iterate-plugin 3.10.0 → 3.11.0

package/README.md

@@ -107,7 +107,7 @@ Both modes share:
 ### UI layer (build-free client slots, v3.7: 11 tabs, bilingual)
 
 - **ConvergenceDashboard** (`conversation.input.dock`) — live round progress bar, severity stats, dimension badges, trend mini-chart above the input; normal mode also shows fix-count badges; plus a live workflow-phase chip (current phase + running/stopped) and a **task_mode indicator (code / iterate)**, now backed by the persisted transcript (`iterate_status` / `iterate_transcript` emit `taskMode`). While a run is active the dashboard switches to a running state (round + phase) instead of the static empty state, and the start buttons are hidden.
-- **ObservatoryPanel** (`conversation.input.dock`) — an **eleven-tab** runtime observatory below the input: **live activity stream** (default tab, type filter) + **F1** review threads (expand / collapse all), **F2** convergence trend (incl. the per-round comparison table: findings raised / fixed / severity mix / validation outcomes), **F3** finding locations (severity / dimension / search filter), **F4** fixes + rollback, **F5** checkpoint resume, **F6** run console, **F7** decision timeline (type / round filter + search), **F8** Quality Gate, **F9** Experience Bank, **F10** Defense Events. Number-key shortcuts: `1`–`9` jump to F1–F9, `0` to F10, `-` back to the live stream. **F8/F9/F10 are live** — they scan the session stream for the latest `iterate_quality_gate` / `iterate_experience` / `iterate_defense_events` results and render real data (PASS/FAIL chip + per-dimension score bars, experience entries with adopt buttons + client-side search, defense type-count chips + filtered event stream); when the session stream has none they distinguish "no data on disk" from "not pulled yet" and offer a **拉取磁盘快照 (pull disk snapshot)** instruction that has the model call the read-side tools and echo the `.iterate/` artifacts back into the stream. One-click JSON export of all observatory data — manifest + live + `qualityGate` / `experienceBank` / `defenseEvents` / `report` (download, copy fallback). **v3.9: two report-export buttons** (导出报告 / 导出 SARIF) render the *same shared data model* as the `iterate_report` tool — a PR-pasteable Markdown run report and a SARIF 2.1.0 log for CI / GitHub Code Scanning. **v3.5.3: reset actions surfaced** — F5 copies an `iterate_checkpoint clear` instruction, F8 an `iterate_quality_gate clear` instruction, F10 an `iterate_defense_events clear` instruction.
+- **ObservatoryPanel** (`conversation.input.dock`) — an **eleven-tab** runtime observatory below the input: **live activity stream** (default tab, type filter) + **F1** review threads (expand / collapse all), **F2** convergence trend (incl. the per-round comparison table: findings raised / fixed / severity mix / validation outcomes), **F3** finding locations (severity / dimension / search filter), **F4** fixes + rollback, **F5** checkpoint resume, **F6** run console, **F7** decision timeline (type / round filter + search), **F8** Quality Gate, **F9** Experience Bank, **F10** Defense Events. Number-key shortcuts: `1`–`9` jump to F1–F9, `0` to F10, `-` back to the live stream. **F8/F9/F10 are live** — they scan the session stream for the latest `iterate_quality_gate` / `iterate_experience` / `iterate_defense_events` results and render real data (PASS/FAIL chip + per-dimension score bars, experience entries with adopt buttons + client-side search, defense type-count chips + filtered event stream); when the session stream has none they distinguish "no data on disk" from "not pulled yet" and offer a **拉取磁盘快照 (pull disk snapshot)** instruction that has the model call the read-side tools and echo the `.iterate/` artifacts back into the stream. One-click JSON export of all observatory data — manifest + live + `qualityGate` / `experienceBank` / `defenseEvents` / `report` (download, copy fallback). **v3.9: report-export buttons** (导出报告 / 导出 SARIF, **v3.11 + 导出 JSON 报告**) render the *same shared data model* as the `iterate_report` tool — a PR-pasteable Markdown run report, a SARIF 2.1.0 log for CI / GitHub Code Scanning, and (v3.11) the complete normalized run model as machine-readable JSON. **v3.5.3: reset actions surfaced** — F5 copies an `iterate_checkpoint clear` instruction, F8 an `iterate_quality_gate clear` instruction, F10 an `iterate_defense_events clear` instruction.
 - **TriagePanel** (`conversation.chat.turnTail`) — per-finding triage with `y` (keep → fix), `n` (skip), `a` (known-intentional) keyboard shortcuts and `↑`/`↓` navigation (focus-guarded: only active while the panel has focus), filtering, batch ops (incl. select-all), localStorage persistence. **Write-back closed loop**: the primary button copies an `iterate_triage apply` instruction for the marked entries (the tool validates, dedupes, backs up, rolls back on failure); a secondary button copies the raw `known_intentional` YAML; **回读已写入条目** copies an `iterate_triage list` instruction to confirm what actually landed. Copy payloads are aligned to the target tool schemas. **v3.2: native command buttons** (approve architectural fix, trigger new round, rollback to checkpoint). **v3.3: §8 指派修复 (assign)** — one click copies an `iterate_fix` instruction carrying every in-scope finding (respecting the batch toggle).
 - **StatsCard** (`conversation.chat.turnTail`) — convergence stats, round history, trend chart and completion summary when no findings remain.
 - **iterate theme skin** (`theme.overrideTokens`) — a warm-amber 13-token `--dsw-*` override, light/dark modes, togglable in settings.
@@ -307,7 +307,7 @@ validation:
 - `iterate_experience` — **v3.2** query the experience bank (list / search / get), `add` a new verified fix (re-adding the same pattern+dimension bumps its hit count instead of duplicating it), or **v3.5 remove a stale/incorrect entry by `id`** so bad experiences never resurface. Persists to `.iterate/experience.json`
 - `iterate_quality_gate` — **v3.2** read the quality certificate (`read`), or recompute + persist a fresh one (`compute`) from findings, validation results, `findingsByRound`, and `fixedByDimension`. Real per-dimension convergence rates. **v3.5: `clear` removes the persisted certificate to reset a stale gate before a fresh iteration**
 - `iterate_defense_events` — **v3.2** query defense events (list / counts), `record` a new one, or **v3.5.3 `clear` the persisted stream** so a fresh iteration starts without stale defensive data. Human-readable labels follow the project language (en / zh)
-- `iterate_report` — **v3.9** export the run as a portable report. `format:"markdown"` (default) renders a PR-pasteable report (run header, quality gate, findings, fixes, validations, defense events, experience bank); `format:"sarif"` renders a SARIF 2.1.0 log for CI / GitHub Code Scanning (one rule per review dimension, severity → error/warning/note, file+line locations, suggested fix attached). `write:true` persists it to `.iterate/report.md` / `.iterate/report.sarif`; `lang` (zh | en) selects the report language. Read-only apart from the optional report file
+- `iterate_report` — **v3.9** export the run as a portable report. `format:"markdown"` (default) renders a PR-pasteable report (run header, quality gate, findings, fixes, validations, defense events, experience bank); `format:"sarif"` renders a SARIF 2.1.0 log for CI / GitHub Code Scanning (one rule per review dimension, severity → error/warning/note, file+line locations, suggested fix attached). **v3.11: `format:"json"` renders the COMPLETE normalized run model as machine-readable JSON** (findings, fixes, validations, convergence, quality gate, experience bank, defense events — the lossless format for CI dashboards / PR bots). `write:true` persists it to `.iterate/report.md` / `.iterate/report.sarif` / `.iterate/report.json`; `lang` (zh | en) selects the report language. Read-only apart from the optional report file
 
 ---
 
@@ -345,14 +345,14 @@ All runtime state lives under `.iterate/` at the project root (can be excluded v
   `0.1.7-alpha.1`, `0.1.7-alpha.2`, `0.1.7-rc.1`, `0.1.7-rc.2`, `0.2.0-rc.1`,
   `0.2.0-rc.2`, `0.2.1-alpha.1`, `0.2.1-alpha.2`, `0.2.1-alpha.3`,
   `0.2.1-alpha.4`, `0.2.1-alpha.5`, `0.2.1-rc.1`, `0.2.1-rc.2`,
-   `0.2.1-rc.3` (25 releases,
+   `0.2.1-rc.3`, `0.2.1-rc.4`, `0.2.2-alpha.2` (27 releases,
   `0.1.1-rc.1` …
-  `0.2.1-rc.3`).
+  `0.2.2-alpha.2`).
   The plugin is built against `@deepseek-ai/dsh-tools` /
-  `@deepseek-ai/dsh-util-values` `0.2.1-rc.3` and uses only public contracts
+  `@deepseek-ai/dsh-util-values` `0.2.2-alpha.2` and uses only public contracts
   (tool registration, client slots + theme, bundle patch, and — since v3.9 —
   the session state-record API for session-linked run records).
-  It also declares `engines.dsh` (`>=0.1.1-rc.1`) so the dsh ≥ 0.2.1-rc.3
+  It also declares `engines.dsh` (`>=0.1.1-rc.1`) so the dsh ≥ 0.2.2-alpha.2
   runtime evaluates compatibility from that single range (earlier runtimes fall
   back to the `@deepseek-ai/dsh-*` peer versions listed in `package.json`).
 - **Disposable-Profile evidence (real, `dsh` CLI `0.1.1-rc.1`)**: on a temp
@@ -488,7 +488,7 @@ npm test
 All tests pass:
 
 - **Full unit suite + type-check clean** (`npm test`, `npm run typecheck`) — the exact count is intentionally not pinned here to avoid doc drift; see `CHANGELOG.md` for per-release magnitudes
-- Coverage: dedupe, filter, sort, multi-round convergence, meta-review audit, path safety, timeout clamping, config read/write + rollback, triage merge, diff computation, checkpoint validation, fix registry, history read + filter, prune cleanup report + dry-run semantics, UI pure functions (select-all key, runtime status guide), **v3.2: experience bank, quality gate, defense events, approval-gate fail-open path**.
+- Coverage: dedupe, filter, sort, multi-round convergence, meta-review audit, path safety, timeout clamping, config read/write + rollback, triage merge, diff computation, checkpoint validation, fix registry, history read + filter, prune cleanup report + dry-run semantics, UI pure functions (select-all key, runtime status guide), **v3.2: experience bank, quality gate, defense events, approval-gate fail-open path**, **v3.9: portable report (markdown + SARIF)**, **v3.11: lossless JSON report (full normalized run model + `.iterate/report.json` persistence)**.
 
 ---
 

package/README.zh-CN.md

@@ -106,7 +106,7 @@ dsh plugin --profile web add iterate-plugin
 ### UI 层（客户端免构建槽位，v3.7：11 个页签，双语）
 
 - **收敛看板 `ConvergenceDashboard`**（`conversation.input.dock`）— 输入框上方实时显示轮次进度条、严重度统计、维度徽章、趋势迷你图；normal 模式另显示修复计数徽章；还有运行阶段芯片（当前工作流阶段 + 运行中/已结束）与 **task_mode 指示器（code / iterate）**。运行期间看板切换为"运行中"状态（显示轮次与阶段），并隐藏启动按钮。
-- **运行时观测台 `ObservatoryPanel`**（`conversation.input.dock`）— 输入框下方**十一个页签**运行时观测台：**实时活动流**（默认页，支持按活动类型筛选）+ **F1** 审查线程（全部展开/全部收起）、**F2** 收敛趋势（含跨轮对比表：每轮 findings / fixed / 严重度分布 / 验证结果）、**F3** 发现定位（按严重度/维度/关键词筛选）、**F4** 修复与回滚、**F5** 断点恢复、**F6** 运行控制台、**F7** 决策时间线（按类型/轮次筛选与关键词搜索）、**F8** 质量门禁、**F9** 经验银行、**F10** 防御事件。数字键快捷键：`1`–`9` 跳到 F1–F9，`0` 到 F10，`-` 回实时活动流。**F8/F9/F10 为实时数据**——扫描会话流中最近一次 `iterate_quality_gate` / `iterate_experience` / `iterate_defense_events` 结果并渲染真实数据（PASS/FAIL 徽章 + 分维度评分条、经验条目（含采纳按钮 + 客户端搜索）、防御类型计数芯片 + 筛选后的事件流）；会话流中没有数据时区分"磁盘无数据"与"尚未拉取"，并提供**拉取磁盘快照**指令（让模型调用只读工具、把 `.iterate/` 产物回显进会话流）。一键导出全部观测数据为 JSON——manifest + live + `qualityGate` / `experienceBank` / `defenseEvents` / `report`（优先下载，失败回退复制）。**v3.9 新增两个报告导出按钮**（导出报告 / 导出 SARIF），与 `iterate_report` 工具共用同一份数据模型——分别产出可直接粘贴进 PR 的 Markdown 运行报告，与供 CI / GitHub Code Scanning 消费的 SARIF 2.1.0 日志。**v3.5.3 新增重置操作**：F5 复制 `iterate_checkpoint clear`、F8 复制 `iterate_quality_gate clear`、F10 复制 `iterate_defense_events clear` 指令。
+- **运行时观测台 `ObservatoryPanel`**（`conversation.input.dock`）— 输入框下方**十一个页签**运行时观测台：**实时活动流**（默认页，支持按活动类型筛选）+ **F1** 审查线程（全部展开/全部收起）、**F2** 收敛趋势（含跨轮对比表：每轮 findings / fixed / 严重度分布 / 验证结果）、**F3** 发现定位（按严重度/维度/关键词筛选）、**F4** 修复与回滚、**F5** 断点恢复、**F6** 运行控制台、**F7** 决策时间线（按类型/轮次筛选与关键词搜索）、**F8** 质量门禁、**F9** 经验银行、**F10** 防御事件。数字键快捷键：`1`–`9` 跳到 F1–F9，`0` 到 F10，`-` 回实时活动流。**F8/F9/F10 为实时数据**——扫描会话流中最近一次 `iterate_quality_gate` / `iterate_experience` / `iterate_defense_events` 结果并渲染真实数据（PASS/FAIL 徽章 + 分维度评分条、经验条目（含采纳按钮 + 客户端搜索）、防御类型计数芯片 + 筛选后的事件流）；会话流中没有数据时区分"磁盘无数据"与"尚未拉取"，并提供**拉取磁盘快照**指令（让模型调用只读工具、把 `.iterate/` 产物回显进会话流）。一键导出全部观测数据为 JSON——manifest + live + `qualityGate` / `experienceBank` / `defenseEvents` / `report`（优先下载，失败回退复制）。**v3.9 新增报告导出按钮**（导出报告 / 导出 SARIF，**v3.11 新增导出 JSON 报告**），与 `iterate_report` 工具共用同一份数据模型——分别产出可直接粘贴进 PR 的 Markdown 运行报告、供 CI / GitHub Code Scanning 消费的 SARIF 2.1.0 日志，以及（v3.11）完整的归一化运行模型 JSON（无损格式）。**v3.5.3 新增重置操作**：F5 复制 `iterate_checkpoint clear`、F8 复制 `iterate_quality_gate clear`、F10 复制 `iterate_defense_events clear` 指令。
 - **Findings 分诊面板 `TriagePanel`**（`conversation.chat.turnTail`）— 逐条分诊，键盘快捷键 `y`（保留→修复）、`n`（跳过）、`a`（已知有意）与 `↑`/`↓` 移动（焦点守卫：仅面板内焦点时生效），支持筛选、批量（含一键全选所有 findings）、localStorage 持久化。**写回闭环**：主按钮复制已标记条目的 `iterate_triage apply` 指令（工具负责校验、去重、备份、失败回滚）；次按钮复制裸 `known_intentional` YAML；**回读已写入条目**复制 `iterate_triage list` 指令核对实际落盘内容。复制载荷与目标工具 schema 对齐。**v3.2：原生命令按钮**（批准架构修复、触发新一轮、回滚到断点）。
 - **收敛统计卡片 `StatsCard`**（`conversation.chat.turnTail`）— 无 findings 时显示收敛统计、历史轮次、趋势图、完成摘要。
 - **iterate 主题皮肤**（`theme.overrideTokens`）— 暖琥珀配色的 13 个 `--dsw-*` token 覆盖，明暗双模式，可在设置页开关。
@@ -306,7 +306,7 @@ validation:
 - `iterate_experience` — **v3.2** 查询经验银行（list / search / get），或 `add` 一条新的已验证修复：重复添加同一 pattern + dimension 累加命中次数而非重复写入。**v3.5 新增 `remove`：按 `id` 删除过时或错误的经验条目**。持久化到 `.iterate/experience.json`
 - `iterate_quality_gate` — **v3.2** 读取质量凭证（`read`），或基于 findings、验证结果、`findingsByRound` 与 `fixedByDimension` 重新计算并持久化一份新凭证（`compute`）。真实的逐维度收敛率。**v3.5 新增 `clear`：删除持久化的质量凭证**，用于新一轮迭代前重置陈旧的门禁
 - `iterate_defense_events` — **v3.2** 查询防御事件（list / counts），`record` 记录一条新事件，或 **v3.5.3 `clear` 清除持久化事件流**，让新一轮迭代不带陈旧防御数据起跑。可读标签跟随项目语言（en / zh）
-- `iterate_report` — **v3.9** 把本次运行导出为可移植报告。`format:"markdown"`（默认）产出可直接粘贴进 PR 的报告（运行头部、质量门禁、发现、修复、验证、防御事件、经验银行）；`format:"sarif"` 产出 SARIF 2.1.0 日志供 CI / GitHub Code Scanning 消费（每个审查维度一条规则，严重度 → error/warning/note，携带文件+行号位置与建议修复）。`write:true` 持久化到 `.iterate/report.md` / `.iterate/report.sarif`；`lang`（zh | en）选择报告语言。除可选的报告文件外均为只读
+- `iterate_report` — **v3.9** 把本次运行导出为可移植报告。`format:"markdown"`（默认）产出可直接粘贴进 PR 的报告（运行头部、质量门禁、发现、修复、验证、防御事件、经验银行）；`format:"sarif"` 产出 SARIF 2.1.0 日志供 CI / GitHub Code Scanning 消费（每个审查维度一条规则，严重度 → error/warning/note，携带文件+行号位置与建议修复）。**v3.11：`format:"json"` 产出完整归一化运行模型为机器可读 JSON**（发现、修复、验证、收敛率、质量门禁、经验银行、防御事件——供 CI 仪表盘 / PR 机器人消费的无损格式）。`write:true` 持久化到 `.iterate/report.md` / `.iterate/report.sarif` / `.iterate/report.json`；`lang`（zh | en）选择报告语言。除可选的报告文件外均为只读
 
 ---
 
@@ -335,7 +335,7 @@ validation:
 ### Node.js / DSH 兼容范围
 
 - **Node.js**：`>=20`（`package.json` 的 `engines.node`）。
-- **DSH**：`package.json` 的 `dsh.compatibility.dshReleases` 字段是发布兼容性的**唯一真源**（本 README 逐字镜像该字段；两者需同步更新）。以下官方版本声明为 `compatible`：`0.1.1-rc.1`、`0.1.2-alpha.4`、`0.1.2-alpha.5`、`0.1.2-rc.1`、`0.1.3-alpha.1`、`0.1.5-alpha.1`、`0.1.5-alpha.2`、`0.1.5-rc.1`、`0.1.5-rc.2`、`0.1.6-alpha.1`、`0.1.6-alpha.2`、`0.1.7-alpha.1`、`0.1.7-alpha.2`、`0.1.7-rc.1`、`0.1.7-rc.2`、`0.2.0-rc.1`、`0.2.0-rc.2`、`0.2.1-alpha.1`、`0.2.1-alpha.2`、`0.2.1-alpha.3`、`0.2.1-alpha.4`、`0.2.1-alpha.5`、`0.2.1-rc.1`、`0.2.1-rc.2`、`0.2.1-rc.3`（共 25 个版本，`0.1.1-rc.1` … `0.2.1-rc.3`）。插件基于 `@deepseek-ai/dsh-tools` / `@deepseek-ai/dsh-util-values` `0.2.1-rc.3` 构建，只使用公开契约（工具注册、客户端 slots + theme、bundle patch，以及 v3.9 起的会话状态记录接口）。插件同时声明 `engines.dsh`（`>=0.1.1-rc.1`），使 dsh ≥ 0.2.1-rc.3 运行时只依据该范围判断兼容性（更早的运行时仍回退校验 `package.json` 中列出的 `@deepseek-ai/dsh-*` peer 版本）。
+- **DSH**：`package.json` 的 `dsh.compatibility.dshReleases` 字段是发布兼容性的**唯一真源**（本 README 逐字镜像该字段；两者需同步更新）。以下官方版本声明为 `compatible`：`0.1.1-rc.1`、`0.1.2-alpha.4`、`0.1.2-alpha.5`、`0.1.2-rc.1`、`0.1.3-alpha.1`、`0.1.5-alpha.1`、`0.1.5-alpha.2`、`0.1.5-rc.1`、`0.1.5-rc.2`、`0.1.6-alpha.1`、`0.1.6-alpha.2`、`0.1.7-alpha.1`、`0.1.7-alpha.2`、`0.1.7-rc.1`、`0.1.7-rc.2`、`0.2.0-rc.1`、`0.2.0-rc.2`、`0.2.1-alpha.1`、`0.2.1-alpha.2`、`0.2.1-alpha.3`、`0.2.1-alpha.4`、`0.2.1-alpha.5`、`0.2.1-rc.1`、`0.2.1-rc.2`、`0.2.1-rc.3`、`0.2.1-rc.4`、`0.2.2-alpha.2`（共 27 个版本，`0.1.1-rc.1` … `0.2.2-alpha.2`）。插件基于 `@deepseek-ai/dsh-tools` / `@deepseek-ai/dsh-util-values` `0.2.2-alpha.2` 构建，只使用公开契约（工具注册、客户端 slots + theme、bundle patch，以及 v3.9 起的会话状态记录接口）。插件同时声明 `engines.dsh`（`>=0.1.1-rc.1`），使 dsh ≥ 0.2.2-alpha.2 运行时只依据该范围判断兼容性（更早的运行时仍回退校验 `package.json` 中列出的 `@deepseek-ai/dsh-*` peer 版本）。
 - **一次性 Profile 证据（真实，`dsh` CLI `0.1.1-rc.1`）**：在临时 `$DSH_HOME` 下
   `dsh plugin --profile <p> add <本仓库>` 约 449ms 完成安装；`dsh --profile <p>
   --dump-config` 正确合成 `iterate-plugin` bundle patch；`dsh plugin --profile <p>
@@ -445,7 +445,7 @@ npm test
 所有测试通过：
 
 - **全量单元测试 + 类型检查通过**（`npm test`、`npm run typecheck`——此处刻意不写具体数量以根除文档漂移，各版本量级见 `CHANGELOG.md`）
-- 覆盖：去重、过滤、排序、多轮收敛、meta-review 审计、路径安全、超时钳制、配置读写与回滚、triage 合并、diff 计算、checkpoint 校验、修复注册表、历史读取与过滤、prune 清理报告与 dry-run 语义、UI 纯函数（select-all 键、运行时状态指引）、**v3.2：经验银行、质量门禁、防御事件、审批门禁 fail-open 路径**等
+- 覆盖：去重、过滤、排序、多轮收敛、meta-review 审计、路径安全、超时钳制、配置读写与回滚、triage 合并、diff 计算、checkpoint 校验、修复注册表、历史读取与过滤、prune 清理报告与 dry-run 语义、UI 纯函数（select-all 键、运行时状态指引）、**v3.2：经验银行、质量门禁、防御事件、审批门禁 fail-open 路径**、**v3.9：可移植报告（markdown + SARIF）**、**v3.11：无损 JSON 报告（完整归一化运行模型 + `.iterate/report.json` 持久化）**等
 
 ---
 

package/dist/report-render.js

@@ -20,9 +20,14 @@
  *   - **sarif**    — SARIF 2.1.0 for CI / GitHub Code Scanning (ruleId =
  *     review dimension, severity → error | warning | note, file+line
  *     locations, suggested fix attached).
+ *   - **json**     — the complete normalized run model (see {@link RunReportData})
+ *     as a machine-readable JSON document. This is the ONLY format that carries
+ *     the full model (findings + fixes + validations + quality gate + experience
+ *     bank + defense events) without lossy projection, so CI dashboards and PR
+ *     bots can consume the exact same facts the human report shows.
  */
 /** Report formats accepted by the tool and the export buttons. */
-export const REPORT_FORMATS = ['markdown', 'sarif'];
+export const REPORT_FORMATS = ['markdown', 'sarif', 'json'];
 /** Severity ordering (lowest index = most severe). */
 const SEVERITY_ORDER = ['critical', 'high', 'medium', 'low'];
 /** Human labels for the report, keyed by language. */
@@ -442,6 +447,30 @@ export function renderRunReportSarif(manifest, extra, opts) {
         ],
     };
 }
+/** Render a JSON document from the same normalized data. */
+export function renderRunReportJson(manifest, extra) {
+    const data = buildRunReportData(manifest, extra);
+    return {
+        $schema: 'iterate-run-report/1',
+        project: data.project,
+        goal: data.goal,
+        mode: data.mode,
+        taskMode: data.taskMode,
+        round: data.round,
+        maxRounds: data.maxRounds,
+        active: data.active,
+        stoppedReason: data.stoppedReason,
+        updatedAt: data.updatedAt,
+        convergence: data.convergence,
+        severityCounts: data.severityCounts,
+        findings: data.findings,
+        fixes: data.fixes,
+        validations: data.validations,
+        qualityGate: data.qualityGate,
+        experienceBank: data.experienceBank,
+        defenseEvents: data.defenseEvents,
+    };
+}
 /**
  * Render a report in the requested format. Unknown formats fall back to
  * Markdown (the tool's default).
@@ -449,6 +478,8 @@ export function renderRunReportSarif(manifest, extra, opts) {
 export function renderRunReport(format, manifest, extra, opts) {
     if (format === 'sarif')
         return renderRunReportSarif(manifest, extra, opts);
+    if (format === 'json')
+        return renderRunReportJson(manifest, extra);
     return renderRunReportMarkdown(manifest, extra, opts);
 }
 /**
@@ -456,7 +487,7 @@ export function renderRunReport(format, manifest, extra, opts) {
  * `iterate-report-2026-10-18T01-02-03-000Z.md`.
  */
 export function runReportFilename(format, opts) {
-    const ext = format === 'sarif' ? 'sarif' : 'md';
+    const ext = format === 'sarif' ? 'sarif' : format === 'json' ? 'json' : 'md';
     const stamp = opts?.now && opts.now ? opts.now.replace(/[:.]/g, '-') : new Date().toISOString().replace(/[:.]/g, '-');
     return `iterate-report-${stamp}.${ext}`;
 }

package/dist/tools/report.js

@@ -29,7 +29,7 @@ import { readQualityGate } from "./quality-store.js";
 import { readExperienceBank } from "./experience-store.js";
 import { readDefenseEvents } from "./defense-store.js";
 import { resultHeadline } from "./present.js";
-import { renderRunReportMarkdown, renderRunReportSarif, REPORT_FORMATS } from "../report-render.js";
+import { renderRunReportMarkdown, renderRunReportSarif, renderRunReportJson, REPORT_FORMATS } from "../report-render.js";
 /** Formats accepted by the tool (kept in sync with the shared renderer). */
 const FORMATS = new Set(REPORT_FORMATS);
 /** Read the persisted transcript manifest, tolerating a missing/garbled file. */
@@ -68,19 +68,21 @@ export function registerReportTool(ctx) {
             'quality-gate table, findings table, fixes table, per-round validations, defense events, and the ' +
             'experience bank. `format:"sarif"` renders a SARIF 2.1.0 log for CI / GitHub Code Scanning ' +
             '(one rule per review dimension; finding severity maps to error/warning/note; findings carry ' +
-            'file + line locations and the suggested fix). ' +
+            'file + line locations and the suggested fix). `format:"json"` renders the COMPLETE normalized run ' +
+            'model as machine-readable JSON (findings, fixes, validations, convergence, quality gate, ' +
+            'experience bank, defense events) — the lossless format for CI dashboards and PR bots. ' +
             'Set `write:true` to also persist the report under `.iterate/report.md` / `.iterate/report.sarif` ' +
-            'and get the path back. `lang` selects the report language (zh | en). ' +
+            '/ `.iterate/report.json` and get the path back. `lang` selects the report language (zh | en). ' +
             'Read-only apart from the optional report file; never touches source files.',
         parameters: {
             format: {
                 type: 'string',
-                description: 'Report format: "markdown" (default) or "sarif".',
-                enum: ['markdown', 'sarif'],
+                description: 'Report format: "markdown" (default), "sarif", or "json".',
+                enum: ['markdown', 'sarif', 'json'],
             },
             write: {
                 type: 'boolean',
-                description: 'When true, persist the report to `.iterate/report.md` / `.iterate/report.sarif` and return its path. Default: false.',
+                description: 'When true, persist the report to `.iterate/report.md` / `.iterate/report.sarif` / `.iterate/report.json` and return its path. Default: false.',
             },
             lang: {
                 type: 'string',
@@ -100,10 +102,12 @@ export function registerReportTool(ctx) {
                     ok: { type: 'boolean', required: true },
                     kind: { type: 'string' },
                     format: { type: 'string' },
-                    /** The rendered report text (Markdown, or pretty-printed SARIF JSON). */
+                    /** The rendered report text (Markdown, or pretty-printed SARIF/JSON). */
                     content: { type: 'string' },
                     /** The SARIF log object, when format is "sarif". */
                     sarif: { type: 'json' },
+                    /** The full normalized run model, when format is "json". */
+                    json: { type: 'json' },
                     /** Whether a source transcript manifest was found on disk. */
                     source: { type: 'string' },
                     written: { type: 'boolean' },
@@ -156,6 +160,7 @@ export function registerReportTool(ctx) {
             const extra = { qualityGate, experienceBank, defenseEvents };
             let content;
             let sarif;
+            let json;
             let findings = 0;
             try {
                 if (format === 'sarif') {
@@ -166,6 +171,12 @@ export function registerReportTool(ctx) {
                     content = JSON.stringify(doc, null, 2);
                     findings = Array.isArray(doc?.runs?.[0]?.results) ? doc.runs[0].results.length : 0;
                 }
+                else if (format === 'json') {
+                    const doc = renderRunReportJson(manifest, extra);
+                    json = doc;
+                    content = JSON.stringify(doc, null, 2);
+                    findings = doc.findings.length;
+                }
                 else {
                     content = renderRunReportMarkdown(manifest, extra, { lang });
                     findings = countMarkdownFindings(content);
@@ -185,7 +196,7 @@ export function registerReportTool(ctx) {
                 try {
                     const dir = iterateDir(projectRoot);
                     mkdirSync(dir, { recursive: true });
-                    reportPath = `${dir}/report.${format === 'sarif' ? 'sarif' : 'md'}`;
+                    reportPath = `${dir}/report.${format === 'sarif' ? 'sarif' : format === 'json' ? 'json' : 'md'}`;
                     writeFileSync(reportPath, content, 'utf-8');
                     written = true;
                 }
@@ -204,6 +215,7 @@ export function registerReportTool(ctx) {
                 format,
                 content,
                 ...(sarif !== undefined ? { sarif } : {}),
+                ...(json !== undefined ? { json } : {}),
                 source,
                 written,
                 ...(reportPath ? { reportPath } : {}),

package/lib/client.js

@@ -1,4 +1,4 @@
-/* iterate-plugin client source-digest: 2819f2e6f5f182bb31b9e47c356f60e0b8d97fcdbd232c31b89438619623cf93 */
+/* iterate-plugin client source-digest: e3baa31a1f6965343996a15a146b539f5c1d02547014ae0cf0b2f90809967b7e */
 window.__ModuleLoader__.load({ id: "iterate-plugin", factory: (require) => {
 var module = { exports: {} };
 var exports = module.exports;
@@ -2311,8 +2311,31 @@ function renderRunReportSarif(manifest, extra, opts) {
     ]
   };
 }
+function renderRunReportJson(manifest, extra) {
+  const data = buildRunReportData(manifest, extra);
+  return {
+    $schema: "iterate-run-report/1",
+    project: data.project,
+    goal: data.goal,
+    mode: data.mode,
+    taskMode: data.taskMode,
+    round: data.round,
+    maxRounds: data.maxRounds,
+    active: data.active,
+    stoppedReason: data.stoppedReason,
+    updatedAt: data.updatedAt,
+    convergence: data.convergence,
+    severityCounts: data.severityCounts,
+    findings: data.findings,
+    fixes: data.fixes,
+    validations: data.validations,
+    qualityGate: data.qualityGate,
+    experienceBank: data.experienceBank,
+    defenseEvents: data.defenseEvents
+  };
+}
 function runReportFilename(format, opts) {
-  const ext = format === "sarif" ? "sarif" : "md";
+  const ext = format === "sarif" ? "sarif" : format === "json" ? "json" : "md";
   const stamp = opts?.now && opts.now ? opts.now.replace(/[:.]/g, "-") : (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
   return `iterate-report-${stamp}.${ext}`;
 }
@@ -2484,6 +2507,8 @@ var EN = {
   "\u5BFC\u51FA\u53EF\u7C98\u8D34\u8FDB PR \u7684 Markdown \u8FD0\u884C\u62A5\u544A\uFF08\u4F18\u5148\u4E0B\u8F7D\uFF0C\u5931\u8D25\u5219\u590D\u5236\uFF09": "Export a PR-pasteable Markdown run report (download first, copy on failure)",
   "\u5BFC\u51FA SARIF": "Export SARIF",
   "\u5BFC\u51FA SARIF 2.1.0\uFF08\u4F9B CI / GitHub Code Scanning \u6D88\u8D39\uFF09": "Export SARIF 2.1.0 for CI / GitHub Code Scanning",
+  "\u5BFC\u51FA JSON \u62A5\u544A": "Export JSON report",
+  "\u5BFC\u51FA\u5B8C\u6574\u8FD0\u884C\u6A21\u578B\u7684 JSON\uFF08\u4F9B CI \u4EEA\u8868\u76D8 / PR \u673A\u5668\u4EBA\u6D88\u8D39\uFF0C\u65E0\u635F\u683C\u5F0F\uFF09": "Export the complete run model as JSON (lossless, for CI dashboards / PR bots)",
   "\u89C2\u6D4B\u53F0\u9875\u7B7E\uFF08\u5FEB\u6377\u952E 1-9 / 0 / -\uFF09": "Observatory tabs (keys 1-9 / 0 / -)",
   "{a0}\uFF08\u6309 {a1} \u5207\u6362\uFF09": "{a0} (press {a1})",
   "{a0}\uFF08\u6309 - \u5207\u6362\uFF09": "{a0} (press -)",
@@ -4495,7 +4520,7 @@ function ObservatoryPanel(props) {
   const exportReport = (format) => {
     if (!manifest) return;
     const extra = { qualityGate, experienceBank, defenseEvents };
-    const content = format === "sarif" ? JSON.stringify(renderRunReportSarif(manifest, extra), null, 2) : renderRunReportMarkdown(manifest, extra, { lang: getLang() });
+    const content = format === "sarif" ? JSON.stringify(renderRunReportSarif(manifest, extra), null, 2) : format === "json" ? JSON.stringify(renderRunReportJson(manifest, extra), null, 2) : renderRunReportMarkdown(manifest, extra, { lang: getLang() });
     const filename = runReportFilename(format);
     const key = `report-${format}`;
     const flash = () => {
@@ -5711,8 +5736,8 @@ function ObservatoryPanel(props) {
           title: t("\u5C06\u89C2\u6D4B\u53F0\u5168\u90E8\u6570\u636E\u5BFC\u51FA\u4E3A JSON\uFF08\u4F18\u5148\u4E0B\u8F7D\uFF0C\u5931\u8D25\u5219\u590D\u5236\uFF09")
         }, copiedKey === "export" ? t("\u5DF2\u5BFC\u51FA") : t("\u5BFC\u51FA JSON")),
         // v3.9: portable report export — Markdown for a PR body, SARIF for
-        // CI / GitHub Code Scanning. Rendered from the same data model as
-        // the `iterate_report` tool.
+        // CI / GitHub Code Scanning, JSON for CI dashboards / PR bots.
+        // Rendered from the same data model as the `iterate_report` tool.
         React.createElement("button", {
           className: "iterate-btn",
           "data-copied": copiedKey === "report-markdown" ? "" : void 0,
@@ -5725,6 +5750,15 @@ function ObservatoryPanel(props) {
           onClick: () => exportReport("sarif"),
           title: t("\u5BFC\u51FA SARIF 2.1.0\uFF08\u4F9B CI / GitHub Code Scanning \u6D88\u8D39\uFF09")
         }, copiedKey === "report-sarif" ? t("\u5DF2\u5BFC\u51FA") : t("\u5BFC\u51FA SARIF")),
+        // v3.11: lossless JSON export — the complete normalized run model
+        // (findings + fixes + validations + quality gate + experience bank
+        // + defense events) for CI dashboards and PR bots.
+        React.createElement("button", {
+          className: "iterate-btn",
+          "data-copied": copiedKey === "report-json" ? "" : void 0,
+          onClick: () => exportReport("json"),
+          title: t("\u5BFC\u51FA\u5B8C\u6574\u8FD0\u884C\u6A21\u578B\u7684 JSON\uFF08\u4F9B CI \u4EEA\u8868\u76D8 / PR \u673A\u5668\u4EBA\u6D88\u8D39\uFF0C\u65E0\u635F\u683C\u5F0F\uFF09")
+        }, copiedKey === "report-json" ? t("\u5DF2\u5BFC\u51FA") : t("\u5BFC\u51FA JSON \u62A5\u544A")),
         // Gap #4: `.iterate/` artifacts are unreachable from the browser;
         // this copies the one instruction that makes the model echo them
         // into the session stream (which is what every panel scans).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "iterate-plugin",
-  "version": "3.10.0",
+  "version": "3.11.0",
   "description": "dsh plugin that turns the iterate skill into an autonomous closed-loop harness with quality command center and experience bank (v3.3). Features: plan -> parallel review xN -> atomic fixes -> validate -> loop -> auto-stop, plus dry-run pure-review mode, quality gate compute/persist, writable experience bank, defense events stream (record + bilingual labels), and native command buttons — with a live quality command center (F8/F9/F10 render real session data), §8 assign-fix instruction, and task_mode indicator wired end to end.",
   "type": "module",
   "license": "MIT",
@@ -52,7 +52,9 @@
         "0.2.1-alpha.5": "compatible",
         "0.2.1-rc.1": "compatible",
         "0.2.1-rc.2": "compatible",
-        "0.2.1-rc.3": "compatible"
+        "0.2.1-rc.3": "compatible",
+        "0.2.1-rc.4": "compatible",
+        "0.2.2-alpha.2": "compatible"
       }
     },
     "client": {
@@ -93,10 +95,10 @@
     "js-yaml": "4.3.2"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.5-alpha.2",
-    "@deepseek-ai/dsh-session": "0.1.1-rc.1 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
-    "@deepseek-ai/dsh-tools": "0.1.1-rc.1 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3",
-    "@deepseek-ai/dsh-util-values": "0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3"
+    "@deepseek-ai/cordis": "^4.0.5-alpha.2 || ~4.0.6-alpha.1",
+    "@deepseek-ai/dsh-session": "0.1.1-rc.1 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.1-rc.1 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2",
+    "@deepseek-ai/dsh-util-values": "0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4 || 0.2.1-alpha.5 || 0.2.1-rc.1 || 0.2.1-rc.2 || 0.2.1-rc.3 || 0.2.1-rc.4 || 0.2.2-alpha.2"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -113,20 +115,20 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.5",
-    "@deepseek-ai/dsh-agent": "0.2.1-rc.3",
-    "@deepseek-ai/dsh-jobs": "0.2.1-rc.3",
-    "@deepseek-ai/dsh-llm": "0.2.1-rc.3",
-    "@deepseek-ai/dsh-ptc-runtime": "0.2.1-rc.3",
-    "@deepseek-ai/dsh-sandbox": "0.2.1-rc.3",
-    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-rc.3",
-    "@deepseek-ai/dsh-scope": "0.2.1-rc.3",
-    "@deepseek-ai/dsh-session": "0.2.1-rc.3",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-rc.3",
-    "@deepseek-ai/dsh-tools": "0.2.1-rc.3",
-    "@deepseek-ai/dsh-user-approval": "0.2.1-rc.3",
-    "@deepseek-ai/dsh-util-values": "0.2.1-rc.3",
-    "@deepseek-ai/dsh-working-directory": "0.2.1-rc.3",
+    "@deepseek-ai/cordis": "4.0.6-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-jobs": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-ptc-runtime": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-sandbox": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-scope": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-user-approval": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-util-values": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-working-directory": "0.2.2-alpha.2",
     "@types/js-yaml": "4.0.9",
     "@types/node": "22.15.0",
     "@types/react": "19.2.2",

package/src/client/i18n.ts

@@ -259,6 +259,9 @@ export const EN: Record<string, string> = {
   '导出 SARIF': 'Export SARIF',
   '导出 SARIF 2.1.0（供 CI / GitHub Code Scanning 消费）':
     'Export SARIF 2.1.0 for CI / GitHub Code Scanning',
+  '导出 JSON 报告': 'Export JSON report',
+  '导出完整运行模型的 JSON（供 CI 仪表盘 / PR 机器人消费，无损格式）':
+    'Export the complete run model as JSON (lossless, for CI dashboards / PR bots)',
   '观测台页签（快捷键 1-9 / 0 / -）': 'Observatory tabs (keys 1-9 / 0 / -)',
   '{a0}（按 {a1} 切换）': '{a0} (press {a1})',
   '{a0}（按 - 切换）': '{a0} (press -)',

package/src/client/index.ts

@@ -113,6 +113,7 @@ import {
 import {
   renderRunReportMarkdown, // Markdown run report (PR-pasteable)
   renderRunReportSarif, // SARIF 2.1.0 log (CI / Code Scanning)
+  renderRunReportJson, // full normalized run model (CI dashboards / PR bots)
   runReportFilename, // deterministic download filename
 } from '../report-render.ts'
 import {
@@ -2419,12 +2420,14 @@ function ObservatoryPanel(props: SlotProps) {
    *  SARIF 2.1.0 (CI / GitHub Code Scanning). Rendered from the SAME shared
    *  data model as the `iterate_report` tool, so the button and the tool can
    *  never disagree. Download-first with a copy fallback, like `exportObservatory`. */
-  const exportReport = (format: 'markdown' | 'sarif') => {
+  const exportReport = (format: 'markdown' | 'sarif' | 'json') => {
     if (!manifest) return
     const extra = { qualityGate, experienceBank, defenseEvents }
     const content = format === 'sarif'
       ? JSON.stringify(renderRunReportSarif(manifest, extra), null, 2)
-      : renderRunReportMarkdown(manifest, extra, { lang: getLang() })
+      : format === 'json'
+        ? JSON.stringify(renderRunReportJson(manifest, extra), null, 2)
+        : renderRunReportMarkdown(manifest, extra, { lang: getLang() })
     const filename = runReportFilename(format)
     const key = `report-${format}`
     const flash = () => {
@@ -3481,8 +3484,8 @@ function ObservatoryPanel(props: SlotProps) {
               title: t('将观测台全部数据导出为 JSON（优先下载，失败则复制）'),
             }, copiedKey === 'export' ? t('已导出') : t('导出 JSON')),
             // v3.9: portable report export — Markdown for a PR body, SARIF for
-            // CI / GitHub Code Scanning. Rendered from the same data model as
-            // the `iterate_report` tool.
+            // CI / GitHub Code Scanning, JSON for CI dashboards / PR bots.
+            // Rendered from the same data model as the `iterate_report` tool.
             React.createElement('button', {
               className: 'iterate-btn', 'data-copied': copiedKey === 'report-markdown' ? '' : undefined,
               onClick: () => exportReport('markdown'),
@@ -3493,6 +3496,14 @@ function ObservatoryPanel(props: SlotProps) {
               onClick: () => exportReport('sarif'),
               title: t('导出 SARIF 2.1.0（供 CI / GitHub Code Scanning 消费）'),
             }, copiedKey === 'report-sarif' ? t('已导出') : t('导出 SARIF')),
+            // v3.11: lossless JSON export — the complete normalized run model
+            // (findings + fixes + validations + quality gate + experience bank
+            // + defense events) for CI dashboards and PR bots.
+            React.createElement('button', {
+              className: 'iterate-btn', 'data-copied': copiedKey === 'report-json' ? '' : undefined,
+              onClick: () => exportReport('json'),
+              title: t('导出完整运行模型的 JSON（供 CI 仪表盘 / PR 机器人消费，无损格式）'),
+            }, copiedKey === 'report-json' ? t('已导出') : t('导出 JSON 报告')),
             // Gap #4: `.iterate/` artifacts are unreachable from the browser;
             // this copies the one instruction that makes the model echo them
             // into the session stream (which is what every panel scans).

package/src/report-render.ts

@@ -20,10 +20,15 @@
  *   - **sarif**    — SARIF 2.1.0 for CI / GitHub Code Scanning (ruleId =
  *     review dimension, severity → error | warning | note, file+line
  *     locations, suggested fix attached).
+ *   - **json**     — the complete normalized run model (see {@link RunReportData})
+ *     as a machine-readable JSON document. This is the ONLY format that carries
+ *     the full model (findings + fixes + validations + quality gate + experience
+ *     bank + defense events) without lossy projection, so CI dashboards and PR
+ *     bots can consume the exact same facts the human report shows.
  */
 
 /** Report formats accepted by the tool and the export buttons. */
-export const REPORT_FORMATS = ['markdown', 'sarif'] as const
+export const REPORT_FORMATS = ['markdown', 'sarif', 'json'] as const
 
 /** Severity ordering (lowest index = most severe). */
 const SEVERITY_ORDER = ['critical', 'high', 'medium', 'low'] as const
@@ -563,6 +568,66 @@ export function renderRunReportSarif(
   }
 }
 
+/**
+ * Render the complete normalized run model as a JSON document.
+ *
+ * This is the lossless format: unlike Markdown (human projection) and SARIF
+ * (findings-only code-scanning log), the JSON carries EVERY fact the run
+ * recorded — findings, fixes, validations, convergence, the quality gate, the
+ * experience bank, and defense events — as structured data. CI dashboards and
+ * PR bots can consume it without re-parsing a human report. A missing or
+ * partial transcript still yields a valid document (empty arrays, null stores),
+ * so an export never fails because a run was interrupted.
+ */
+export interface RunReportJson {
+  $schema: 'iterate-run-report/1'
+  project: string
+  goal: string
+  mode: string | null
+  taskMode: string | null
+  round: number
+  maxRounds: number
+  active: boolean
+  stoppedReason: string | null
+  updatedAt: string
+  convergence: number[]
+  severityCounts: { critical: number; high: number; medium: number; low: number }
+  findings: ReportFinding[]
+  fixes: ReportFix[]
+  validations: ReportValidation[]
+  qualityGate: Record<string, unknown> | null
+  experienceBank: Record<string, unknown> | null
+  defenseEvents: Record<string, unknown> | null
+}
+
+/** Render a JSON document from the same normalized data. */
+export function renderRunReportJson(
+  manifest: unknown,
+  extra?: { qualityGate?: unknown; experienceBank?: unknown; defenseEvents?: unknown } | null,
+): RunReportJson {
+  const data = buildRunReportData(manifest, extra)
+  return {
+    $schema: 'iterate-run-report/1',
+    project: data.project,
+    goal: data.goal,
+    mode: data.mode,
+    taskMode: data.taskMode,
+    round: data.round,
+    maxRounds: data.maxRounds,
+    active: data.active,
+    stoppedReason: data.stoppedReason,
+    updatedAt: data.updatedAt,
+    convergence: data.convergence,
+    severityCounts: data.severityCounts,
+    findings: data.findings,
+    fixes: data.fixes,
+    validations: data.validations,
+    qualityGate: data.qualityGate,
+    experienceBank: data.experienceBank,
+    defenseEvents: data.defenseEvents,
+  }
+}
+
 /**
  * Render a report in the requested format. Unknown formats fall back to
  * Markdown (the tool's default).
@@ -572,8 +637,9 @@ export function renderRunReport(
   manifest: unknown,
   extra?: { qualityGate?: unknown; experienceBank?: unknown; defenseEvents?: unknown } | null,
   opts?: ReportRenderOptions,
-): string | SarifLog {
+): string | SarifLog | RunReportJson {
   if (format === 'sarif') return renderRunReportSarif(manifest, extra, opts)
+  if (format === 'json') return renderRunReportJson(manifest, extra)
   return renderRunReportMarkdown(manifest, extra, opts)
 }
 
@@ -582,7 +648,7 @@ export function renderRunReport(
  * `iterate-report-2026-10-18T01-02-03-000Z.md`.
  */
 export function runReportFilename(format: string, opts?: { now?: string }): string {
-  const ext = format === 'sarif' ? 'sarif' : 'md'
+  const ext = format === 'sarif' ? 'sarif' : format === 'json' ? 'json' : 'md'
   const stamp =
     opts?.now && opts.now ? opts.now.replace(/[:.]/g, '-') : new Date().toISOString().replace(/[:.]/g, '-')
   return `iterate-report-${stamp}.${ext}`

package/src/tools/report.ts

@@ -31,7 +31,7 @@ import { readQualityGate } from './quality-store.ts'
 import { readExperienceBank } from './experience-store.ts'
 import { readDefenseEvents } from './defense-store.ts'
 import { resultHeadline } from './present.ts'
-import { renderRunReportMarkdown, renderRunReportSarif, REPORT_FORMATS } from '../report-render.ts'
+import { renderRunReportMarkdown, renderRunReportSarif, renderRunReportJson, REPORT_FORMATS } from '../report-render.ts'
 
 /** Formats accepted by the tool (kept in sync with the shared renderer). */
 const FORMATS: ReadonlySet<string> = new Set(REPORT_FORMATS)
@@ -73,19 +73,21 @@ export function registerReportTool(ctx: { tools: { register: (def: ReturnType<ty
         'quality-gate table, findings table, fixes table, per-round validations, defense events, and the ' +
         'experience bank. `format:"sarif"` renders a SARIF 2.1.0 log for CI / GitHub Code Scanning ' +
         '(one rule per review dimension; finding severity maps to error/warning/note; findings carry ' +
-        'file + line locations and the suggested fix). ' +
+        'file + line locations and the suggested fix). `format:"json"` renders the COMPLETE normalized run ' +
+        'model as machine-readable JSON (findings, fixes, validations, convergence, quality gate, ' +
+        'experience bank, defense events) — the lossless format for CI dashboards and PR bots. ' +
         'Set `write:true` to also persist the report under `.iterate/report.md` / `.iterate/report.sarif` ' +
-        'and get the path back. `lang` selects the report language (zh | en). ' +
+        '/ `.iterate/report.json` and get the path back. `lang` selects the report language (zh | en). ' +
         'Read-only apart from the optional report file; never touches source files.',
       parameters: {
         format: {
           type: 'string',
-          description: 'Report format: "markdown" (default) or "sarif".',
-          enum: ['markdown', 'sarif'],
+          description: 'Report format: "markdown" (default), "sarif", or "json".',
+          enum: ['markdown', 'sarif', 'json'],
         },
         write: {
           type: 'boolean',
-          description: 'When true, persist the report to `.iterate/report.md` / `.iterate/report.sarif` and return its path. Default: false.',
+          description: 'When true, persist the report to `.iterate/report.md` / `.iterate/report.sarif` / `.iterate/report.json` and return its path. Default: false.',
         },
         lang: {
           type: 'string',
@@ -106,10 +108,12 @@ export function registerReportTool(ctx: { tools: { register: (def: ReturnType<ty
             ok: { type: 'boolean', required: true },
             kind: { type: 'string' },
             format: { type: 'string' },
-            /** The rendered report text (Markdown, or pretty-printed SARIF JSON). */
+            /** The rendered report text (Markdown, or pretty-printed SARIF/JSON). */
             content: { type: 'string' },
             /** The SARIF log object, when format is "sarif". */
             sarif: { type: 'json' },
+            /** The full normalized run model, when format is "json". */
+            json: { type: 'json' },
             /** Whether a source transcript manifest was found on disk. */
             source: { type: 'string' },
             written: { type: 'boolean' },
@@ -161,6 +165,7 @@ export function registerReportTool(ctx: { tools: { register: (def: ReturnType<ty
         const extra = { qualityGate, experienceBank, defenseEvents }
         let content: string
         let sarif: JsonValue | undefined
+        let json: JsonValue | undefined
         let findings = 0
         try {
           if (format === 'sarif') {
@@ -170,6 +175,11 @@ export function registerReportTool(ctx: { tools: { register: (def: ReturnType<ty
             sarif = doc as unknown as JsonValue
             content = JSON.stringify(doc, null, 2)
             findings = Array.isArray(doc?.runs?.[0]?.results) ? (doc.runs[0].results as unknown[]).length : 0
+          } else if (format === 'json') {
+            const doc = renderRunReportJson(manifest, extra)
+            json = doc as unknown as JsonValue
+            content = JSON.stringify(doc, null, 2)
+            findings = doc.findings.length
           } else {
             content = renderRunReportMarkdown(manifest, extra, { lang }) as unknown as string
             findings = countMarkdownFindings(content)
@@ -189,7 +199,7 @@ export function registerReportTool(ctx: { tools: { register: (def: ReturnType<ty
           try {
             const dir = iterateDir(projectRoot)
             mkdirSync(dir, { recursive: true })
-            reportPath = `${dir}/report.${format === 'sarif' ? 'sarif' : 'md'}`
+            reportPath = `${dir}/report.${format === 'sarif' ? 'sarif' : format === 'json' ? 'json' : 'md'}`
             writeFileSync(reportPath, content, 'utf-8')
             written = true
           } catch (err) {
@@ -208,6 +218,7 @@ export function registerReportTool(ctx: { tools: { register: (def: ReturnType<ty
           format,
           content,
           ...(sarif !== undefined ? { sarif } : {}),
+          ...(json !== undefined ? { json } : {}),
           source,
           written,
           ...(reportPath ? { reportPath } : {}),