ART transport core

[SaschaCowley]

Link to issue number:

None

Summary of the issue:

NVDA needs an out-of-process, sandboxed add-on runtime (ART) to help protect against malicious and/or buggy add-ons. Before any feature work can be built, ART needs a generic, feature-agnostic transport layer to carry calls across the NVDA—add-on process boundary.

Description of user facing changes:

None, just plumbing/architecture at this point.

Description of developer facing changes:

New _art package and _art.transport subpackage, which provide the rpyc-over-pipes core that ART will use for IPC:

• Connection: wraps a single bidirectional rpyc connection over a Stream. Exposes a local Service to the peer and reaches the peer's root service via remoteService. Serves peer requests either in the calling thread (eventLoop) or a background thread (bgEventLoop).
• Service: base class for objects exposed across the boundary. Methods are opted-in with @Service.exposed. Owns the lifecycle of dependent connections it opens and dependant services it returns; terminate() cascades teardown to both.
• Proxy: base class for the local-side wrapper that re-presents a remote service through NVDA's normal interface. Usable as a mixin; closes any held connections on destruction.
• PROTOCOL_CONFIG: the shared, deliberately restrictive rpyc protocol config.

Description of development approach:

Harvested the rpyc-over-pipes transport and Service/Proxy model from the synth driver host (_bridge), but rebuilt it feature-generic from the start (nothing synth-specific) and added the explicit lifecycle/teardown discipline from the pyro5-based ART prototype.

Notes:

• _art.transport.config.PROTOCOL_CONFIG sets allow_public_attrs, allow_safe_attrs, allow_all_attrs, allow_setattr, allow_delattr and allow_pickle to False, so only explicitly exposed attributes/methods are available to add-ons, and remote code execution via deserialization is prevented. allow_getattr is True because exposed methods are themselves reached via attribute access; with everything else locked down the exposed allowlist is all that remains reachable. Changing these settings affects the security of ART.
• Importing _art.transport sets rpyc.core.vinegar.exceptions_module = builtins. This is necessary because NVDA has its own level exceptions module, which rpyc would otherwise pick up over builtins, breaking remote exception deserialization. _bridge patches this on the host side, but it's done globally here so it applies to both sides of the connection. The patch is idempotent.

Testing strategy:

tests/unit/test_art/test_artTransport.py exercises the transport over an in-process PipeStream duplex pair:

• round-trip of an exposed method;
• bidirectional callback (a callable passed to the peer invoked back across the connection);
• non-exposed attributes/methods are blocked (AttributeError);
• a terminated service refuses further calls and the exception deserializes correctly (covers the vinegar patch);
• a dependant service returned over the boundary is terminated together with its parent.

Known issues with pull request:

• No real cross-process test yet. Actual IPC is coming in a future PR.
• No NVDA-core integration; nothing is wired up or user-reachable.

Code Review Checklist:

• Documentation:
  • Change log entry
  • User Documentation
  • Developer / Technical Documentation
  • Context sensitive help for GUI changes
• Testing:
  • Unit tests
  • System (end to end) tests
  • Manual testing
• UX of all users considered:
  • Speech
  • Braille
  • Low Vision
  • Different web browsers
  • Localization in other languages / culture than English
• API is compatible with existing add-ons.
• Security precautions taken.

[SaschaCowley]

Converted to draft pending opening an implementation roadmap

[seanbudd]

Is the name of the connection just used in internal logging?

[Copilot]

Pull request overview

This PR introduces the initial, feature-agnostic IPC transport layer for NVDA’s Add-on Runtime (ART), providing a restricted rpyc-over-pipes foundation (Connection/Service/Proxy) plus unit tests to validate core cross-boundary behaviors.

Changes:

• Added _art.transport with a restrictive rpyc protocol configuration and required global vinegar patching for exception deserialization.
• Implemented Service lifecycle management (exposed-method allowlisting, termination, dependent connection/service teardown) and Connection wrapper with background serving loops.
• Added a Proxy base and unit tests covering exposed calls, bidirectional callbacks, blocked non-exposed access, termination behavior, and dependent-service lifetime.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
tests/unit/test_art/init.py	Establishes the new ART unit test package.
tests/unit/test_art/test_artTransport.py	Adds unit coverage for the new transport primitives over an in-process pipe stream.
source/_art/init.py	Introduces the new _art package namespace for ART.
source/_art/transport/init.py	Exposes the transport public surface (PROTOCOL_CONFIG, Connection, Proxy, Service).
source/_art/transport/config.py	Defines security-restrictive rpyc protocol config and applies required global rpyc patches.
source/_art/transport/connection.py	Implements a bidirectional connection wrapper over an rpyc Stream, with serving loops and safe close semantics.
source/_art/transport/proxy.py	Provides a local-side base proxy that owns and closes dependent connections.
source/_art/transport/service.py	Adds a base service with explicit exposure, termination discipline, and dependent resource lifetime management.

Comments suppressed due to low confidence (1)

source/_art/transport/proxy.py:41

• Docstring parameter name typo: :param con: should be :param conn: to match the argument name.

	def _holdConnection(self, conn: Connection) -> None:
		"""Keep ``conn`` alive for at least as long as this proxy.

		:param con: Connection to keep alive.
		"""