Files
windmill/backend
Ruben FiszelandClaude Opus 5 740df390e7 Merge origin/main into ruben/operator-builder-rights
Conflicts:
- `backend/ee-repo-ref.txt`: pinned to the EE branch merged onto the ref main now
  carries (90aa05c).
- `backend/windmill-api/src/apps.rs`: took main's `derived_triggerables` parameter
  and kept both test modules.

Main turned `Policy.execution_mode` into an accessor over an optional stated mode,
and made `update_app_internal` resolve an unstated one to the *deployed* app's.
That reopens the hole the Viewer refusal closes: a builder redeploying over an
admin's viewer-mode app would send a policy stating no mode, pass the check on the
`publisher` default, and then inherit `Viewer` on write. The check now reads the
stated mode and pins an omitted one to `publisher`.

`derived_triggerables` itself is not reachable by a builder: only
`update_app_raw_source` passes it, and that endpoint stays closed to operators.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-18 07:53:41 +00:00
..

Windmill Backend

This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.

Components

name description
windmill-api The API server, exposing functionality to other components and the frontend
windmill-audit Contains audit functionality, allowing different components to record important actions
windmill-common Common code shared by all crates
windmill-queue Contains job & flow queuing functionality, commonly written to by the API server and read from by workers
windmill-worker The worker. Used to process and execute flows & jobs.
parsers Contains code to parse signatures in different langauges.

Compile sqlx for offline ci

cargo sqlx prepare --workspace -- --bin windmill --features enterprise