feat: add KeePass plugin for KDBX 4.0 database support

.changeset/add-keepass-plugin.md

@@ -0,0 +1,14 @@
+---
+"@varlock/keepass-plugin": patch
+---
+
+Add KeePass plugin for loading secrets from KDBX 4.0 databases.
+
+- `kp()` resolver with `#attribute` syntax, entry name inference from key, and `customAttributesObj` for bulk custom field loading
+- `kpBulk()` resolver for loading all passwords from a group via `@setValuesBulk`
+- `kdbxPassword` data type for master password validation
+- File mode using kdbxweb with pure WASM argon2 (no native addons, works in SEA builds)
+- CLI mode via `keepassxc-cli` with dynamic `useCli` option (e.g., `useCli=forEnv(dev)`)
+- Multiple database instances via `id` param
+- Key file authentication support
+- Add `input` option to `spawnAsync` for streaming stdin to child processes

README.md

@@ -125,6 +125,7 @@ Varlock is built on top of @env-spec, a new DSL for attaching a schema and addit
 | [@varlock/google-secret-manager-plugin](packages/plugins/google-secret-manager) | [![npm version](https://img.shields.io/npm/v/@varlock/google-secret-manager-plugin.svg)](https://npmjs.com/package/@varlock/google-secret-manager-plugin) |
 | [@varlock/hashicorp-vault-plugin](packages/plugins/hashicorp-vault) | [![npm version](https://img.shields.io/npm/v/@varlock/hashicorp-vault-plugin.svg)](https://npmjs.com/package/@varlock/hashicorp-vault-plugin) |
 | [@varlock/infisical-plugin](packages/plugins/infisical) | [![npm version](https://img.shields.io/npm/v/@varlock/infisical-plugin.svg)](https://npmjs.com/package/@varlock/infisical-plugin) |
+| [@varlock/keepass-plugin](packages/plugins/keepass) | [![npm version](https://img.shields.io/npm/v/@varlock/keepass-plugin.svg)](https://npmjs.com/package/@varlock/keepass-plugin) |
 | [@varlock/pass-plugin](packages/plugins/pass) | [![npm version](https://img.shields.io/npm/v/@varlock/pass-plugin.svg)](https://npmjs.com/package/@varlock/pass-plugin) |
 | [@varlock/proton-pass-plugin](packages/plugins/proton-pass) | [![npm version](https://img.shields.io/npm/v/@varlock/proton-pass-plugin.svg)](https://npmjs.com/package/@varlock/proton-pass-plugin) |
 

package.json

@@ -37,6 +37,7 @@
     "@typescript-eslint/parser": "^8.56.1",
     "@varlock/changeset-changelog": "workspace:*",
     "@varlock/cloudflare-integration": "workspace:*",
+    "@varlock/keepass-plugin": "workspace:*",
     "eslint": "^10.0.2",
     "eslint-plugin-es-x": "^9.5.0",
     "eslint-plugin-fix-disabled-rules": "^0.0.2",