v3.24.0 — TUI live progress + complexity cleanup + analyzer fixes

What's New

TUI/Agentloop Live Progress (issue #424)

• Live tool timing: ToolStart/ToolEnd callbacks with elapsed duration
• NDJSON progress output (--progress json, --progress-dest, --progress-file)
• Live token/cost footer updates every 250ms during streaming
• Esc cancels in-flight TUI prompt
• Autonomy trigger loops exit promptly on context cancellation

sin-code analyse-image (issue #423)

• Vision-capable LLM model for image analysis
• No Tesseract/CGO dependency
• New MCP tool sin_analyse_image

Security Scanning V2

• sin-code security scan secrets/sast/sca/sbom/container/all
• SARIF 2.1.0 output (--format sarif)
• Apple container runtime preferred, Docker fallback
• CEO-audit security gate integration

Complexity Cleanup (55+ files merged)

• All single-export subcommand files merged into natural caller modules
• Zero unapproved findings, zero removable lines
• All 5 complexity analyzers fixed (cross-file interface counting, cobra-constructor exemption, method-wrapper/test-hook skipping, cross-file dead-flag detection, 10-line approval scan window)
• Scoring corrected: 100 - NetLines/100 (clean = A+)
• sin-debt scanner skips .md documentation files

Test Suite Hardening

• Docker-dependent tests auto-skip when daemon unavailable
• Parallel DAG timing race eliminated
• Cron/watch enqueue race fixed
• Security/harvest tests environment-independent
• Browser popup fixed during test runs

Metrics

• CEO Audit: Score 100, Grade A+, 48/48 gates pass
• Complexity: 0 unapproved findings, 0 removable lines
• Rot-risk: 0 (116 markers, all with upgrade trigger)
• Build: pass | Lint: 0 issues | Tests: green

Downloads

• brew install opensin-code/sin/sin-code (Homebrew)
• curl -fsSL https://raw.githubusercontent.com/OpenSIN-Code/SIN-Code/main/install.sh | bash
• Direct binaries for linux/darwin/windows × amd64/arm64