Codex/registry v1

.flow/registry/plugins.json

@@ -0,0 +1,6 @@
+{
+  "schema_version": 1,
+  "generated_at": "2026-06-12T17:08:48.501401Z",
+  "registry_hash": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
+  "plugins": []
+}

.github/workflows/ci.yml

@@ -21,3 +21,4 @@ jobs:
       - run: cargo fmt --all --check
       - run: cargo clippy --all-targets --all-features -- -D warnings
       - run: cargo test --all
+      - run: cargo run -- registry scan --check

.gitignore

@@ -1,5 +1,7 @@
 /target/
-/.flow/
+/.flow/*
+!/.flow/registry/
+!/.flow/registry/plugins.json
 /logs/
 /.repolens/
 /flowrun-codex-ready/

Cargo.toml

@@ -23,6 +23,7 @@ rusqlite = { version = "0.37", features = ["bundled"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 serde_yaml = "0.9"
+sha2 = "0.10"
 thiserror = "2"
 tokio = { version = "1", features = ["full"] }
 tracing = "0.1"

README.md

@@ -169,7 +169,7 @@ logs/
   <run_id>/<step_name>/step.metadata.json
 ```
 
-The `.flow/` directory is ignored by Git.
+The `.flow/` directory is ignored by Git except `.flow/registry/plugins.json`, which is generated and versioned as the local plugin contract.
 
 ## CLI Commands
 
@@ -332,6 +332,37 @@ flow plugin test "unused-command" .\plugin-output.json
 flow plugin test "powershell -NoProfile -File .\plugin.ps1" .\plugin-input.json
 ```
 
+### Registry
+
+The registry is the generated local plugin contract shared with validation, UI, MCP and `runflow-agent`.
+
+```powershell
+flow registry scan
+flow registry scan --check
+flow registry list plugins
+flow registry inspect <plugin_name>
+flow registry export --for-agent
+```
+
+V1 scans `plugins/*/plugin.yml` and writes `.flow/registry/plugins.json`. The file is generated, committed, and checked in CI with `flow registry scan --check`. Empty registries are valid and contain `plugins: []`.
+
+Plugin workflows keep the explicit syntax:
+
+```yaml
+steps:
+  - name: check
+    type: plugin
+    run:
+      command: python
+      args: ["plugins/my_plugin/run.py"]
+    plugin_id: my_plugin
+    input: {}
+```
+
+`flow validate` rejects plugin steps whose `plugin_id` is registered but whose command does not reference the registered `entrypoint`.
+
+See `docs/registry.md` for the development workflow and contract.
+
 ### Packages
 
 Build a package from a workflow: