eryx-run 0.1.0__tar.gz

eryx_run-0.1.0/.gitignore

@@ -0,0 +1,13 @@
+# Allowlist: ignore everything here except the package's own files, so
+# virtualenvs, caches, build output and local env files stay out.
+/*
+!/.gitignore
+!/README.md
+!/pyproject.toml
+!/uv.lock
+!/LICENSE-MIT
+!/LICENSE-APACHE
+!/src/
+!/tests/
+__pycache__/
+*.py[cod]

eryx_run-0.1.0/LICENSE-APACHE

@@ -0,0 +1,201 @@
+                              Apache License
+                        Version 2.0, January 2004
+                     http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+   "License" shall mean the terms and conditions for use, reproduction,
+   and distribution as defined by Sections 1 through 9 of this document.
+
+   "Licensor" shall mean the copyright owner or entity authorized by
+   the copyright owner that is granting the License.
+
+   "Legal Entity" shall mean the union of the acting entity and all
+   other entities that control, are controlled by, or are under common
+   control with that entity. For the purposes of this definition,
+   "control" means (i) the power, direct or indirect, to cause the
+   direction or management of such entity, whether by contract or
+   otherwise, or (ii) ownership of fifty percent (50%) or more of the
+   outstanding shares, or (iii) beneficial ownership of such entity.
+
+   "You" (or "Your") shall mean an individual or Legal Entity
+   exercising permissions granted by this License.
+
+   "Source" form shall mean the preferred form for making modifications,
+   including but not limited to software source code, documentation
+   source, and configuration files.
+
+   "Object" form shall mean any form resulting from mechanical
+   transformation or translation of a Source form, including but
+   not limited to compiled object code, generated documentation,
+   and conversions to other media types.
+
+   "Work" shall mean the work of authorship, whether in Source or
+   Object form, made available under the License, as indicated by a
+   copyright notice that is included in or attached to the work
+   (an example is provided in the Appendix below).
+
+   "Derivative Works" shall mean any work, whether in Source or Object
+   form, that is based on (or derived from) the Work and for which the
+   editorial revisions, annotations, elaborations, or other modifications
+   represent, as a whole, an original work of authorship. For the purposes
+   of this License, Derivative Works shall not include works that remain
+   separable from, or merely link (or bind by name) to the interfaces of,
+   the Work and Derivative Works thereof.
+
+   "Contribution" shall mean any work of authorship, including
+   the original version of the Work and any modifications or additions
+   to that Work or Derivative Works thereof, that is intentionally
+   submitted to the Licensor for inclusion in the Work by the copyright owner
+   or by an individual or Legal Entity authorized to submit on behalf of
+   the copyright owner. For the purposes of this definition, "submitted"
+   means any form of electronic, verbal, or written communication sent
+   to the Licensor or its representatives, including but not limited to
+   communication on electronic mailing lists, source code control systems,
+   and issue tracking systems that are managed by, or on behalf of, the
+   Licensor for the purpose of discussing and improving the Work, but
+   excluding communication that is conspicuously marked or otherwise
+   designated in writing by the copyright owner as "Not a Contribution."
+
+   "Contributor" shall mean Licensor and any individual or Legal Entity
+   on behalf of whom a Contribution has been received by Licensor and
+   subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   copyright license to reproduce, prepare Derivative Works of,
+   publicly display, publicly perform, sublicense, and distribute the
+   Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   (except as stated in this section) patent license to make, have made,
+   use, offer to sell, sell, import, and otherwise transfer the Work,
+   where such license applies only to those patent claims licensable
+   by such Contributor that are necessarily infringed by their
+   Contribution(s) alone or by combination of their Contribution(s)
+   with the Work to which such Contribution(s) was submitted. If You
+   institute patent litigation against any entity (including a
+   cross-claim or counterclaim in a lawsuit) alleging that the Work
+   or a Contribution incorporated within the Work constitutes direct
+   or contributory patent infringement, then any patent licenses
+   granted to You under this License for that Work shall terminate
+   as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+   Work or Derivative Works thereof in any medium, with or without
+   modifications, and in Source or Object form, provided that You
+   meet the following conditions:
+
+   (a) You must give any other recipients of the Work or
+       Derivative Works a copy of this License; and
+
+   (b) You must cause any modified files to carry prominent notices
+       stating that You changed the files; and
+
+   (c) You must retain, in the Source form of any Derivative Works
+       that You distribute, all copyright, patent, trademark, and
+       attribution notices from the Source form of the Work,
+       excluding those notices that do not pertain to any part of
+       the Derivative Works; and
+
+   (d) If the Work includes a "NOTICE" text file as part of its
+       distribution, then any Derivative Works that You distribute must
+       include a readable copy of the attribution notices contained
+       within such NOTICE file, excluding those notices that do not
+       pertain to any part of the Derivative Works, in at least one
+       of the following places: within a NOTICE text file distributed
+       as part of the Derivative Works; within the Source form or
+       documentation, if provided along with the Derivative Works; or,
+       within a display generated by the Derivative Works, if and
+       wherever such third-party notices normally appear. The contents
+       of the NOTICE file are for informational purposes only and
+       do not modify the License. You may add Your own attribution
+       notices within Derivative Works that You distribute, alongside
+       or as an addendum to the NOTICE text from the Work, provided
+       that such additional attribution notices cannot be construed
+       as modifying the License.
+
+   You may add Your own copyright statement to Your modifications and
+   may provide additional or different license terms and conditions
+   for use, reproduction, or distribution of Your modifications, or
+   for any such Derivative Works as a whole, provided Your use,
+   reproduction, and distribution of the Work otherwise complies with
+   the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+   any Contribution intentionally submitted for inclusion in the Work
+   by You to the Licensor shall be under the terms and conditions of
+   this License, without any additional terms or conditions.
+   Notwithstanding the above, nothing herein shall supersede or modify
+   the terms of any separate license agreement you may have executed
+   with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+   names, trademarks, service marks, or product names of the Licensor,
+   except as required for reasonable and customary use in describing the
+   origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+   agreed to in writing, Licensor provides the Work (and each
+   Contributor provides its Contributions) on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied, including, without limitation, any warranties or conditions
+   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+   PARTICULAR PURPOSE. You are solely responsible for determining the
+   appropriateness of using or redistributing the Work and assume any
+   risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+   whether in tort (including negligence), contract, or otherwise,
+   unless required by applicable law (such as deliberate and grossly
+   negligent acts) or agreed to in writing, shall any Contributor be
+   liable to You for damages, including any direct, indirect, special,
+   incidental, or consequential damages of any character arising as a
+   result of this License or out of the use or inability to use the
+   Work (including but not limited to damages for loss of goodwill,
+   work stoppage, computer failure or malfunction, or any and all
+   other commercial damages or losses), even if such Contributor
+   has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+   the Work or Derivative Works thereof, You may choose to offer,
+   and charge a fee for, acceptance of support, warranty, indemnity,
+   or other liability obligations and/or rights consistent with this
+   License. However, in accepting such obligations, You may act only
+   on Your own behalf and on Your sole responsibility, not on behalf
+   of any other Contributor, and only if You agree to indemnify,
+   defend, and hold each Contributor harmless for any liability
+   incurred by, or claims asserted against, such Contributor by reason
+   of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+   To apply the Apache License to your work, attach the following
+   boilerplate notice, with the fields enclosed by brackets "[]"
+   replaced with your own identifying information. (Don't include
+   the brackets!)  The text should be enclosed in the appropriate
+   comment syntax for the file format. We also recommend that a
+   file or class name and description of purpose be included on the
+   same "printed page" as the copyright notice for easier
+   identification within third-party archives.
+
+Copyright 2026 Ben Sully
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

eryx_run-0.1.0/LICENSE-MIT

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ben Sully <ben.sully88@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

eryx_run-0.1.0/PKG-INFO

@@ -0,0 +1,116 @@
+Metadata-Version: 2.5
+Name: eryx-run
+Version: 0.1.0
+Summary: Run Python in an eryx sandbox on eryx.run, with the same API as pyeryx
+Project-URL: Homepage, https://eryx.run
+Project-URL: Documentation, https://eryx.run/docs
+Project-URL: Repository, https://github.com/eryx-org/eryx
+License-Expression: MIT OR Apache-2.0
+License-File: LICENSE-APACHE
+License-File: LICENSE-MIT
+Keywords: eryx,isolation,sandbox,security,wasm,webassembly
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Typing :: Typed
+Requires-Python: >=3.10
+Requires-Dist: httpx>=0.27
+Requires-Dist: websockets>=14
+Description-Content-Type: text/markdown
+
+# eryx-run
+
+Run untrusted Python in an [eryx](https://github.com/eryx-org/eryx) sandbox on
+[eryx.run](https://eryx.run), with the same API as
+[pyeryx](https://pypi.org/project/pyeryx/), which runs sandboxes in your own
+process. Moving between the two is an import:
+
+```python
+import eryx_run as eryx  # or: import eryx
+
+sandbox = eryx.Sandbox()
+result = sandbox.execute("print(2 + 2)")
+print(result.stdout_text)  # 4
+```
+
+eryx-run is pure Python (it depends on `httpx` and `websockets`), so it
+installs anywhere, with no WebAssembly runtime of its own.
+
+```sh
+pip install eryx-run
+export ERYX_API_KEY=eryx_...   # from https://app.eryx.run
+```
+
+## Callbacks
+
+Sandboxed code can `await` functions you provide. They run in your process,
+sync or async:
+
+```python
+import eryx_run as eryx
+
+callbacks = eryx.CallbackRegistry()
+
+@callbacks.callback(description="Look up a user by id")
+async def get_user(id: int) -> dict:
+    return {"id": id, "name": "Ada"}
+
+sandbox = eryx.Sandbox(callbacks=callbacks)
+result = sandbox.execute("""
+user = await get_user(id=123)
+print(user["name"])
+""")
+```
+
+Code calls them with keyword arguments. pyeryx's list-of-dicts form works too:
+`callbacks=[{"name": "get_user", "fn": get_user}]`.
+
+## Results and errors
+
+`execute` returns an `ExecuteResult` (`stdout`, `stderr`, `stdout_text`,
+`duration_ms`, `fuel_consumed`, `result`, ...). Set a variable called `result`
+to return a value:
+
+```python
+sandbox.execute("result = {'answer': 42}").result  # {'answer': 42}
+```
+
+A run that fails raises what pyeryx raises: `PythonExceptionError` (with
+`stdout` and `stderr`) when the code raises, `TimeoutError`, or
+`ResourceLimitError`. Requests eryx.run refuses raise an `APIError` subclass:
+`AuthenticationError`, `RateLimitError` (with `retry_after`),
+`NotFoundError`, `ConflictError`, `InvalidRequestError` or
+`ServiceUnavailableError`; `APIConnectionError` if eryx.run can't be reached or
+the connection drops mid-run. All of them are `EryxError`s.
+
+From asyncio, use `await sandbox.execute_async(code)`.
+
+## Sessions
+
+A `Session` keeps variables, imports and files under `/data` between runs:
+
+```python
+session = eryx.Session()
+session.execute("x = 21")
+session.execute("print(x * 2)").stdout_text  # "42\n"
+session.delete()
+```
+
+`Session(id=...)` uses an existing session, such as one another process
+created (`session.id`).
+
+## What's different from pyeryx
+
+- **Limits:** `ResourceLimits(execution_timeout_ms=..., max_fuel=...)`; `None`
+  (the default) means your org's limit. eryx.run sets memory and callback
+  limits itself.
+- **Hosted-only arguments:** `environment` (an environment you uploaded),
+  `connections` (MCP servers), `network_policies`, and `api_key` / `base_url`
+  (defaults `$ERYX_API_KEY` and `$ERYX_URL`).
+- **Local-only arguments** raise a `ValueError` saying what to use instead:
+  `network`, `secrets` and `scrub_*` (use network policies), `mcp` (use
+  connections), `volumes`, `on_stdout` / `on_stderr` and `cancel` (not yet),
+  and `result_variable` other than `result`. Sessions don't have
+  `snapshot_state` / `restore_state`: eryx.run keeps the state.
+
+See the [API reference](https://eryx.run/docs) for the limits and errors.

eryx_run-0.1.0/README.md

@@ -0,0 +1,96 @@
+# eryx-run
+
+Run untrusted Python in an [eryx](https://github.com/eryx-org/eryx) sandbox on
+[eryx.run](https://eryx.run), with the same API as
+[pyeryx](https://pypi.org/project/pyeryx/), which runs sandboxes in your own
+process. Moving between the two is an import:
+
+```python
+import eryx_run as eryx  # or: import eryx
+
+sandbox = eryx.Sandbox()
+result = sandbox.execute("print(2 + 2)")
+print(result.stdout_text)  # 4
+```
+
+eryx-run is pure Python (it depends on `httpx` and `websockets`), so it
+installs anywhere, with no WebAssembly runtime of its own.
+
+```sh
+pip install eryx-run
+export ERYX_API_KEY=eryx_...   # from https://app.eryx.run
+```
+
+## Callbacks
+
+Sandboxed code can `await` functions you provide. They run in your process,
+sync or async:
+
+```python
+import eryx_run as eryx
+
+callbacks = eryx.CallbackRegistry()
+
+@callbacks.callback(description="Look up a user by id")
+async def get_user(id: int) -> dict:
+    return {"id": id, "name": "Ada"}
+
+sandbox = eryx.Sandbox(callbacks=callbacks)
+result = sandbox.execute("""
+user = await get_user(id=123)
+print(user["name"])
+""")
+```
+
+Code calls them with keyword arguments. pyeryx's list-of-dicts form works too:
+`callbacks=[{"name": "get_user", "fn": get_user}]`.
+
+## Results and errors
+
+`execute` returns an `ExecuteResult` (`stdout`, `stderr`, `stdout_text`,
+`duration_ms`, `fuel_consumed`, `result`, ...). Set a variable called `result`
+to return a value:
+
+```python
+sandbox.execute("result = {'answer': 42}").result  # {'answer': 42}
+```
+
+A run that fails raises what pyeryx raises: `PythonExceptionError` (with
+`stdout` and `stderr`) when the code raises, `TimeoutError`, or
+`ResourceLimitError`. Requests eryx.run refuses raise an `APIError` subclass:
+`AuthenticationError`, `RateLimitError` (with `retry_after`),
+`NotFoundError`, `ConflictError`, `InvalidRequestError` or
+`ServiceUnavailableError`; `APIConnectionError` if eryx.run can't be reached or
+the connection drops mid-run. All of them are `EryxError`s.
+
+From asyncio, use `await sandbox.execute_async(code)`.
+
+## Sessions
+
+A `Session` keeps variables, imports and files under `/data` between runs:
+
+```python
+session = eryx.Session()
+session.execute("x = 21")
+session.execute("print(x * 2)").stdout_text  # "42\n"
+session.delete()
+```
+
+`Session(id=...)` uses an existing session, such as one another process
+created (`session.id`).
+
+## What's different from pyeryx
+
+- **Limits:** `ResourceLimits(execution_timeout_ms=..., max_fuel=...)`; `None`
+  (the default) means your org's limit. eryx.run sets memory and callback
+  limits itself.
+- **Hosted-only arguments:** `environment` (an environment you uploaded),
+  `connections` (MCP servers), `network_policies`, and `api_key` / `base_url`
+  (defaults `$ERYX_API_KEY` and `$ERYX_URL`).
+- **Local-only arguments** raise a `ValueError` saying what to use instead:
+  `network`, `secrets` and `scrub_*` (use network policies), `mcp` (use
+  connections), `volumes`, `on_stdout` / `on_stderr` and `cancel` (not yet),
+  and `result_variable` other than `result`. Sessions don't have
+  `snapshot_state` / `restore_state`: eryx.run keeps the state.
+
+See the [API reference](https://eryx.run/docs) for the limits and errors.

eryx_run-0.1.0/pyproject.toml

@@ -0,0 +1,39 @@
+[build-system]
+requires = ["hatchling>=1.27"]
+build-backend = "hatchling.build"
+
+[project]
+name = "eryx-run"
+version = "0.1.0"
+description = "Run Python in an eryx sandbox on eryx.run, with the same API as pyeryx"
+readme = "README.md"
+requires-python = ">=3.10"
+license = "MIT OR Apache-2.0"
+license-files = ["LICENSE-MIT", "LICENSE-APACHE"]
+keywords = ["sandbox", "wasm", "webassembly", "security", "isolation", "eryx"]
+classifiers = [
+  "Development Status :: 3 - Alpha",
+  "Intended Audience :: Developers",
+  "Programming Language :: Python :: 3",
+  "Typing :: Typed",
+]
+dependencies = ["httpx>=0.27", "websockets>=14"]
+
+[project.urls]
+Homepage = "https://eryx.run"
+Documentation = "https://eryx.run/docs"
+Repository = "https://github.com/eryx-org/eryx"
+
+[dependency-groups]
+dev = ["pytest>=8", "pytest-asyncio>=0.24", "mypy>=1.11"]
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/eryx_run"]
+
+[tool.pytest.ini_options]
+asyncio_mode = "auto"
+asyncio_default_fixture_loop_scope = "function"
+
+[tool.mypy]
+strict = true
+files = ["src", "tests"]

eryx_run-0.1.0/src/eryx_run/__init__.py

@@ -0,0 +1,65 @@
+"""eryx.run: run Python in an eryx sandbox, hosted.
+
+The same API as pyeryx (``import eryx``) for what both can do, so moving
+between running sandboxes yourself and on eryx.run is an import:
+
+    >>> import eryx_run as eryx
+    >>> sandbox = eryx.Sandbox()  # uses $ERYX_API_KEY
+    >>> result = sandbox.execute("print(2 + 2)")
+    >>> print(result.stdout_text)
+    4
+
+Callbacks work as in pyeryx: sandboxed code ``await``s them, and they run
+here, in your process.
+"""
+
+from ._callbacks import CallbackDict, CallbackRegistry
+from ._client import DEFAULT_URL, PROTOCOL
+from ._errors import (
+    APIConnectionError,
+    APIError,
+    AuthenticationError,
+    CancelledError,
+    ConflictError,
+    EryxError,
+    ExecutionError,
+    InitializationError,
+    InvalidRequestError,
+    NotFoundError,
+    PythonExceptionError,
+    RateLimitError,
+    ResourceLimitError,
+    ServiceUnavailableError,
+    TimeoutError,
+)
+from ._sandbox import Sandbox, Session
+from ._types import ExecuteResult, ResourceLimits
+
+__version__ = "0.1.0"
+
+__all__ = [
+    "APIConnectionError",
+    "APIError",
+    "AuthenticationError",
+    "CallbackDict",
+    "CallbackRegistry",
+    "CancelledError",
+    "ConflictError",
+    "DEFAULT_URL",
+    "EryxError",
+    "ExecuteResult",
+    "ExecutionError",
+    "InitializationError",
+    "InvalidRequestError",
+    "NotFoundError",
+    "PROTOCOL",
+    "PythonExceptionError",
+    "RateLimitError",
+    "ResourceLimitError",
+    "ResourceLimits",
+    "Sandbox",
+    "ServiceUnavailableError",
+    "Session",
+    "TimeoutError",
+    "__version__",
+]

eryx_run-0.1.0/src/eryx_run/_callbacks.py

@@ -0,0 +1,110 @@
+"""Callbacks: host functions sandboxed code can ``await``, as in pyeryx."""
+
+from __future__ import annotations
+
+import asyncio
+import inspect
+from collections.abc import Iterator, Sequence
+from typing import Any, Callable, Optional, TypedDict, TypeVar, Union
+
+F = TypeVar("F", bound=Callable[..., Any])
+
+
+class CallbackDict(TypedDict, total=False):
+    """Dictionary format for defining callbacks, as in pyeryx."""
+
+    name: str
+    """The callback name (required)."""
+
+    fn: Callable[..., Any]
+    """The callback function, sync or async (required)."""
+
+    description: str
+    """Optional description of what the callback does."""
+
+    schema: dict[str, Any]
+    """Optional JSON Schema for parameters. The hosted API doesn't use it yet:
+    arguments are passed through as the code gave them."""
+
+
+class CallbackRegistry:
+    """A collection of callbacks, built with a decorator or ``add``.
+
+    Example:
+        callbacks = CallbackRegistry()
+
+        @callbacks.callback(description="Look up a user by id")
+        async def get_user(id: int) -> dict:
+            ...
+
+        sandbox = Sandbox(callbacks=callbacks)
+    """
+
+    def __init__(self) -> None:
+        self._callbacks: list[CallbackDict] = []
+
+    def callback(
+        self,
+        name: Optional[str] = None,
+        description: str = "",
+        schema: Optional[dict[str, Any]] = None,
+    ) -> Callable[[F], F]:
+        """Register the decorated function, named after it unless ``name`` is
+        given."""
+
+        def register(fn: F) -> F:
+            self.add(fn, name=name, description=description, schema=schema)
+            return fn
+
+        return register
+
+    def add(
+        self,
+        fn: Callable[..., Any],
+        name: Optional[str] = None,
+        description: str = "",
+        schema: Optional[dict[str, Any]] = None,
+    ) -> None:
+        """Register ``fn``, named after it unless ``name`` is given."""
+        entry: CallbackDict = {
+            "name": name or fn.__name__,
+            "fn": fn,
+            "description": description or inspect.getdoc(fn) or "",
+        }
+        if schema is not None:
+            entry["schema"] = schema
+        self._callbacks.append(entry)
+
+    def __len__(self) -> int:
+        return len(self._callbacks)
+
+    def __iter__(self) -> Iterator[CallbackDict]:
+        return iter(self._callbacks)
+
+
+Callbacks = Union[CallbackRegistry, Sequence[CallbackDict]]
+
+
+def normalize(callbacks: Optional[Callbacks]) -> dict[str, CallbackDict]:
+    """The callbacks by name, checking each has a name and a function."""
+    by_name: dict[str, CallbackDict] = {}
+    for callback in callbacks or ():
+        name, fn = callback.get("name"), callback.get("fn")
+        if not name or not callable(fn):
+            raise ValueError("each callback needs a 'name' and a callable 'fn'")
+        if name in by_name:
+            raise ValueError(f"callback {name!r} is defined twice")
+        by_name[name] = callback
+    return by_name
+
+
+async def invoke(callback: CallbackDict, args: dict[str, Any]) -> Any:
+    """Call ``callback`` with the code's keyword arguments. A sync function
+    runs in a thread, so a slow one doesn't hold up the connection."""
+    fn = callback["fn"]
+    if inspect.iscoroutinefunction(fn):
+        return await fn(**args)
+    result = await asyncio.to_thread(fn, **args)
+    if inspect.isawaitable(result):
+        result = await result
+    return result