drupal\Core\Asset\AssetCollectionGrouperInterface
+   *   The asset grouper.
+   * @param \Drupal\Core\Asset\AssetCollectionOptimizerInterface
+   *   The asset collection optimizer.
+   * @param \Drupal\Core\Asset\AssetDumperUriInterface
+   *   The asset dumper.
+   */
+  public function __construct(LibraryDependencyResolverInterface $library_dependency_resolver, AssetResolverInterface $asset_resolver, ThemeInitializationInterface $theme_initialization, ThemeManagerInterface $theme_manager, AssetCollectionGrouperInterface $grouper, AssetCollectionOptimizerInterface $optimizer, AssetDumperUriInterface $dumper) {
+    $this->libraryDependencyResolver = $library_dependency_resolver;
+    $this->assetResolver = $asset_resolver;
+    $this->themeInitialization = $theme_initialization;
+    $this->themeManager = $theme_manager;
+    $this->grouper = $grouper;
+    $this->optimizer = $optimizer;
+    $this->dumper = $dumper;
+    $this->fileExtension = $this->assetType;
+  }
+
+  /**
+   * Generates a CSS aggregate, given a filename.
+   *
+   * @param \Symfony\Component\HttpFoundation\Request $request
+   *   The request object.
+   * @param $file_name
+   *   The file to deliver.
+   *
+   * @return \Symfony\Component\HttpFoundation\BinaryFileResponse|\Symfony\Component\HttpFoundation\Response
+   *   The transferred file as response or some error response.
+   *
+   * @throws \Symfony\Component\HttpKernel\Exception\BadRequestHttpException
+   *   Thrown when the filename is invalid.
+   */
+  public function deliver(Request $request, $file_name) {
+    if (!$request->query->has('theme')) {
+      throw new BadRequestHttpException('The theme must be passed as a query argument');
+    }
+
+    $file_parts = explode('_', basename($file_name, '.' . $this->fileExtension));
+    // The group delta is the second segment of the filename and the hash is the
+    // third segment. If either are not there, then the filename is invalid.
+    if (!isset($file_parts[1]) || !is_numeric($file_parts[1]) || !isset($file_parts[2])) {
+      throw new BadRequestHttpException('Invalid filename');
+    }
+    $group_delta = $file_parts[1];
+
+    $theme = $request->query->get('theme');
+    $active_theme = $this->themeInitialization->initTheme($theme);
+    $this->themeManager->setActiveTheme($active_theme);
+
+    // While the libraries are taken from the query parameter, the URL as a
+    // whole is validated against a hash of the CSS assets later on.
+    $attached_assets = new AttachedAssets();
+    $attached_assets->setLibraries($request->query->get('libraries'));
+    if ($request->query->has('already_loaded')) {
+      $attached_assets->setAlreadyLoadedLibraries($request->query->get('already_loaded'));
+    }
+    $group = $this->getGroup($attached_assets, $group_delta, $request);
+    $key = $this->generateHash($group);
+    $hash = $file_parts[2];
+
+    // The hash from the library definitions in code may not match the hash from
+    // the URL. This can be for three reasons:
+    // 1. Someone has requested an outdated URL, i.e. from a cached page, which
+    // matches a different version of the code base.
+    // 2. Someone has requrested an outdated URL during a deployment. This is
+    // the same case as #1 but a much shorter window.
+    // 3. Someone is attempting to craft an invalid URL in order to conduct a
+    // denial of service attack on the site.
+    //
+    // @todo: we could potentially hash the library definitions with the secret
+    // key to create an HMAC, so that only valid combinations of libraries are
+    // allowed.
+    // For now treat all of these the same, but if there's no match, don't write
+    // to the filesystem.
+    $match = TRUE;
+
+    $uri = 'public://' . $this->assetType . '/' . $file_name;
+    if ($key !== $hash) {
+      // The file requested may have been written to disk by the time we got
+      // here. If it hasn't, and the hashes don't match, it's possible that a
+      // file matching the code base for this request already exists on disk, so
+      // use the filename matching this code base, not the one that generated
+      // the original filename for the request.
+      if (!file_exists($uri)) {
+        $uri = 'public://' . $this->assetType . '/' . $this->assetType . '_' . $group_delta . '_' . $hash . '.' . $this->fileExtension;
+      }
+      // Either way, we didn't get a match.
+      $match = FALSE;
+    }
+    $headers = [
+      'Content-Type' => $this->contentType,
+      // Headers sent from PHP can never perfectly match those sent when the
+      // file is served by the filesystem, so ensure this request does not get
+      // cached in either the browser or reverse proxies. Subsequent requests
+      // for the file will be served from disk and be cached. This is done to
+      // avoid situations such as where one CDN endpoint is serving a version
+      // cached from PHP, while another is serving a version cached from disk.
+      // Should there be any discrepancy in behaviour between those files, this
+      // can make debugging very difficult.
+      'Cache-control' => $this->cacheControl,
+    ];
+
+    if (!file_exists($uri)) {
+      $data = $this->optimizer->optimizeGroup($group);
+      // Dump the optimized CSS for this group into an aggregate file.
+      if ($match) {
+        $uri = $this->dumper->dump($data, $this->assetType, $uri);
+      }
+      $headers = [
+        'Content-Type' => $this->contentType,
+        'Cache-control' => $this->cacheControl,
+      ];
+      // Generate response.
+      $response = new Response($data, 200, $headers);
+      return $response;
+    }
+    else {
+      return new BinaryFileResponse($uri, 200, $headers);
+    }
+  }
+
+  /**
+   * Get assets of a certain type given attached assets.
+   *
+   * @param AttachedAssetsInterface $attached_assets
+   *   An object implementing AttachedAssetsInterface
+   *  @param int $group_delta
+   *    The group delta.
+   *  @param Symfony\Component\HttpFoundation\Request
+   *    The current request.
+   *
+   * @return []
+   *   The correct asset group matching $group_delta.
+   */
+  abstract protected function getGroup(AttachedAssetsInterface $attached_assets, $group_delta, $request);
+}
diff --git a/core/modules/system/src/Controller/CssAssetController.php b/core/modules/system/src/Controller/CssAssetController.php
new file mode 100644
index 0000000..cab803c
--- /dev/null
+++ b/core/modules/system/src/Controller/CssAssetController.php
@@ -0,0 +1,55 @@
+<?php
+
+namespace Drupal\system\Controller;
+
+use Symfony\Component\DependencyInjection\ContainerInterface;
+use Symfony\Component\HttpKernel\Exception\BadRequestHttpException;
+
+use Drupal\Core\Asset\AttachedAssetsInterface;
+use Drupal\Core\Asset\AssetGroupSetHashTrait;
+
+/**
+ * Defines a controller to serve CSS aggregates.
+ */
+class CssAssetController extends AssetControllerBase {
+  use AssetGroupSetHashTrait;
+
+  /**
+   * {@inheritdoc}
+   */
+  public function __construct($library_dependency_resolver, $asset_resolver, $theme_initialization, $theme_manager, $grouper, $optimizer, $dumper) {
+    $this->contentType = 'text/css';
+    $this->assetType = 'css';
+    parent::__construct($library_dependency_resolver, $asset_resolver, $theme_initialization, $theme_manager, $grouper, $optimizer, $dumper);
+  }
+
+  /**
+   * {@inheritdoc}
+   */
+  public static function create(ContainerInterface $container) {
+    return new static(
+      $container->get('library.dependency_resolver'),
+      $container->get('asset.resolver'),
+      $container->get('theme.initialization'),
+      $container->get('theme.manager'),
+      $container->get('asset.css.collection_grouper'),
+      $container->get('asset.css.collection_optimizer'),
+      $container->get('asset.css.dumper')
+    );
+  }
+
+  /**
+   * {@inheritdoc}
+   */
+  protected function getGroup(AttachedAssetsInterface $attached_assets, $group_delta, $request) {
+    $assets = $this->assetResolver->getCssAssets($attached_assets, FALSE);
+
+    // Group the assets.
+    $groups = $this->grouper->group($assets);
+    if (!isset($groups[$group_delta])) {
+      throw new BadRequestHttpException('Invalid filename.');
+    }
+    return $groups[$group_delta];
+  }
+
+}
diff --git a/core/modules/system/src/Controller/JsAssetController.php b/core/modules/system/src/Controller/JsAssetController.php
new file mode 100644
index 0000000..138f4a4
--- /dev/null
+++ b/core/modules/system/src/Controller/JsAssetController.php
@@ -0,0 +1,67 @@
+<?php
+
+namespace Drupal\system\Controller;
+
+use Symfony\Component\DependencyInjection\ContainerInterface;
+use Symfony\Component\HttpKernel\Exception\BadRequestHttpException;
+
+use Drupal\Core\Asset\AttachedAssetsInterface;
+use Drupal\Core\Asset\AssetGroupSetHashTrait;
+
+/**
+ * Defines a controller to serve Javascript aggregates.
+ */
+class JsAssetController extends AssetControllerBase {
+
+  use AssetGroupSetHashTrait;
+
+  /**
+   * {@inheritdoc}
+   */
+  public function __construct($library_dependency_resolver, $asset_resolver, $theme_initialization, $theme_manager, $grouper, $optimizer, $dumper) {
+    $this->contentType = 'application/javascript';
+    $this->assetType = 'js';
+    parent::__construct($library_dependency_resolver, $asset_resolver, $theme_initialization, $theme_manager, $grouper, $optimizer, $dumper);
+  }
+
+  /**
+   * {@inheritdoc}
+   */
+  public static function create(ContainerInterface $container) {
+    return new static(
+      $container->get('library.dependency_resolver'),
+      $container->get('asset.resolver'),
+      $container->get('theme.initialization'),
+      $container->get('theme.manager'),
+      $container->get('asset.js.collection_grouper'),
+      $container->get('asset.js.collection_optimizer'),
+      $container->get('asset.js.dumper')
+    );
+  }
+
+  /**
+   * {@inheritdoc}
+   */
+  protected function getGroup(AttachedAssetsInterface $attached_assets, $group_delta, $request) {
+    // The header and footer scripts are two distinct sets of asset groups. The
+    // $group_key is not sufficient to find the group, we also need to locate it
+    // within either the header or footer set.
+    list($js_assets_header, $js_assets_footer) = $this->assetResolver->getJsAssets($attached_assets, FALSE);
+    $scope = $request->get('scope');
+    if (!isset($scope)) {
+      throw new BadRequestHttpException('The URL must have a scope query argument.');
+    }
+    $assets = $scope == 'header' ? $js_assets_header : $js_assets_footer;
+    // While the asset resolver will find setting, these are never aggregated,
+    // so filter them out. Settings are always in the header.
+    unset($assets['drupalSettings']);
+    // Group the assets.
+    $groups = $this->grouper->group($assets);
+    if (!isset($groups[$group_delta])) {
+      throw new BadRequestHttpException('Invalid filename.');
+    }
+    $group = $groups[$group_delta];
+    return $group;
+  }
+
+}
diff --git a/core/modules/system/src/Routing/AssetRoutes.php b/core/modules/system/src/Routing/AssetRoutes.php
new file mode 100644
index 0000000..4a46446
--- /dev/null
+++ b/core/modules/system/src/Routing/AssetRoutes.php
@@ -0,0 +1,80 @@
+<?php
+
+/**
+ * @file
+ * Contains \Drupal\system\Routing\AssetRoutes.
+ */
+
+namespace Drupal\system\Routing;
+
+use Drupal\Core\DependencyInjection\ContainerInjectionInterface;
+use Drupal\Core\StreamWrapper\StreamWrapperManagerInterface;
+use Symfony\Component\DependencyInjection\ContainerInterface;
+use Symfony\Component\Routing\Route;
+
+/**
+ * Defines a routes callback  to register a url for serving assets.
+ */
+class AssetRoutes implements ContainerInjectionInterface {
+
+  /**
+   * The stream wrapper manager service.
+   *
+   * @var \Drupal\Core\StreamWrapper\StreamWrapperManagerInterface
+   */
+  protected $streamWrapperManager;
+
+  /**
+   * Constructs an asset routes object.
+   *
+   * @param \Drupal\Core\StreamWrapper\StreamWrapperManagerInterface $stream_wrapper_manager
+   *   The stream wrapper manager service.
+   */
+  public function __construct(StreamWrapperManagerInterface $stream_wrapper_manager) {
+    $this->streamWrapperManager = $stream_wrapper_manager;
+  }
+
+  /**
+   * {@inheritdoc}
+   */
+  public static function create(ContainerInterface $container) {
+    return new static(
+      $container->get('stream_wrapper_manager')
+    );
+  }
+
+  /**
+   * Returns an array of route objects.
+   *
+   * @return \Symfony\Component\Routing\Route[]
+   *   An array of route objects.
+   */
+  public function routes() {
+    $routes = array();
+    // Generate assets. If clean URLs are disabled image derivatives will always
+    // be served through the routing system. If clean URLs are enabled and the
+    // image derivative already exists, PHP will be bypassed.
+    $directory_path = $this->streamWrapperManager->getViaScheme('public')->getDirectoryPath();
+
+    $routes['system.css_asset'] = new Route(
+      '/' . $directory_path . '/css/{file_name}',
+      array(
+        '_controller' => 'Drupal\system\Controller\CssAssetController::deliver',
+      ),
+      array(
+        '_access' => 'TRUE',
+      )
+    );
+    $routes['system.js_asset'] = new Route(
+      '/' . $directory_path . '/js/{file_name}',
+      array(
+        '_controller' => 'Drupal\system\Controller\JsAssetController::deliver',
+      ),
+      array(
+        '_access' => 'TRUE',
+      )
+    );
+    return $routes;
+  }
+
+}
diff --git a/core/modules/system/system.routing.yml b/core/modules/system/system.routing.yml
index ae89fb0..54accc5 100644
--- a/core/modules/system/system.routing.yml
+++ b/core/modules/system/system.routing.yml
@@ -507,3 +507,6 @@ system.csrftoken:
     _controller: '\Drupal\system\Controller\CsrfTokenController::csrfToken'
   requirements:
     _access: 'TRUE'
+
+route_callbacks:
+  - '\Drupal\system\Routing\AssetRoutes::routes'
