Add Registry20 GUID management and DPAPI support

Introduce tools and UI to read, write, backup and restore QQ Registry20 GUIDs using Windows DPAPI. Adds a Python CLI (guid_tool.py) for local Registry20 operations and a new TypeScript package napcat-dpapi with native bindings for DPAPI. Implements Registry20Utils in the webui-backend to protect/unprotect Registry20, plus backup/restore/delete helpers. Exposes new backend API handlers and routes (get/set GUID, backups, restore, reset, restart) and integrates frontend GUIDManager component and qq_manager controller methods. Propagates QQ data path via WebUiDataRuntime (setter/getter) and wires it up in framework/shell; updates Vite alias and package.json to include the new dpapi workspace. Includes native addon binaries for win32 x64/arm64 and basic tsconfig/readme/license for the new package.

packages/napcat-dpapi/index.ts

@@ -0,0 +1,65 @@
+/**
+ * napcat-dpapi - Windows DPAPI wrapper
+ *
+ * Loads the native @primno+dpapi.node addon from the runtime
+ * native/dpapi/ directory using process.dlopen, consistent
+ * with how other native modules (ffmpeg, packet, pty) are loaded.
+ */
+
+import { fileURLToPath } from 'node:url';
+import path, { dirname } from 'node:path';
+
+export type DataProtectionScope = 'CurrentUser' | 'LocalMachine';
+
+export interface DpapiBindings {
+  protectData (dataToEncrypt: Uint8Array, optionalEntropy: Uint8Array | null, scope: DataProtectionScope): Uint8Array;
+  unprotectData (encryptData: Uint8Array, optionalEntropy: Uint8Array | null, scope: DataProtectionScope): Uint8Array;
+}
+
+let dpapiBindings: DpapiBindings | null = null;
+let loadError: Error | null = null;
+
+function getAddonPath (): string {
+  // At runtime, import.meta.url resolves to dist/ directory.
+  // Native files are at dist/native/dpapi/{platform}-{arch}/@primno+dpapi.node
+  const importDir = dirname(fileURLToPath(import.meta.url));
+  const platform = process.platform; // 'win32'
+  const arch = process.arch; // 'x64' or 'arm64'
+  return path.join(importDir, 'native', 'dpapi', `${platform}-${arch}`, '@primno+dpapi.node');
+}
+
+function loadDpapi (): DpapiBindings {
+  if (dpapiBindings) {
+    return dpapiBindings;
+  }
+  if (loadError) {
+    throw loadError;
+  }
+  try {
+    const addonPath = getAddonPath();
+    const nativeModule: { exports: DpapiBindings } = { exports: {} as DpapiBindings };
+    process.dlopen(nativeModule, addonPath);
+    dpapiBindings = nativeModule.exports;
+    return dpapiBindings;
+  } catch (e) {
+    loadError = e as Error;
+    throw new Error(`Failed to load DPAPI native addon: ${(e as Error).message}`);
+  }
+}
+
+export const isPlatformSupported = process.platform === 'win32';
+
+export function protectData (data: Uint8Array, optionalEntropy: Uint8Array | null, scope: DataProtectionScope): Uint8Array {
+  return loadDpapi().protectData(data, optionalEntropy, scope);
+}
+
+export function unprotectData (data: Uint8Array, optionalEntropy: Uint8Array | null, scope: DataProtectionScope): Uint8Array {
+  return loadDpapi().unprotectData(data, optionalEntropy, scope);
+}
+
+export const Dpapi = {
+  protectData,
+  unprotectData,
+};
+
+export default Dpapi;