Add pip packaging: pyproject.toml (maturin bin) + wheels CI

Package the `pyfun` compiler binary as a pip-installable wheel via maturin's
bin bindings, so students/users can `pip install` it without a Rust toolchain
(the highest-leverage classroom adoption step). Verified locally on Windows:
`maturin build --release` produces pyfun_lang-0.0.1-py3-none-win_amd64.whl, and
a clean-venv `pip install` yields a working `pyfun` (check + run confirmed).

- pyproject.toml: maturin backend, bindings = "bin", version pulled from
  Cargo.toml, requires-python >=3.12 (emitted code targets 3.12+). PyPI project
  name is "pyfun-lang" (the `pyfun` name is a dead 2015 package; the console
  script stays `pyfun` regardless).
- .github/workflows/wheels.yml: lean wheel matrix (linux x86_64/aarch64,
  windows x64, macOS x86_64/aarch64) + sdist fallback; publishes to PyPI on tag
  via Trusted Publishing (OIDC, no token). LICENSE + NOTICE auto-bundled.
- .gitignore: ignore /dist + egg-info.

Publishing is gated on making the repo public and configuring the PyPI trusted
publisher; the build jobs run on push/PR meanwhile.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Wnrmd4ZvuqpMrRNxEdzE5S

Author: simontreanor

.github/workflows/wheels.yml

@@ -0,0 +1,122 @@
+# Build platform wheels for `pyfun-lang` and publish to PyPI on a version tag.
+#
+# Publishing uses PyPI Trusted Publishing (OIDC) — there is NO API token to manage.
+# One-time setup before the first release: on PyPI, add a Trusted Publisher for this
+# repo pointing at workflow `wheels.yml` and environment `pypi`
+# (https://docs.pypi.org/trusted-publishers/). Until that exists, the build jobs still
+# run on every push/PR; only the final `release` job needs it, and it runs only on tags.
+#
+# The wheel matrix is deliberately lean (the common student/dev platforms). Any platform
+# without a wheel falls back to the sdist and builds from source (needs Rust). To widen
+# coverage, regenerate the full skeleton with:  maturin generate-ci github
+name: wheels
+
+on:
+  push:
+    branches: [main]
+    tags: ['*']
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: wheels-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  linux:
+    runs-on: ubuntu-22.04
+    strategy:
+      matrix:
+        target: [x86_64, aarch64]
+    steps:
+      - uses: actions/checkout@v6
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.target }}
+          args: --release --out dist
+          sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
+          manylinux: auto
+      - uses: actions/upload-artifact@v6
+        with:
+          name: wheels-linux-${{ matrix.target }}
+          path: dist
+
+  windows:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v6
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: x64
+          args: --release --out dist
+          sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
+      - uses: actions/upload-artifact@v6
+        with:
+          name: wheels-windows-x64
+          path: dist
+
+  macos:
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      matrix:
+        include:
+          - runner: macos-15-intel
+            target: x86_64
+          - runner: macos-latest
+            target: aarch64
+    steps:
+      - uses: actions/checkout@v6
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.target }}
+          args: --release --out dist
+          sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
+      - uses: actions/upload-artifact@v6
+        with:
+          name: wheels-macos-${{ matrix.target }}
+          path: dist
+
+  sdist:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - name: Build sdist
+        uses: PyO3/maturin-action@v1
+        with:
+          command: sdist
+          args: --out dist
+      - uses: actions/upload-artifact@v6
+        with:
+          name: wheels-sdist
+          path: dist
+
+  release:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    if: startsWith(github.ref, 'refs/tags/')
+    needs: [linux, windows, macos, sdist]
+    environment: pypi
+    permissions:
+      id-token: write       # OIDC token for Trusted Publishing
+      attestations: write   # sign the build artifacts
+      contents: read
+    steps:
+      - uses: actions/download-artifact@v7
+        with:
+          pattern: wheels-*
+          path: dist
+          merge-multiple: true
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: 'dist/*'
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: dist

.gitignore

@@ -5,6 +5,10 @@
 
 # Cargo.lock is committed for binaries (this crate ships a `pyfun` bin).
 
+# Python packaging (maturin wheels + build artifacts)
+/dist
+*.egg-info/
+
 # Editor / OS
 *.swp
 .DS_Store

pyproject.toml

@@ -0,0 +1,27 @@
+[build-system]
+requires = ["maturin>=1.5,<2.0"]
+build-backend = "maturin"
+
+[project]
+name = "pyfun-lang"
+description = "An F#-inspired, functional-first language that compiles to readable Python."
+readme = "README.md"
+requires-python = ">=3.12"
+license = "Apache-2.0"
+authors = [{ name = "Simon Treanor" }]
+keywords = ["functional", "compiler", "fsharp", "transpiler", "education"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Intended Audience :: Developers",
+    "Intended Audience :: Education",
+    "Programming Language :: Python",
+    "Programming Language :: Rust",
+    "Topic :: Software Development :: Compilers",
+]
+dynamic = ["version"]
+
+[project.urls]
+Repository = "https://github.com/simontreanor/Pyfun"
+
+[tool.maturin]
+bindings = "bin"