From f77ba72a083895d4e6983f691a80ec6304594896 Mon Sep 17 00:00:00 2001 From: Ruben Fiszel Date: Tue, 1 Sep 2026 13:07:22 +0000 Subject: [PATCH] docs: record the worker_dir invariant on handle_python_deps Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01CaJT7Dhwt4iQMsJgYTwvi3 --- backend/windmill-worker/src/python_executor.rs | 3 +++ 1 file changed, 3 insertions(+) diff --git a/backend/windmill-worker/src/python_executor.rs b/backend/windmill-worker/src/python_executor.rs index c9730f719d..023522acd3 100644 --- a/backend/windmill-worker/src/python_executor.rs +++ b/backend/windmill-worker/src/python_executor.rs @@ -1878,6 +1878,9 @@ pub(crate) async fn handle_python_deps( job_id: &Uuid, conn: &Connection, worker_name: &str, + // The worker's own directory, never a job dir nested under it: with sandboxing on, the + // uv-install nsjail config bind-mounts `{worker_dir}/download_deps.py.sh`, and the worker + // writes that script only there, once, at startup. worker_dir: &str, mem_peak: &mut i32, canceled_by: &mut Option,