* feat: Python 3.12+/3.13 compat + sub-interpreter wrapper
Hanzo fork of go-python/cpy3. See HANZO_CHANGES.md for full diff.
- Polyfill APIs removed in 3.12 (per-type ClearFreeList helpers) and
3.13 (PyEval_InitThreads, Py_SetPath/PythonHome/ProgramName,
PySys_SetArgv/AddWarnOption/AddXOption/SetPath,
Py_SetStandardStreamEncoding, PyEval_ThreadsInitialized) so existing
call sites compile against modern CPython. Polyfills route to the
PyConfig API where there's a meaningful replacement, return 0/no-op
otherwise.
- New PEP 684 SubInterpreter wrapper (subinterp.go) — recommended
primitive for tenant/per-worker isolation on 3.12+. Defaults follow
PEP 684 (own GIL, threads on, no daemon threads, refuse non-isolated
C extensions). Falls back to Py_NewInterpreter on 3.11 and older.
- Free-threading awareness (PEP 703) — IsGILDisabled() reports at
runtime whether the linked CPython was built with --disable-gil.
- pkg-config switched from "python3" to "python3-embed" so libpython
links cleanly on Linux distros that split the embed flags.
- Module path: github.com/go-python/cpy3 -> github.com/hanzoai/cpy3.
Go 1.21+. Package name (python3) unchanged.
- CI matrix: Python {3.11, 3.12, 3.13} x Go {1.21, 1.22} on Ubuntu.
License remains MIT. Original go-python team credited in HANZO_CHANGES.md
and every modified file's header.
* feat: JSON hot-path helper + 3.13t build script
- LoadSource + CallJSONFunctionByName: single-cgo-crossing helpers
for the common "JSON-in, JSON-out" extension embedding contract.
Roughly 2x faster than the long form via individual wrappers and
stack-safer under sustained load (macOS SIGBUS at ~400k iters of
the 9-call long form is mitigated by collapsing to 1 cgo call).
- ErrUnknownFunction: sentinel error for missing/non-callable
lookups so callers can errors.Is.
- scripts/build-python313t.sh: idempotent local build of CPython
3.13.x with --disable-gil. Writes a python3-embed.pc so callers
steer via PKG_CONFIG_PATH.
- HANZO_CHANGES.md + README updated.
- .gitignore: exclude python313t-build/ python313t-src/.
* ci: split test runs by Python global state
TestSubInterpreter_* and TestCallJSONFunctionByName_* / TestLoadSource_*
share global Py state with the data-type/error tests. Running them
in the same `go test` invocation can hang on darwin after the
data-type tests have already touched the main interpreter. Split
into two test steps so each starts from a fresh process.
* test: move json_hotpath tests in-package + share Py init
Move from package python3_test to package python3 so they share
Py_Initialize() state with subinterp_test.go. Each test pins its
own OS thread, calls Py_Initialize (idempotent), creates a fresh
sub-interp, and unpins on return. No PyEval_SaveThread in teardown
— the sub-interp's Close already released the calling thread's GIL.
This eliminates a SIGSEGV-on-second-test pattern caused by trying
to PyEval_SaveThread a state that's already been saved.
* docs: README example for the JSON hot path
Show LoadSource + CallJSONFunctionByName end-to-end with luxfi/log
for context. The helpers themselves take no logger dependency.
6.9 KiB
Hanzo fork changes
This fork (github.com/hanzoai/cpy3) is based on
github.com/go-python/cpy3 v0.2.0
(commit 98d3175). The upstream go-python team's work is the foundation —
all credit for the original Go bindings goes to them. License remains
MIT (see LICENSE).
What changed
Python 3.12+ removed-API compat (Phase 2)
Python 3.12 dropped the per-type freelist clear functions and 3.13 dropped
several legacy lifecycle / sys helpers. We polyfill these as no-ops or as
thin PyConfig-based shims via macro.h so existing call sites keep
compiling. New code should prefer the documented PyConfig replacements
directly.
Removed on 3.12 (polyfilled to return 0):
PyFloat_ClearFreeListPyDict_ClearFreeListPyList_ClearFreeListPyTuple_ClearFreeListPySet_ClearFreeListPyMethod_ClearFreeListPyCFunction_ClearFreeListPyFrame_ClearFreeListPyAsyncGen_ClearFreeList
These were "best-effort free some cached memory" helpers; the cyclic GC handles freelists now and the calls were no-ops in release-mode builds even before 3.12.
Removed on 3.13 (polyfilled as no-ops or PyConfig shims):
PyEval_InitThreads→ no-op (threads always init since 3.7)PyEval_ReInitThreads→ no-opPyEval_AcquireLock→ no-opPyEval_ReleaseLock→ no-opPyEval_ThreadsInitialized→ returns1Py_SetProgramName→PyConfig_SetString(program_name)Py_SetPath→PyConfig_SetString(pythonpath_env)Py_SetPythonHome→PyConfig_SetString(home)Py_SetStandardStreamEncoding→PyConfig_SetBytesString(stdio_*)PySys_SetArgv/PySys_SetArgvEx→PyConfig_SetArgvPySys_AddWarnOption→PyWideStringList_Append(warnoptions)PySys_AddXOption→PyWideStringList_Append(xoptions)PySys_SetPath→PyConfig_SetString(pythonpath_env)
NOTE: the polyfilled lifecycle / sys helpers only take effect when called
before Py_Initialize. Calling them after init is a no-op (matches the
historical behaviour for some of these). Convert call sites to the
PyConfig API for full fidelity.
pkg-config: python3-embed (was python3)
The cgo pkg-config: directive now requests python3-embed, which links
libpython for embedding. The old python3 name only provided headers
and broke linking on modern distros where the split was made canonical.
Sub-interpreter wrapper (PEP 684) — additive API
subinterp.go adds a Go-friendly wrapper around Py_NewInterpreterFromConfig:
si, err := python3.NewSubInterpreter(python3.DefaultSubInterpreterConfig())
defer si.Close()
si.Enter()
defer si.Leave()
// ... call any python3.* function — runs in the sub-interp ...
Defaults follow PEP 684 recommendations: own GIL, threads on, no daemon
threads, refuse non-isolated C extensions. On Python 3.11 and older the
config is ignored and the wrapper falls back to Py_NewInterpreter
(shared GIL only). Use one sub-interpreter per concurrent tenant /
worker for state + crash isolation.
Free-threading awareness (PEP 703) — additive
IsGILDisabled() bool reports whether the linked CPython was built with
--disable-gil (3.13+ python3.13t). The classical GIL wrappers
(PyGILState_Ensure, etc.) remain callable on free-threaded builds —
they become no-ops, harmless. Use the boolean to decide whether the
pool-of-sub-interpreters trick is needed for parallelism (it isn't, on
free-threaded builds).
JSON hot-path helper — additive
LoadSource(src string) error and CallJSONFunctionByName(fn, payload string) (string, error) collapse the common "JSON-pipe extension"
embedding contract into ONE cgo crossing per invocation. The long
form via the individual wrappers is fine for low-throughput or
non-JSON marshaling, but per-iteration cgo crossing overhead (~150ns
each on macOS, plus a few hundred bytes of M's system stack) becomes
material at high throughput — and on Apple Silicon we observed
SIGBUS at ~400k sustained iterations of the 9-call long form
because of accumulated system-stack pressure. CallJSONFunctionByName
does all the work (lookup, json.loads, call, json.dumps, encode)
inside one C function so libpython manages its own stack.
The helper also exports ErrUnknownFunction so callers can map a
missing-function case to their own ergonomic error
(errors.Is(err, python3.ErrUnknownFunction)).
This is the primitive Hanzo Base's pyvm extension runtime is built on (HIP-0105). For arbitrary Python value marshaling the long form via the per-type wrappers remains the right tool.
CPython 3.13t build script — additive (scripts/)
scripts/build-python313t.sh builds CPython 3.13.x with
--disable-gil to a local ./python313t-build/, idempotent, with a
python3-embed.pc so PKG_CONFIG_PATH=$PWD/python313t-build/lib/pkgconfig
is enough to steer cpy3 at the free-threaded interpreter. Useful for
benchmarking parallel PEP 703 speedups before the system Python
ships a stable python3.13t.
Module path: github.com/hanzoai/cpy3
Go module is now github.com/hanzoai/cpy3. Go 1.21+. Package name
unchanged — still python3.
What did not change
- License is still MIT (see
LICENSE). - Upstream attribution is preserved in every file header.
- Package name (
python3) is preserved so adoption is a one-line import swap from"github.com/go-python/cpy3"to"github.com/hanzoai/cpy3".
Known limitations / open items
The upstream test suite has a handful of cases that crash on Python 3.13 for reasons unrelated to the removed-API fixes:
TestErrorSetObject/TestErrorSetNone/TestErrorSetObjectEx— invokePyErr_PrintExagainstsys.stderrof an interpreter that was initialised without a real stderr. Behaviour changed in 3.13.TestErrorFetchRestore/TestErrorGetSetExcInfo— rely on the pre-3.12 exception fetch/restore semantics that PEP 657 reshaped.TestImportModuleEx— crashes insidePyImport_ImportModuleExwhenglobalsisnil; a 3.13 contract change.
CI (.github/workflows/test.yml) runs a curated subset that passes on
3.11 / 3.12 / 3.13. Fixing the upstream tests is tracked separately — it
is migration work to the post-3.12 exception API, not removed-symbol
work.
Why fork
The upstream go-python/cpy3 has not had a release tagged since 0.2.0 (Aug 2022). It does not compile against Python 3.12+ out of the box. DataDog/go-python3 (the parent of go-python/cpy3) was archived. We need a working binding for hanzo/base's pyvm extension runtime, with current Python and sub-interpreter support. Forking and pinning was less code than maintaining a long-lived patch series against upstream.
Credits
Original work © 2018 Datadog, Inc. and the go-python authors. Released
under MIT (see LICENSE). Hanzo additions © 2026 Hanzo, Inc., released
under the same MIT terms.