feat(wasm): add WebAssembly build and @columnar-tech/dbc-wasm npm package

.github/workflows/wasm.yml

@@ -0,0 +1,93 @@
+# Copyright 2026 Columnar Technologies Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+name: Wasm
+on:
+  push:
+    branches:
+      - 'main'
+    paths:
+      - '**/*.go'
+      - 'auth/**'
+      - 'config/**'
+      - 'internal/**'
+      - 'wasm/**'
+      - 'packages/npm-wasm/**'
+      - 'cmd/dbc/testdata/**'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/wasm.yml'
+  pull_request:
+    paths:
+      - '**/*.go'
+      - 'auth/**'
+      - 'config/**'
+      - 'internal/**'
+      - 'wasm/**'
+      - 'packages/npm-wasm/**'
+      - 'cmd/dbc/testdata/**'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/wasm.yml'
+
+concurrency:
+  group: ${{ github.repository }}-${{ github.head_ref || github.sha }}-${{ github.workflow }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+permissions:
+  contents: read
+
+jobs:
+  build-and-smoke:
+    name: ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        # windows-latest is intentionally excluded: the WASM Windows-host path is
+        # experimental and not yet passing (driver discovery under GOOS=js — see
+        # https://github.com/columnar-tech/dbc/issues/396). Re-add when fixed.
+        os: [ 'ubuntu-latest', 'macos-latest' ]
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - name: Install Go
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+        with:
+          go-version: 1.26
+          cache: true
+          cache-dependency-path: go.sum
+      - name: Node version
+        run: node --version
+      - name: Build @columnar-tech/dbc-wasm
+        run: node packages/npm-wasm/scripts/build.js
+      - name: Node loader unit tests
+        run: node packages/npm-wasm/test/normalize.test.cjs
+      - name: Node smoke test
+        run: node packages/npm-wasm/test/smoke.cjs
+      - name: Node worker smoke test
+        run: node packages/npm-wasm/test/worker.test.cjs
+      - name: Setup Deno
+        uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4
+        with:
+          deno-version: v2.x
+      - name: Deno version
+        run: deno --version
+      - name: Deno loader unit tests
+        run: deno run -A packages/npm-wasm/test/normalize.test.cjs
+      - name: Deno smoke test
+        run: deno run -A packages/npm-wasm/test/smoke.cjs
+      - name: Deno worker smoke test
+        run: deno run -A packages/npm-wasm/test/worker.test.cjs

client.go

@@ -26,7 +26,6 @@ import (
 	"github.com/columnar-tech/dbc/auth"
 	"github.com/columnar-tech/dbc/internal"
 	"github.com/google/uuid"
-	machineid "github.com/zeroshade/machine-id"
 )
 
 type clientConfig struct {
@@ -129,7 +128,7 @@ func NewClient(opts ...Option) (*Client, error) {
 
 func (c *Client) setup() {
 	c.setupOnce.Do(func() {
-		c.mid, _ = machineid.ProtectedID()
+		c.mid, _ = telemetryMachineID()
 
 		userdir, err := internal.GetUserConfigPath()
 		if err != nil {
@@ -167,6 +166,13 @@ func WithHTTPClient(hc *http.Client) Option {
 	return func(cfg *clientConfig) { cfg.httpClient = hc }
 }
 
+// WithCredentialResolver sets the resolver used to look up credentials for a
+// registry URL, overriding the default on-disk resolver. Useful where there is
+// no credential file (e.g. WASM hosts injecting a token).
+func WithCredentialResolver(resolver func(*url.URL) (*auth.Credential, error)) Option {
+	return func(cfg *clientConfig) { cfg.credentialResolver = resolver }
+}
+
 // WithRegistries sets the driver registries to use. When passed, this takes
 // precedence over any WithGlobalConfig / WithProjectRegistries options: the
 // caller's explicit list is used as-is, not merged with configuration files.

config/config.go

@@ -120,7 +120,7 @@ func (c *ConfigLevel) UnmarshalText(b []byte) error {
 func EnsureLocation(cfg Config) (string, error) {
 	loc := cfg.Location
 	if cfg.Level == ConfigEnv {
-		list := filepath.SplitList(loc)
+		list := splitConfigList(loc)
 		if len(list) == 0 {
 			return "", errors.New("ADBC_DRIVER_PATH is empty, must be set to valid path to use")
 		}
@@ -204,6 +204,30 @@ func loadConfig(lvl ConfigLevel) Config {
 	return cfg
 }
 
+// FindDriverConfigsIn lists installed drivers from an explicit location without
+// consulting environment variables, so it is safe for request-scoped concurrent
+// callers. A location containing the OS list separator is treated as a path list
+// (matching the env config level).
+func FindDriverConfigsIn(location string) []DriverInfo {
+	if location == "" {
+		return nil
+	}
+	paths := splitConfigList(location)
+	slices.Reverse(paths)
+	merged := make(map[string]DriverInfo)
+	for _, p := range paths {
+		if p == "" {
+			continue
+		}
+		drivers, err := loadDir(p)
+		if err != nil {
+			continue
+		}
+		maps.Copy(merged, drivers)
+	}
+	return slices.Collect(maps.Values(merged))
+}
+
 func getEnvConfigDir() string {
 	envConfigLoc := filepath.SplitList(os.Getenv(adbcEnvVar))
 	if venv := os.Getenv("VIRTUAL_ENV"); venv != "" {

config/dirs_unixlike.go

@@ -93,7 +93,7 @@ func FindDriverConfigs(lvl ConfigLevel) []DriverInfo {
 
 func GetDriver(cfg Config, driverName string) (DriverInfo, error) {
 	if cfg.Level == ConfigEnv {
-		for _, prefix := range filepath.SplitList(cfg.Location) {
+		for _, prefix := range splitConfigList(cfg.Location) {
 			if di, err := loadDriverFromManifest(prefix, driverName); err == nil {
 				return di, nil
 			}

config/findin_test.go

@@ -0,0 +1,66 @@
+// Copyright 2026 Columnar Technologies Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package config_test
+
+import (
+	"os"
+	"path/filepath"
+	"testing"
+
+	"github.com/columnar-tech/dbc/config"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+const findInManifestTOML = `
+name = 'Test Driver'
+publisher = 'Test Publisher'
+license = 'MIT'
+version = '1.2.3'
+source = 'dbc'
+
+[ADBC]
+version = '1.1.0'
+
+[Driver]
+entrypoint = 'AdbcDriverInit'
+
+[Driver.shared]
+linux_amd64 = '/path/to/driver.so'
+`
+
+func TestFindDriverConfigsIn(t *testing.T) {
+	t.Run("lists drivers from an explicit location without env", func(t *testing.T) {
+		t.Setenv("ADBC_DRIVER_PATH", "/should/not/be/read")
+		dir := t.TempDir()
+		require.NoError(t, os.WriteFile(filepath.Join(dir, "drv1.toml"), []byte(findInManifestTOML), 0o644))
+		require.NoError(t, os.WriteFile(filepath.Join(dir, "drv2.toml"), []byte(findInManifestTOML), 0o644))
+
+		got := config.FindDriverConfigsIn(dir)
+		ids := make([]string, len(got))
+		for i, d := range got {
+			ids[i] = d.ID
+		}
+		assert.ElementsMatch(t, []string{"drv1", "drv2"}, ids)
+	})
+
+	t.Run("empty location returns nil", func(t *testing.T) {
+		assert.Empty(t, config.FindDriverConfigsIn(""))
+	})
+
+	t.Run("nonexistent location returns empty", func(t *testing.T) {
+		assert.Empty(t, config.FindDriverConfigsIn(filepath.Join(t.TempDir(), "nope")))
+	})
+}

config/platform_override.go

@@ -0,0 +1,25 @@
+// Copyright 2026 Columnar Technologies Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+//go:build js
+
+package config
+
+// SetPlatformTupleOverride sets the host platform tuple (e.g. "linux_amd64").
+// Required under GOARCH=wasm, where the detected tuple is "unknown_wasm64". It
+// sets the package var directly so every reader observes it. Call once at
+// startup before any install/uninstall.
+func SetPlatformTupleOverride(tuple string) {
+	platformTuple = tuple
+}

config/splitlist_js.go

@@ -0,0 +1,28 @@
+// Copyright 2026 Columnar Technologies Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+//go:build js
+
+package config
+
+// splitConfigList does not split under GOOS=js: the wasm API passes a single
+// explicit directory as the location, and ':' (the Unix list separator that
+// filepath.SplitList uses under js) would corrupt a Windows drive-lettered
+// path such as "C:/drivers".
+func splitConfigList(s string) []string {
+	if s == "" {
+		return nil
+	}
+	return []string{s}
+}

config/splitlist_other.go

@@ -0,0 +1,21 @@
+// Copyright 2026 Columnar Technologies Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+//go:build !js
+
+package config
+
+import "path/filepath"
+
+func splitConfigList(s string) []string { return filepath.SplitList(s) }

credresolver_test.go

@@ -0,0 +1,55 @@
+// Copyright 2026 Columnar Technologies Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package dbc
+
+import (
+	"net/url"
+	"testing"
+
+	"github.com/columnar-tech/dbc/auth"
+)
+
+func TestWithCredentialResolver(t *testing.T) {
+	want := &auth.Credential{}
+	var gotHost string
+	c, err := NewClient(WithCredentialResolver(func(u *url.URL) (*auth.Credential, error) {
+		gotHost = u.Host
+		return want, nil
+	}))
+	if err != nil {
+		t.Fatalf("NewClient: %v", err)
+	}
+
+	got, err := c.credentialResolver(&url.URL{Host: "registry.example.com"})
+	if err != nil {
+		t.Fatalf("resolver returned error: %v", err)
+	}
+	if gotHost != "registry.example.com" {
+		t.Fatalf("resolver host = %q, want registry.example.com", gotHost)
+	}
+	if got != want {
+		t.Fatal("resolver returned a different credential than provided")
+	}
+}
+
+func TestWithCredentialResolverDefault(t *testing.T) {
+	c, err := NewClient()
+	if err != nil {
+		t.Fatalf("NewClient: %v", err)
+	}
+	if c.credentialResolver == nil {
+		t.Fatal("default credentialResolver should be non-nil")
+	}
+}

drivers.go

@@ -38,7 +38,6 @@ import (
 	"github.com/columnar-tech/dbc/auth"
 	"github.com/columnar-tech/dbc/internal"
 	"github.com/google/uuid"
-	machineid "github.com/zeroshade/machine-id"
 )
 
 var (
@@ -113,7 +112,7 @@ func ensureSetup() {
 			},
 		}
 
-		mid, _ = machineid.ProtectedID()
+		mid, _ = telemetryMachineID()
 
 		userdir, err := internal.GetUserConfigPath()
 		if err != nil {

packages/npm-wasm/.gitignore

@@ -0,0 +1,8 @@
+node_modules/
+
+# Build artifacts generated by scripts/build.js — not committed
+dbc.wasm
+wasm_exec.js
+package.json
+LICENSE
+*.tgz