compliance: add unauthenticated /source route (AGPLv3 sec 13), bundle CHANGES.md

app/controllers/source_controller.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+# AGPLv3 Section 13 (network use) compliance: this route stays reachable
+# without sign-in or setup, unauthenticated, so the corresponding source
+# is available before any user interacts with the deployed instance.
+class SourceController < ApplicationController
+  skip_before_action :authenticate_user!, raise: false
+  skip_before_action :maybe_redirect_to_setup, raise: false
+  skip_authorization_check
+
+  layout 'plain'
+
+  SOURCE_REPO_URL = ENV.fetch('DID_SOURCE_REPO_URL', 'https://repo.diditvi.com/didadmin/docuseal')
+  SOURCE_COMMIT = ENV.fetch('DID_SOURCE_COMMIT', 'unknown')
+
+  def index
+    @source_repo_url = SOURCE_REPO_URL
+    @source_commit = SOURCE_COMMIT
+    @license = File.read(Rails.root.join('LICENSE'))
+    @additional_terms = File.read(Rails.root.join('LICENSE_ADDITIONAL_TERMS'))
+    @changes = File.read(Rails.root.join('CHANGES.md'))
+  end
+end

app/views/source/index.html.erb

@@ -0,0 +1,31 @@
+<div class="max-w-3xl mx-auto p-8 space-y-8">
+  <div>
+    <h1 class="text-3xl font-bold mb-2">Source Code</h1>
+    <p>
+      This is a DiD-branded build of
+      <a href="https://github.com/docusealco/docuseal" class="link" target="_blank" rel="noopener">DocuSeal</a>,
+      licensed under the GNU Affero General Public License v3 (AGPLv3).
+      In accordance with AGPLv3 Section 13, the complete corresponding source
+      for this exact running instance is published here:
+    </p>
+    <p class="mt-2">
+      <a href="<%= @source_repo_url %>" class="link link-primary text-lg" target="_blank" rel="noopener"><%= @source_repo_url %></a>
+    </p>
+    <p class="text-sm opacity-70 mt-1">Running commit: <code><%= @source_commit %></code></p>
+  </div>
+
+  <div>
+    <h2 class="text-xl font-bold mb-2">Changes from upstream</h2>
+    <pre class="whitespace-pre-wrap text-sm bg-base-200 rounded-lg p-4"><%= @changes %></pre>
+  </div>
+
+  <div>
+    <h2 class="text-xl font-bold mb-2">License (AGPLv3)</h2>
+    <pre class="whitespace-pre-wrap text-xs bg-base-200 rounded-lg p-4 max-h-96 overflow-y-auto"><%= @license %></pre>
+  </div>
+
+  <div>
+    <h2 class="text-xl font-bold mb-2">Additional Terms</h2>
+    <pre class="whitespace-pre-wrap text-sm bg-base-200 rounded-lg p-4"><%= @additional_terms %></pre>
+  </div>
+</div>