v2.6.0: BT Radar — consent-gated bluetooth scan/whitelist/push (paired-device consent model), /api/btradar, drawer BT panel; auto-crack.py for nightmare (chromium v10 offline decrypt verified)

server.js

@@ -1171,6 +1171,21 @@ app.get('/api/export/all', (req, res) => {
   }
 });
 
+// ── v2.6.0 BT Radar ──
+const BT_FILE = path.join(DATA_DIR, 'btradar.json');
+let btRadar = {};   // nodeId -> { at, devices: [...] }
+try { btRadar = JSON.parse(fs.readFileSync(BT_FILE, 'utf8') || '{}'); } catch (e) {}
+function saveBt() { _atomicWrite(BT_FILE, JSON.stringify(btRadar)); }
+app.post('/api/agent/bt-result', (req, res) => {
+  const { nodeId, devices } = req.body || {};
+  if (nodeId && Array.isArray(devices)) {
+    btRadar[nodeId] = { at: Date.now(), devices };
+    saveBt();
+  }
+  res.json({ success: true });
+});
+app.get('/api/btradar', (req, res) => res.json({ radar: btRadar }));
+
 // ── v2.4.0 additions ──
 const LLM_URL = process.env.NEXUS_LLM_URL || 'http://10.30.20.29:11434';
 const LLM_MODEL = process.env.NEXUS_LLM_MODEL || 'qwen3.8fast:latest';