feat: show signed release changelog in update history

backend/src/main/java/com/kaidi/finance/shared/audit/AuditService.java

@@ -77,6 +77,18 @@ public class AuditService {
      */
     public String recordSystemUpdateTerminal(String updateRequestId, String updateAction, String state,
                                              String targetVersion, String message, Instant updatedAt) {
+        return recordSystemUpdateTerminal(updateRequestId, updateAction, state, targetVersion, message, updatedAt,
+            null, null);
+    }
+
+    /**
+     * Persists a terminal update event together with the release metadata that was verified before the switch.
+     * Keeping the signed release notes in the audit snapshot lets the history page work after a restart or when
+     * the release host is temporarily unavailable.
+     */
+    public String recordSystemUpdateTerminal(String updateRequestId, String updateAction, String state,
+                                             String targetVersion, String message, Instant updatedAt,
+                                             String releaseNotes, Instant publishedAt) {
         String normalizedState = normalizeTerminalState(state);
         String normalizedVersion = clean(targetVersion, 128);
         if (normalizedState == null || normalizedVersion == null || updatedAt == null) return null;
@@ -110,6 +122,9 @@ public class AuditService {
         terminal.put("targetVersion", normalizedVersion);
         terminal.put("message", terminalReason == null ? "" : terminalReason);
         terminal.put("updatedAt", updatedAt);
+        String normalizedNotes = clean(releaseNotes, 4000);
+        if (normalizedNotes != null) terminal.put("releaseNotes", normalizedNotes);
+        if (publishedAt != null) terminal.put("publishedAt", publishedAt);
         if (normalizedAction != null) terminal.put("action", normalizedAction);
         if (normalizedRequestId != null) terminal.put("requestId", normalizedRequestId);
 

backend/src/main/java/com/kaidi/finance/update/application/SystemUpdateApplicationService.java

@@ -444,7 +444,8 @@ public class SystemUpdateApplicationService {
                 nonNegativeLong(root, "downloadedBytes"), nonNegativeLong(root, "totalBytes"),
                 nonNegativeLong(root, "bytesPerSecond"), boundedInteger(root, "downloadPercent", 0, 100),
                 boundedInteger(root, "restartExpectedSeconds", 0, 300),
-                boundedText(root, "requestId", 64), updateAction(root.path("action").asText(null)));
+                boundedText(root, "requestId", 64), updateAction(root.path("action").asText(null)),
+                boundedText(root, "releaseNotes", 4000), parseInstant(root.path("publishedAt").asText(null)));
         } catch (IOException exception) {
             return new UpdateStatus("UNKNOWN", "更新状态读取失败", null, null);
         }
@@ -466,9 +467,13 @@ public class SystemUpdateApplicationService {
             && authorizationService.hasPermission("admin:update:execute")) {
             actions.add(ready ? "INSTALL" : "DOWNLOAD");
         }
+        String releaseNotes = manifest != null && manifest.releaseNotes() != null && !manifest.releaseNotes().isBlank()
+            ? manifest.releaseNotes() : status.releaseNotes();
+        Instant publishedAt = manifest != null && manifest.publishedAt() != null
+            ? manifest.publishedAt() : status.publishedAt();
         return new SystemUpdateView(enabled, current, candidateVersion,
-            available, status.state(), status.message(), manifest == null ? null : manifest.releaseNotes(),
-            manifest == null ? null : manifest.publishedAt(), lastCheckedAt, status.updatedAt(),
+            available, status.state(), status.message(), releaseNotes,
+            publishedAt, lastCheckedAt, status.updatedAt(),
             status.downloadedBytes(), status.totalBytes(), status.bytesPerSecond(), status.downloadPercent(),
             status.restartExpectedSeconds(), readUpdateEvents(), List.copyOf(actions));
     }
@@ -672,7 +677,8 @@ public class SystemUpdateApplicationService {
         if (fingerprint.equals(lastTerminalAuditFingerprint)) return;
         try {
             String persistedKey = auditService.recordSystemUpdateTerminal(status.requestId(), status.action(),
-                status.state(), status.targetVersion(), status.message(), status.updatedAt());
+                status.state(), status.targetVersion(), status.message(), status.updatedAt(),
+                status.releaseNotes(), status.publishedAt());
             if (persistedKey != null) lastTerminalAuditFingerprint = fingerprint;
         } catch (RuntimeException exception) {
             log.warn("系统更新终态审计写入失败：state={}, targetVersion={}", status.state(),
@@ -699,14 +705,15 @@ public class SystemUpdateApplicationService {
     private record UpdateStatus(String state, String message, String targetVersion, Instant updatedAt,
                                 Long downloadedBytes, Long totalBytes, Long bytesPerSecond,
                                 Integer downloadPercent, Integer restartExpectedSeconds,
-                                String requestId, String action) {
+                                String requestId, String action, String releaseNotes, Instant publishedAt) {
         private UpdateStatus(String state, String message, String targetVersion, Instant updatedAt) {
-            this(state, message, targetVersion, updatedAt, null, null, null, null, null, null, null);
+            this(state, message, targetVersion, updatedAt, null, null, null, null, null, null, null, null, null);
         }
 
         private UpdateStatus(String state, String message, String targetVersion, Instant updatedAt,
                              String requestId, String action) {
-            this(state, message, targetVersion, updatedAt, null, null, null, null, null, requestId, action);
+            this(state, message, targetVersion, updatedAt, null, null, null, null, null, requestId, action,
+                null, null);
         }
     }
 

backend/src/test/java/com/kaidi/finance/shared/audit/AuditServiceTest.java

@@ -27,7 +27,8 @@ class AuditServiceTest {
             "01M00000000000000000000092", "SYSTEM_UPDATE_REQUEST"))
             .thenReturn(new AuditMapper.SystemUpdateAuditSource(
                 "01M00000000000000000000092", "01M00000000000000000000001", "admin", "SYSTEM_ADMIN",
-                null, null, "{\"state\":\"INSTALL_QUEUED\",\"targetVersion\":\"1.0.0-preview.44\"}",
+                null, null, "{\"state\":\"INSTALL_QUEUED\",\"targetVersion\":\"1.0.0-preview.44\","
+                    + "\"releaseNotes\":\"Preview update\"}",
                 "127.0.0.1", "fixture-agent"));
         when(mapper.insertSystemUpdateTerminal(any(), anyString(), any())).thenReturn(1);
         AuditService service = new AuditService(mapper, ulids, new ObjectMapper().findAndRegisterModules(),
@@ -35,9 +36,11 @@ class AuditServiceTest {
         Instant completedAt = Instant.parse("2026-08-19T00:10:00Z");
 
         String firstKey = service.recordSystemUpdateTerminal("01M00000000000000000000092", "INSTALL",
-            "SUCCEEDED", "1.0.0-preview.44", "新版本已通过健康检查", completedAt);
+            "SUCCEEDED", "1.0.0-preview.44", "新版本已通过健康检查", completedAt,
+            "Preview update", Instant.parse("2026-08-16T00:00:00Z"));
         String secondKey = service.recordSystemUpdateTerminal("01M00000000000000000000092", "INSTALL",
-            "SUCCEEDED", "1.0.0-preview.44", "新版本已通过健康检查", completedAt);
+            "SUCCEEDED", "1.0.0-preview.44", "新版本已通过健康检查", completedAt,
+            "Preview update", Instant.parse("2026-08-16T00:00:00Z"));
 
         assertEquals(firstKey, secondKey);
         assertTrue(firstKey.startsWith("SYSUPD:"));
@@ -52,6 +55,8 @@ class AuditServiceTest {
         assertTrue(persisted.beforeJson().contains("INSTALL_QUEUED"));
         assertTrue(persisted.afterJson().contains("1.0.0-preview.44"));
         assertTrue(persisted.afterJson().contains("SUCCEEDED"));
+        assertTrue(persisted.afterJson().contains("Preview update"));
+        assertTrue(persisted.afterJson().contains("publishedAt"));
     }
 
     @Test

backend/src/test/java/com/kaidi/finance/update/application/SystemUpdateApplicationServiceTest.java

@@ -294,21 +294,26 @@ class SystemUpdateApplicationServiceTest {
         Path statusFile = tempDir.resolve("terminal-status.json");
         Files.writeString(statusFile, """
             {"state":"SUCCEEDED","message":"新版本已通过健康检查","targetVersion":"1.0.0-preview.44",
-             "updatedAt":"2026-08-19T00:10:00Z","requestId":"01M00000000000000000000092",
+             "updatedAt":"2026-08-19T00:10:00Z","releaseNotes":"Preview update",
+             "publishedAt":"2026-08-16T00:00:00Z","requestId":"01M00000000000000000000092",
              "action":"INSTALL"}
             """);
         AuditService auditService = mock(AuditService.class);
         when(auditService.recordSystemUpdateTerminal("01M00000000000000000000092", "INSTALL", "SUCCEEDED",
-            "1.0.0-preview.44", "新版本已通过健康检查", java.time.Instant.parse("2026-08-19T00:10:00Z")))
+            "1.0.0-preview.44", "新版本已通过健康检查", java.time.Instant.parse("2026-08-19T00:10:00Z"),
+            "Preview update", java.time.Instant.parse("2026-08-16T00:00:00Z")))
             .thenReturn("SYSUPD:terminal");
         SystemUpdateApplicationService service = serviceForStatus(inbox, statusFile, auditService);
 
         assertEquals("SUCCEEDED", service.status().state());
+        assertEquals("Preview update", service.status().releaseNotes());
+        assertEquals(java.time.Instant.parse("2026-08-16T00:00:00Z"), service.status().publishedAt());
         assertEquals("SUCCEEDED", service.status().state());
 
         verify(auditService, times(1)).recordSystemUpdateTerminal("01M00000000000000000000092", "INSTALL",
             "SUCCEEDED", "1.0.0-preview.44", "新版本已通过健康检查",
-            java.time.Instant.parse("2026-08-19T00:10:00Z"));
+            java.time.Instant.parse("2026-08-19T00:10:00Z"), "Preview update",
+            java.time.Instant.parse("2026-08-16T00:00:00Z"));
     }
 
     @Test
@@ -321,14 +326,14 @@ class SystemUpdateApplicationServiceTest {
             """);
         AuditService auditService = mock(AuditService.class);
         when(auditService.recordSystemUpdateTerminal(null, null, "SUCCEEDED", "1.0.0-preview.43",
-            "Release 1.0.0-preview.43 is running", java.time.Instant.parse("2026-08-18T23:50:00Z")))
+            "Release 1.0.0-preview.43 is running", java.time.Instant.parse("2026-08-18T23:50:00Z"), null, null))
             .thenReturn("SYSUPD:legacy");
         SystemUpdateApplicationService service = serviceForStatus(inbox, statusFile, auditService);
 
         assertEquals("SUCCEEDED", service.status().state());
 
         verify(auditService).recordSystemUpdateTerminal(null, null, "SUCCEEDED", "1.0.0-preview.43",
-            "Release 1.0.0-preview.43 is running", java.time.Instant.parse("2026-08-18T23:50:00Z"));
+            "Release 1.0.0-preview.43 is running", java.time.Instant.parse("2026-08-18T23:50:00Z"), null, null);
     }
 
     private SystemUpdateApplicationService serviceForStatus(Path inbox, Path statusFile, AuditService auditService) {
@@ -382,6 +387,8 @@ class SystemUpdateApplicationServiceTest {
             var checked = service.check();
             assertTrue(checked.updateAvailable());
             assertEquals("1.0.0-preview.2+build.7", checked.latestVersion());
+            assertEquals("Preview update", checked.releaseNotes());
+            assertEquals(java.time.Instant.parse("2026-08-16T00:00:00Z"), checked.publishedAt());
             assertTrue(checked.allowedActions().contains("DOWNLOAD"));
             assertFalse(checked.allowedActions().contains("INSTALL"));