v0.3.5

Cut from b7fca89ef4. Supersedes v0.3.2, and the v0.3.3/v0.3.4 release candidates cut automatically in between.

Fixed

The sidebar working indicator is back. v0.3.2 removed the spinner from session rows as redundant, but it was the only cross-session indicator — with several sessions running there was no way to tell which were busy. The other three removals from that change stay; only the sidebar row is restored, and a pending permission still takes precedence over it. (#711, closes #709)

Release tooling

Two bugs that made the release pipeline unrehearsable, both found by actually running it:

• A dry run demanded production secrets. promote --dry_run=true logs the catalog PATCHes it would send and never calls the API, yet it required PLATFORM_API_BASE — so the one mode meant to be safe was the mode you couldn't run. The key was gated correctly; the base wasn't. release-candidate.yml had an identical copy. (#708)
• A CLI-only release couldn't update the catalog. The catalog lists nine apps, five CLI and four desktop, and the publisher threw on the first missing desktop asset. Desktop installers are deliberately kept out of the public repo while Windows signing is unconfigured, so CLI-only is the normal shape — which made the catalog unupdatable for every release actually cut. A missing desktop asset is now skipped and logged; a missing CLI asset still fails. (#710)

Verified

All ten CLI artifacts downloaded anonymously and checked for correct architecture — darwin-arm64, darwin-x64, linux-x64, linux-arm64, windows-x64, under both the koder-* and legacy aixplain-code-* names. Full suite 5913 pass / 0 fail; lint and typecheck clean.

Full changelog: v0.3.2...v0.3.5