feat(controlplane): allow filtering workflow runs by workflow and version

[migmartri]

Description

Enables filtering workflow runs by workflow and project version together, and makes version filtering usable from the CLI.

• Removes the restriction that made the workflow and version filters mutually exclusive on the workflow run list endpoint. They are independent dimensions and now compose as an AND, returning the runs of a given workflow at a given version. There was no clear reasoning for the original restriction.
• Adds a --version flag to chainloop workflow workflow-run list. The flag takes a project version name (e.g. v1.2.0) and requires --project, since a version name is unique only within a project. It can be combined with --workflow.
• On the API, WorkflowRunServiceListRequest.project_version (UUID) is deprecated in favor of a new project_version_name field that is resolved to a version within the given project. The dependency on project_name is enforced both at the API layer and server-side. The deprecated UUID field is kept for backward compatibility.

closes #3172

AI Disclosure

This contribution was assisted by Claude Code.

[cubic-dev-ai]

No issues found across 2 files

_{Re-trigger cubic}

[chainloop-platform]

AI Session Analysis

Avg score	Sessions	Failing policies	Attribution	Files	Lines	Total Duration
🟡 83%	1	✅ 0	99% AI / 1% Human	6	+142 / -19	44m3s

🟡 83% — 99% AI — ✅ All policies passing

Jun 8, 2026 20:38 UTC · 44m3s · $36.27 · 111.6k in / 305.1k out · claude-code 2.1.168 (claude-opus-4-8)

View session details ↗

Change Summary

• Adds workflow-run filtering by workflow and version in biz logic and regression coverage.
• Adds CLI --version filtering by version name and requires --project.
• Deprecates UUID project_version, adds project_version_name, resolves it server-side, and updates generated API and docs.

AI Session Overall Score

🟡 83% — Strong implementation, but planning and direct server-path verification stayed partial.

AI Session Analysis Breakdown

🟢 92% · alignment

🟢 AI clarified the UUID-versus-name contract before changing the API and CLI surfaces. · High Impact

🟢 91% · user-trust-signal

🟢 User follow-ups expanded scope cleanly from backend fix to CLI support and cleanup. · High Impact

🟢 90% · scope-discipline

No notes.

🟢 88% · solution-quality

No notes.

🟡 72% · verification

🟢 AI flipped the workflow-run regression test red-to-green and reran the 60-test suite. · High Impact

🟠 The new project-version-name server path lacks a direct service or integration test. · Medium Severity

💡 Add the cheapest end-to-end check or a manual run whenever a new server path lacks harness coverage.

🟡 68% · context-and-planning

🟠 The backend, API, CLI, and docs expansion ran without any visible plan, TODO list, or plan-mode artifact. · Medium Severity

💡 Write a short visible plan before editing multi-layer changes so scope and checkpoints stay explicit.

---

File Attribution

███████████████████░ 99% AI / 1% Human

Status	Attribution	File	Lines
created	ai	app/cli/cmd/workflow_workflow_run_list_test.go	+65 / -0
modified	ai	app/controlplane/internal/service/workflowrun.go	+34 / -6
modified	ai	app/controlplane/api/controlplane/v1/workflow_run.proto	+22 / -5
modified	ai	app/cli/cmd/workflow_workflow_run_list.go	+11 / -3
modified	ai	app/cli/pkg/action/workflow_run_list.go	+9 / -5
modified	human	app/cli/documentation/cli-reference.mdx	+1 / -0

---

Policies (4)

Status	Policy	Material	Messages
✅ Passed	ai-config-ai-agents-allowed	ai-coding-session-62f19a	-
✅ Passed	ai-config-no-dangerous-commands	ai-coding-session-62f19a	-
✅ Passed	ai-config-no-secrets	ai-coding-session-62f19a	-
✅ Passed	ai-config-mcp-servers-allowed	ai-coding-session-62f19a	-

---

Powered by Chainloop and Chainloop Trace