Add Registry20 GUID management and DPAPI support

Introduce tools and UI to read, write, backup and restore QQ Registry20 GUIDs using Windows DPAPI. Adds a Python CLI (guid_tool.py) for local Registry20 operations and a new TypeScript package napcat-dpapi with native bindings for DPAPI. Implements Registry20Utils in the webui-backend to protect/unprotect Registry20, plus backup/restore/delete helpers. Exposes new backend API handlers and routes (get/set GUID, backups, restore, reset, restart) and integrates frontend GUIDManager component and qq_manager controller methods. Propagates QQ data path via WebUiDataRuntime (setter/getter) and wires it up in framework/shell; updates Vite alias and package.json to include the new dpapi workspace. Includes native addon binaries for win32 x64/arm64 and basic tsconfig/readme/license for the new package.

packages/napcat-dpapi/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2023 Xavier Monin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

packages/napcat-dpapi/README.md

@@ -0,0 +1,4 @@
+# @primno/dpapi
+
+## 协议与说明
+全部遵守原仓库要求

packages/napcat-dpapi/index.ts

@@ -0,0 +1,65 @@
+/**
+ * napcat-dpapi - Windows DPAPI wrapper
+ *
+ * Loads the native @primno+dpapi.node addon from the runtime
+ * native/dpapi/ directory using process.dlopen, consistent
+ * with how other native modules (ffmpeg, packet, pty) are loaded.
+ */
+
+import { fileURLToPath } from 'node:url';
+import path, { dirname } from 'node:path';
+
+export type DataProtectionScope = 'CurrentUser' | 'LocalMachine';
+
+export interface DpapiBindings {
+  protectData (dataToEncrypt: Uint8Array, optionalEntropy: Uint8Array | null, scope: DataProtectionScope): Uint8Array;
+  unprotectData (encryptData: Uint8Array, optionalEntropy: Uint8Array | null, scope: DataProtectionScope): Uint8Array;
+}
+
+let dpapiBindings: DpapiBindings | null = null;
+let loadError: Error | null = null;
+
+function getAddonPath (): string {
+  // At runtime, import.meta.url resolves to dist/ directory.
+  // Native files are at dist/native/dpapi/{platform}-{arch}/@primno+dpapi.node
+  const importDir = dirname(fileURLToPath(import.meta.url));
+  const platform = process.platform; // 'win32'
+  const arch = process.arch; // 'x64' or 'arm64'
+  return path.join(importDir, 'native', 'dpapi', `${platform}-${arch}`, '@primno+dpapi.node');
+}
+
+function loadDpapi (): DpapiBindings {
+  if (dpapiBindings) {
+    return dpapiBindings;
+  }
+  if (loadError) {
+    throw loadError;
+  }
+  try {
+    const addonPath = getAddonPath();
+    const nativeModule: { exports: DpapiBindings } = { exports: {} as DpapiBindings };
+    process.dlopen(nativeModule, addonPath);
+    dpapiBindings = nativeModule.exports;
+    return dpapiBindings;
+  } catch (e) {
+    loadError = e as Error;
+    throw new Error(`Failed to load DPAPI native addon: ${(e as Error).message}`);
+  }
+}
+
+export const isPlatformSupported = process.platform === 'win32';
+
+export function protectData (data: Uint8Array, optionalEntropy: Uint8Array | null, scope: DataProtectionScope): Uint8Array {
+  return loadDpapi().protectData(data, optionalEntropy, scope);
+}
+
+export function unprotectData (data: Uint8Array, optionalEntropy: Uint8Array | null, scope: DataProtectionScope): Uint8Array {
+  return loadDpapi().unprotectData(data, optionalEntropy, scope);
+}
+
+export const Dpapi = {
+  protectData,
+  unprotectData,
+};
+
+export default Dpapi;

packages/napcat-dpapi/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "napcat-dpapi",
+  "version": "0.0.1",
+  "private": true,
+  "type": "module",
+  "main": "index.ts",
+  "exports": {
+    ".": {
+      "import": "./index.ts"
+    }
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.1"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}

packages/napcat-dpapi/tsconfig.json

@@ -0,0 +1,10 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": "."
+  },
+  "include": [
+    "./**/*.ts"
+  ]
+}