compliance: add unauthenticated /source route (AGPLv3 sec 13), bundle CHANGES.md

app/views/source/index.html.erb

@@ -0,0 +1,31 @@
+<div class="max-w-3xl mx-auto p-8 space-y-8">
+  <div>
+    <h1 class="text-3xl font-bold mb-2">Source Code</h1>
+    <p>
+      This is a DiD-branded build of
+      <a href="https://github.com/docusealco/docuseal" class="link" target="_blank" rel="noopener">DocuSeal</a>,
+      licensed under the GNU Affero General Public License v3 (AGPLv3).
+      In accordance with AGPLv3 Section 13, the complete corresponding source
+      for this exact running instance is published here:
+    </p>
+    <p class="mt-2">
+      <a href="<%= @source_repo_url %>" class="link link-primary text-lg" target="_blank" rel="noopener"><%= @source_repo_url %></a>
+    </p>
+    <p class="text-sm opacity-70 mt-1">Running commit: <code><%= @source_commit %></code></p>
+  </div>
+
+  <div>
+    <h2 class="text-xl font-bold mb-2">Changes from upstream</h2>
+    <pre class="whitespace-pre-wrap text-sm bg-base-200 rounded-lg p-4"><%= @changes %></pre>
+  </div>
+
+  <div>
+    <h2 class="text-xl font-bold mb-2">License (AGPLv3)</h2>
+    <pre class="whitespace-pre-wrap text-xs bg-base-200 rounded-lg p-4 max-h-96 overflow-y-auto"><%= @license %></pre>
+  </div>
+
+  <div>
+    <h2 class="text-xl font-bold mb-2">Additional Terms</h2>
+    <pre class="whitespace-pre-wrap text-sm bg-base-200 rounded-lg p-4"><%= @additional_terms %></pre>
+  </div>
+</div>