fix: address PR review findings and OSS readiness

Release workflows: checkout the correct ref on workflow_dispatch instead
of defaulting to branch HEAD, preventing mismatched binaries for tags.

SDK (run_flow): check runtime state before resuming — only call resume
when the runtime is actually paused, avoiding failures on already-running
runtimes. Omit spec key from request body when None instead of sending
"spec": null. Add skip_serializing_if to FlowRunSpec fields so unset
options aren't serialized as null.

Auth: remove spurious Content-Type: application/json from token exchange
(empty body). Use .expect() instead of .unwrap() on SystemTime.

CLI: add proper clap env bindings with hide_env_values on the SA key.
Expose --since, --until, --offset, --limit on flow list-runs. Require
--http when --bind is passed on the mcp subcommand.

OSS readiness: add MIT LICENSE (Ascend Labs, Inc), remove private PyPI
index from pyproject.toml, add .env to .gitignore, add repository/
homepage URLs to all Cargo.toml and pyproject.toml, add readme to
pyproject.toml, note Windows unsupported in README.

API surface: add #[non_exhaustive] to RuntimeFilters and FlowRunFilters
for semver safety. Add SAFETY comment on unsafe block in reset_sigint.
Update skill.md with missing spec fields.

Apply same fixes (conditional resume, spec omission, Content-Type) to
tests/rest.py reference client.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: lostmygithubaccount

.github/workflows/release-python.yml

@@ -34,6 +34,8 @@ jobs:
             os: macos-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.inputs.tag || github.ref }}
       - uses: actions/setup-python@v5
         with:
           python-version: "3.13"
@@ -62,6 +64,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.inputs.tag || github.ref }}
       - uses: actions/setup-python@v5
         with:
           python-version: "3.13"

.github/workflows/release.yml

@@ -34,6 +34,8 @@ jobs:
             os: macos-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.inputs.tag || github.ref }}
       - uses: actions/setup-python@v5
         with:
           python-version: "3.13"

.gitignore

@@ -17,6 +17,10 @@ dist/
 .vscode/
 *.swp
 
+# Secrets
+.env
+.env.*
+
 # OS
 .DS_Store
 

CLAUDE.md

@@ -102,7 +102,7 @@ ascend-tools [-o text|json] [-V]
 
   flow list --runtime <UUID>
   flow run <FLOW_NAME> --runtime <UUID> [--spec '{}'] [--resume]
-  flow list-runs -r/--runtime <UUID> [--status, -f/--flow-name]
+  flow list-runs -r/--runtime <UUID> [--status, -f/--flow-name, --since, --until, --offset, --limit]
   flow get-run <RUN_NAME> -r/--runtime <UUID>
 
   skill install --target <PATH>

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Ascend Labs, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -6,6 +6,8 @@ SDK, CLI, and MCP server for the Ascend REST API.
 
 ## Install
 
+Pre-built binaries are available for Linux and macOS. Windows users should use Linux/macOS.
+
 ```bash
 uv tool install ascend-tools
 ```

pyproject.toml

@@ -6,6 +6,11 @@ requires-python = ">=3.11"
 license = "MIT"
 authors = [{ name = "Cody", email = "cody.peterson@ascend.io" }]
 dependencies = []
+readme = "README.md"
+
+[project.urls]
+Repository = "https://github.com/ascend-io/ascend-tools"
+Homepage = "https://github.com/ascend-io/ascend-tools"
 
 [project.scripts]
 ascend-tools = "ascend_tools:main"
@@ -24,13 +29,6 @@ python-packages = ["ascend_tools"]
 python-source = "src"
 manifest-path = "src/ascend_tools/ascend-tools-py/Cargo.toml"
 
-[[tool.uv.index]]
-url = "https://pypi.org/simple/"
-
-[[tool.uv.index]]
-url = "https://us-python.pkg.dev/ascend-io-ops-artifacts/private-pypi/simple"
-default = true
-
 [build-system]
 requires = ["maturin>=1.0,<2.0"]
 build-backend = "maturin"

src/ascend_tools/ascend-tools-cli/Cargo.toml

@@ -6,6 +6,8 @@ rust-version = "1.85"
 authors = ["Cody <cody.peterson@ascend.io>"]
 license = "MIT"
 description = "CLI for the Ascend REST API"
+repository = "https://github.com/ascend-io/ascend-tools"
+homepage = "https://github.com/ascend-io/ascend-tools"
 
 [lib]
 name = "ascend_tools_cli"

src/ascend_tools/ascend-tools-cli/src/cli.rs

@@ -12,16 +12,21 @@ struct Cli {
     #[arg(short, long, global = true, value_enum, default_value_t = OutputMode::Text)]
     output: OutputMode,
 
-    /// Service account ID [env: ASCEND_SERVICE_ACCOUNT_ID]
-    #[arg(long, global = true)]
+    /// Service account ID
+    #[arg(long, global = true, env = "ASCEND_SERVICE_ACCOUNT_ID")]
     service_account_id: Option<String>,
 
-    /// Service account key [env: ASCEND_SERVICE_ACCOUNT_KEY]
-    #[arg(long, global = true)]
+    /// Service account key
+    #[arg(
+        long,
+        global = true,
+        env = "ASCEND_SERVICE_ACCOUNT_KEY",
+        hide_env_values = true
+    )]
     service_account_key: Option<String>,
 
-    /// Instance API URL [env: ASCEND_INSTANCE_API_URL]
-    #[arg(long, global = true)]
+    /// Instance API URL
+    #[arg(long, global = true, env = "ASCEND_INSTANCE_API_URL")]
     instance_api_url: Option<String>,
 
     #[command(subcommand)]
@@ -52,7 +57,7 @@ enum Commands {
         #[arg(long)]
         http: bool,
         /// Bind address for HTTP transport
-        #[arg(long, default_value = "127.0.0.1:8000")]
+        #[arg(long, default_value = "127.0.0.1:8000", requires = "http")]
         bind: String,
     },
     /// Manage skills
@@ -127,6 +132,18 @@ enum FlowCommands {
         status: Option<String>,
         #[arg(short, long)]
         flow_name: Option<String>,
+        /// Filter by start time (ISO 8601)
+        #[arg(long)]
+        since: Option<String>,
+        /// Filter by end time (ISO 8601)
+        #[arg(long)]
+        until: Option<String>,
+        /// Pagination offset
+        #[arg(long)]
+        offset: Option<u64>,
+        /// Pagination limit
+        #[arg(long)]
+        limit: Option<u64>,
     },
     /// Get a flow run
     #[command(arg_required_else_help = true)]
@@ -216,12 +233,12 @@ fn handle_runtime(
             project_uuid,
             environment_uuid,
         } => {
-            let runtimes = client.list_runtimes(RuntimeFilters {
-                id,
-                kind,
-                project_uuid,
-                environment_uuid,
-            })?;
+            let mut filters = RuntimeFilters::default();
+            filters.id = id;
+            filters.kind = kind;
+            filters.project_uuid = project_uuid;
+            filters.environment_uuid = environment_uuid;
+            let runtimes = client.list_runtimes(filters)?;
             match output {
                 OutputMode::Json => print_json(&runtimes)?,
                 OutputMode::Text => {
@@ -321,15 +338,19 @@ fn handle_flow(
             runtime,
             status,
             flow_name,
+            since,
+            until,
+            offset,
+            limit,
         } => {
-            let runs = client.list_flow_runs(
-                &runtime,
-                FlowRunFilters {
-                    status,
-                    flow: flow_name,
-                    ..Default::default()
-                },
-            )?;
+            let mut filters = FlowRunFilters::default();
+            filters.status = status;
+            filters.flow = flow_name;
+            filters.since = since;
+            filters.until = until;
+            filters.offset = offset;
+            filters.limit = limit;
+            let runs = client.list_flow_runs(&runtime, filters)?;
             match output {
                 OutputMode::Json => print_json(&runs)?,
                 OutputMode::Text => {
@@ -522,6 +543,47 @@ mod tests {
         ));
     }
 
+    #[test]
+    fn test_cli_parses_flow_list_runs_all_filters() {
+        let cli = Cli::parse_from([
+            "ascend-tools",
+            "flow",
+            "list-runs",
+            "--runtime",
+            "uuid-123",
+            "--status",
+            "running",
+            "--flow-name",
+            "sales",
+            "--since",
+            "2025-01-01T00:00:00Z",
+            "--until",
+            "2025-12-31T23:59:59Z",
+            "--offset",
+            "10",
+            "--limit",
+            "50",
+        ]);
+        match cli.command {
+            Some(Commands::Flow {
+                command:
+                    Some(FlowCommands::ListRuns {
+                        since,
+                        until,
+                        offset,
+                        limit,
+                        ..
+                    }),
+            }) => {
+                assert_eq!(since.as_deref(), Some("2025-01-01T00:00:00Z"));
+                assert_eq!(until.as_deref(), Some("2025-12-31T23:59:59Z"));
+                assert_eq!(offset, Some(10));
+                assert_eq!(limit, Some(50));
+            }
+            _ => panic!("expected ListRuns command"),
+        }
+    }
+
     #[test]
     fn test_cli_parses_flow_get_run() {
         let cli = Cli::parse_from([

src/ascend_tools/ascend-tools-cli/src/skill.md

@@ -33,7 +33,7 @@ ascend-tools runtime pause <UUID>
 ```bash
 ascend-tools flow list --runtime <UUID>
 ascend-tools flow run <FLOW_NAME> --runtime <UUID> [--spec '<JSON>'] [--resume]
-ascend-tools flow list-runs --runtime <UUID> [--status <STATUS>] [--flow-name <NAME>]
+ascend-tools flow list-runs --runtime <UUID> [--status <STATUS>] [--flow-name <NAME>] [--since <ISO8601>] [--until <ISO8601>] [--offset <N>] [--limit <N>]
 ascend-tools flow get-run <RUN_NAME> --runtime <UUID>
 ```
 
@@ -47,7 +47,7 @@ ascend-tools flow run my-flow --runtime <UUID> --spec '{"components": ["componen
 ascend-tools flow run my-flow --runtime <UUID> --spec '{"run_tests": false}'
 ```
 
-Available spec fields: `full_refresh`, `components`, `component_categories`, `parameters`, `run_tests`, `halt_flow_on_error`, `disable_optimizers`, `runner_overrides`.
+Available spec fields: `full_refresh`, `components`, `component_categories`, `parameters`, `run_tests`, `store_test_results`, `halt_flow_on_error`, `disable_optimizers`, `update_materialization_type`, `deep_data_pruning`, `backfill_missing_statistics`, `disable_incremental_metadata_collection`, `runner_overrides`.
 
 ## Output