v0.1.15 - Fix config page display and rebrand admin UI from relay to Blossom terminology

2025-12-12 13:12:46 -04:00
25 changed files with 102416 additions and 1635 deletions
--- a/20
+++ b/20
@@ -8,15 +8,24 @@ BUILDDIR = build
 TARGET = $(BUILDDIR)/ginxsom-fcgi

 # Source files
-SOURCES = $(SRCDIR)/main.c $(SRCDIR)/admin_api.c $(SRCDIR)/admin_auth.c $(SRCDIR)/admin_event.c $(SRCDIR)/admin_handlers.c $(SRCDIR)/bud04.c $(SRCDIR)/bud06.c $(SRCDIR)/bud08.c $(SRCDIR)/bud09.c $(SRCDIR)/request_validator.c $(SRCDIR)/relay_client.c $(SRCDIR)/admin_commands.c
+SOURCES = $(SRCDIR)/main.c $(SRCDIR)/admin_api.c $(SRCDIR)/admin_auth.c $(SRCDIR)/admin_event.c $(SRCDIR)/admin_handlers.c $(SRCDIR)/admin_interface.c $(SRCDIR)/bud04.c $(SRCDIR)/bud06.c $(SRCDIR)/bud08.c $(SRCDIR)/bud09.c $(SRCDIR)/request_validator.c $(SRCDIR)/relay_client.c $(SRCDIR)/admin_commands.c
 OBJECTS = $(SOURCES:$(SRCDIR)/%.c=$(BUILDDIR)/%.o)

+# Embedded web interface files
+EMBEDDED_HEADER = $(SRCDIR)/admin_interface_embedded.h
+EMBED_SCRIPT = scripts/embed_web_files.sh
+
 # Add core_relay_pool.c from nostr_core_lib
 POOL_SRC = nostr_core_lib/nostr_core/core_relay_pool.c
 POOL_OBJ = $(BUILDDIR)/core_relay_pool.o

 # Default target
-all: $(TARGET)
+all: $(EMBEDDED_HEADER) $(TARGET)
+
+# Generate embedded web interface files
+$(EMBEDDED_HEADER): $(EMBED_SCRIPT) api/*.html api/*.css api/*.js
+	@echo "Embedding web interface files..."
+	@$(EMBED_SCRIPT)

 # Create build directory
 $(BUILDDIR):
@@ -37,6 +46,7 @@ $(TARGET): $(OBJECTS) $(POOL_OBJ)
 # Clean build files
 clean:
 	rm -rf $(BUILDDIR)
+	rm -f $(EMBEDDED_HEADER)

 # Install (copy to system location)
 install: $(TARGET)
@@ -55,4 +65,8 @@ run: $(TARGET)
 debug: CFLAGS += -g -DDEBUG
 debug: $(TARGET)

-.PHONY: all clean install uninstall run debug
+# Rebuild embedded files
+embed:
+	@$(EMBED_SCRIPT)
+
+.PHONY: all clean install uninstall run debug embed
--- a/api/embedded.html
+++ b/api/embedded.html
@@ -0,0 +1,58 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Embedded NOSTR_LOGIN_LITE</title>
+  <style>
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+      margin: 0;
+      padding: 40px;
+      background: white;
+      display: flex;
+      justify-content: center;
+      align-items: center;
+      min-height: 100vh;
+    }
+
+    .container {
+      max-width: 400px;
+      width: 100%;
+    }
+
+    #login-container {
+      /* No styling - let embedded modal blend seamlessly */
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div id="login-container"></div>
+  </div>
+
+  <script src="../lite/nostr.bundle.js"></script>
+  <script src="../lite/nostr-lite.js"></script>
+
+  <script>
+    document.addEventListener('DOMContentLoaded', async () => {
+      await window.NOSTR_LOGIN_LITE.init({
+        theme:'default',
+        methods: {
+          extension: true,
+          local: true,
+          seedphrase: true,
+          readonly: true,
+          connect: true,
+          remote: true,
+          otp: true
+        }
+      });
+
+      window.NOSTR_LOGIN_LITE.embed('#login-container', {
+        seamless: true
+      });
+    });
+  </script>
+</body>
+</html>
--- a/api/index.css
+++ b/api/index.css
--- a/api/index.html
+++ b/api/index.html
@@ -0,0 +1,424 @@
+<!DOCTYPE html>
+<html lang="en">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Blossom Admin</title>
+    <link rel="stylesheet" href="/api/index.css">
+</head>
+
+<body>
+    <!-- Side Navigation Menu -->
+    <nav class="side-nav" id="side-nav">
+        <ul class="nav-menu">
+            <li><button class="nav-item" data-page="statistics">Statistics</button></li>
+            <li><button class="nav-item" data-page="configuration">Configuration</button></li>
+            <li><button class="nav-item" data-page="authorization">Authorization</button></li>
+            <li><button class="nav-item" data-page="relay-events">Blossom Events</button></li>
+            <li><button class="nav-item" data-page="database">Database Query</button></li>
+        </ul>
+        <div class="nav-footer">
+            <button class="nav-footer-btn" id="nav-dark-mode-btn">DARK MODE</button>
+            <button class="nav-footer-btn" id="nav-logout-btn">LOGOUT</button>
+        </div>
+    </nav>
+
+    <!-- Side Navigation Overlay -->
+    <div class="side-nav-overlay" id="side-nav-overlay"></div>
+
+    <!-- Header with title and profile display -->
+    <div class="section">
+
+        <div class="header-content">
+            <div class="header-title clickable" id="header-title">
+                <span class="relay-letter" data-letter="B">B</span>
+                <span class="relay-letter" data-letter="L">L</span>
+                <span class="relay-letter" data-letter="O">O</span>
+                <span class="relay-letter" data-letter="S">S</span>
+                <span class="relay-letter" data-letter="S">S</span>
+                <span class="relay-letter" data-letter="O">O</span>
+                <span class="relay-letter" data-letter="M">M</span>
+            </div>
+            <div class="relay-info">
+                <div id="relay-name" class="relay-name">Blossom</div>
+                <div id="relay-description" class="relay-description">Loading...</div>
+                <div id="relay-pubkey-container" class="relay-pubkey-container">
+                    <div id="relay-pubkey" class="relay-pubkey">Loading...</div>
+                </div>
+            </div>
+            <div class="profile-area" id="profile-area" style="display: none;">
+                <div class="admin-label">admin</div>
+                <div class="profile-container">
+                    <img id="header-user-image" class="header-user-image" alt="Profile" style="display: none;">
+                    <span id="header-user-name" class="header-user-name">Loading...</span>
+                </div>
+                <!-- Logout dropdown -->
+                <!-- Dropdown menu removed - buttons moved to sidebar -->
+            </div>
+        </div>
+
+    </div>
+
+    <!-- Login Modal Overlay -->
+    <div id="login-modal" class="login-modal-overlay" style="display: none;">
+        <div class="login-modal-content">
+            <div id="login-modal-container"></div>
+        </div>
+    </div>
+
+    <!-- DATABASE STATISTICS Section -->
+    <!-- Subscribe to kind 24567 events to receive real-time monitoring data -->
+    <div class="section flex-section" id="databaseStatisticsSection" style="display: none;">
+        <div class="section-header">
+            DATABASE STATISTICS
+        </div>
+
+        <!-- Blob Rate Graph Container -->
+        <div id="event-rate-chart"></div>
+
+        <!-- Database Overview Table -->
+        <div class="input-group">
+            <div class="config-table-container">
+                <table class="config-table" id="stats-overview-table">
+                    <thead>
+                        <tr>
+                            <th>Metric</th>
+                            <th>Value</th>
+                        </tr>
+                    </thead>
+                    <tbody id="stats-overview-table-body">
+                        <tr>
+                            <td>Database Size</td>
+                            <td id="db-size">-</td>
+                        </tr>
+                        <tr>
+                            <td>Total Blobs</td>
+                            <td id="total-events">-</td>
+                        </tr>
+                        <tr>
+                            <td>Process ID</td>
+                            <td id="process-id">-</td>
+                        </tr>
+                        <tr>
+                            <td>Active Connections</td>
+                            <td id="active-subscriptions">-</td>
+                        </tr>
+                        <tr>
+                            <td>Memory Usage</td>
+                            <td id="memory-usage">-</td>
+                        </tr>
+                        <tr>
+                            <td>CPU Core</td>
+                            <td id="cpu-core">-</td>
+                        </tr>
+                        <tr>
+                            <td>CPU Usage</td>
+                            <td id="cpu-usage">-</td>
+                        </tr>
+                        <tr>
+                            <td>Oldest Blob</td>
+                            <td id="oldest-event">-</td>
+                        </tr>
+                        <tr>
+                            <td>Newest Blob</td>
+                            <td id="newest-event">-</td>
+                        </tr>
+                    </tbody>
+                </table>
+            </div>
+        </div>
+
+        <!-- Blob Type Distribution Table -->
+        <div class="input-group">
+            <label>Blob Type Distribution:</label>
+            <div class="config-table-container">
+                <table class="config-table" id="stats-kinds-table">
+                    <thead>
+                        <tr>
+                            <th>Blob Type</th>
+                            <th>Count</th>
+                            <th>Percentage</th>
+                        </tr>
+                    </thead>
+                    <tbody id="stats-kinds-table-body">
+                        <tr>
+                            <td colspan="3" style="text-align: center; font-style: italic;">No data loaded</td>
+                        </tr>
+                    </tbody>
+                </table>
+            </div>
+        </div>
+
+        <!-- Time-based Statistics Table -->
+        <div class="input-group">
+            <label>Time-based Statistics:</label>
+            <div class="config-table-container">
+                <table class="config-table" id="stats-time-table">
+                    <thead>
+                        <tr>
+                            <th>Period</th>
+                            <th>Blobs</th>
+                        </tr>
+                    </thead>
+                    <tbody id="stats-time-table-body">
+                        <tr>
+                            <td>Last 24 Hours</td>
+                            <td id="events-24h">-</td>
+                        </tr>
+                        <tr>
+                            <td>Last 7 Days</td>
+                            <td id="events-7d">-</td>
+                        </tr>
+                        <tr>
+                            <td>Last 30 Days</td>
+                            <td id="events-30d">-</td>
+                        </tr>
+                    </tbody>
+                </table>
+            </div>
+        </div>
+
+        <!-- Top Pubkeys Table -->
+        <div class="input-group">
+            <label>Top Pubkeys by Event Count:</label>
+            <div class="config-table-container">
+                <table class="config-table" id="stats-pubkeys-table">
+                    <thead>
+                        <tr>
+                            <th>Rank</th>
+                            <th>Pubkey</th>
+                            <th>Event Count</th>
+                            <th>Percentage</th>
+                        </tr>
+                    </thead>
+                    <tbody id="stats-pubkeys-table-body">
+                        <tr>
+                            <td colspan="4" style="text-align: center; font-style: italic;">No data loaded</td>
+                        </tr>
+                    </tbody>
+                </table>
+            </div>
+        </div>
+
+    </div>
+
+
+    <!-- Testing Section -->
+    <div id="div_config" class="section flex-section" style="display: none;">
+        <div class="section-header">
+            BLOSSOM CONFIGURATION
+        </div>
+        <div id="config-display" class="hidden">
+            <div class="config-table-container">
+                <table class="config-table" id="config-table">
+                    <thead>
+                        <tr>
+                            <th>Parameter</th>
+                            <th>Value</th>
+                            <th>Actions</th>
+                        </tr>
+                    </thead>
+                    <tbody id="config-table-body">
+                    </tbody>
+                </table>
+            </div>
+
+            <div class="inline-buttons">
+                <button type="button" id="fetch-config-btn">REFRESH</button>
+            </div>
+
+
+        </div>
+    </div>
+
+    <!-- Auth Rules Management - Moved after configuration -->
+    <div class="section flex-section" id="authRulesSection" style="display: none;">
+        <div class="section-header">
+AUTH RULES MANAGEMENT
+        </div>
+
+        <!-- Auth Rules Table -->
+        <div id="authRulesTableContainer" style="display: none;">
+            <table class="config-table" id="authRulesTable">
+                <thead>
+                    <tr>
+                        <th>Rule Type</th>
+                        <th>Pattern Type</th>
+                        <th>Pattern Value</th>
+                        <th>Status</th>
+                        <th>Actions</th>
+                    </tr>
+                </thead>
+                <tbody id="authRulesTableBody">
+                </tbody>
+            </table>
+        </div>
+
+        <!-- Simplified Auth Rule Input Section -->
+        <div id="authRuleInputSections" style="display: block;">
+
+            <!-- Combined Pubkey Auth Rule Section -->
+
+
+            <div class="input-group">
+                <label for="authRulePubkey">Pubkey (nsec or hex):</label>
+                <input type="text" id="authRulePubkey" placeholder="nsec1... or 64-character hex pubkey">
+
+            </div>
+            <div id="whitelistWarning" class="warning-box" style="display: none;">
+                <strong>⚠️ WARNING:</strong> Adding whitelist rules changes relay behavior to whitelist-only
+                mode.
+                Only whitelisted users will be able to interact with the relay.
+            </div>
+            <div class="inline-buttons">
+                <button type="button" id="addWhitelistBtn" onclick="addWhitelistRule()">ADD TO
+                    WHITELIST</button>
+                <button type="button" id="addBlacklistBtn" onclick="addBlacklistRule()">ADD TO
+                    BLACKLIST</button>
+                <button type="button" id="refreshAuthRulesBtn">REFRESH</button>
+            </div>
+
+
+        </div>
+
+    </div>
+
+
+
+
+
+
+
+    <!-- BLOSSOM EVENTS Section -->
+    <div class="section" id="relayEventsSection" style="display: none;">
+        <div class="section-header">
+            BLOSSOM EVENTS MANAGEMENT
+        </div>
+
+        <!-- Kind 0: User Metadata -->
+        <div class="input-group">
+            <h3>Kind 0: User Metadata</h3>
+            <div class="form-group">
+                <label for="kind0-name">Name:</label>
+                <input type="text" id="kind0-name" placeholder="Blossom Server Name">
+            </div>
+            <div class="form-group">
+                <label for="kind0-about">About:</label>
+                <textarea id="kind0-about" rows="3" placeholder="Blossom Server Description"></textarea>
+            </div>
+            <div class="form-group">
+                <label for="kind0-picture">Picture URL:</label>
+                <input type="url" id="kind0-picture" placeholder="https://example.com/logo.png">
+            </div>
+            <div class="form-group">
+                <label for="kind0-banner">Banner URL:</label>
+                <input type="url" id="kind0-banner" placeholder="https://example.com/banner.png">
+            </div>
+            <div class="form-group">
+                <label for="kind0-nip05">NIP-05:</label>
+                <input type="text" id="kind0-nip05" placeholder="blossom@example.com">
+            </div>
+            <div class="form-group">
+                <label for="kind0-website">Website:</label>
+                <input type="url" id="kind0-website" placeholder="https://example.com">
+            </div>
+            <div class="inline-buttons">
+                <button type="button" id="submit-kind0-btn">UPDATE METADATA</button>
+            </div>
+            <div id="kind0-status" class="status-message"></div>
+        </div>
+
+        <!-- Kind 10050: DM Blossom List -->
+        <div class="input-group">
+            <h3>Kind 10050: DM Blossom List</h3>
+            <div class="form-group">
+                <label for="kind10050-relays">Blossom URLs (one per line):</label>
+                <textarea id="kind10050-relays" rows="4" placeholder="https://blossom1.com&#10;https://blossom2.com"></textarea>
+            </div>
+            <div class="inline-buttons">
+                <button type="button" id="submit-kind10050-btn">UPDATE DM BLOSSOM SERVERS</button>
+            </div>
+            <div id="kind10050-status" class="status-message"></div>
+        </div>
+
+        <!-- Kind 10002: Blossom List -->
+        <div class="input-group">
+            <h3>Kind 10002: Blossom Server List</h3>
+            <div id="kind10002-relay-entries">
+                <!-- Dynamic blossom server entries will be added here -->
+            </div>
+            <div class="inline-buttons">
+                <button type="button" id="add-relay-entry-btn">ADD SERVER</button>
+                <button type="button" id="submit-kind10002-btn">UPDATE SERVERS</button>
+            </div>
+            <div id="kind10002-status" class="status-message"></div>
+        </div>
+    </div>
+
+    <!-- SQL QUERY Section -->
+    <div class="section" id="sqlQuerySection" style="display: none;">
+        <div class="section-header">
+            <h2>SQL QUERY CONSOLE</h2>
+        </div>
+
+        <!-- Query Selector -->
+        <div class="input-group">
+            <label for="query-dropdown">Quick Queries & History:</label>
+            <select id="query-dropdown" onchange="loadSelectedQuery()">
+                <option value="">-- Select a query --</option>
+                <optgroup label="Common Queries">
+                    <option value="recent_events">Recent Events</option>
+                    <option value="event_stats">Event Statistics</option>
+                    <option value="subscriptions">Active Subscriptions</option>
+                    <option value="top_pubkeys">Top Pubkeys</option>
+                    <option value="event_kinds">Event Kinds Distribution</option>
+                    <option value="time_stats">Time-based Statistics</option>
+                </optgroup>
+                <optgroup label="Query History" id="history-group">
+                    <!-- Dynamically populated from localStorage -->
+                </optgroup>
+            </select>
+        </div>
+
+        <!-- Query Editor -->
+        <div class="input-group">
+            <label for="sql-input">SQL Query:</label>
+            <textarea id="sql-input" rows="5" placeholder="SELECT * FROM events LIMIT 10"></textarea>
+        </div>
+
+        <!-- Query Actions -->
+        <div class="input-group">
+            <div class="inline-buttons">
+                <button type="button" id="execute-sql-btn">EXECUTE QUERY</button>
+                <button type="button" id="clear-sql-btn">CLEAR</button>
+                <button type="button" id="clear-history-btn">CLEAR HISTORY</button>
+            </div>
+        </div>
+
+        <!-- Query Results -->
+        <div class="input-group">
+            <label>Query Results:</label>
+            <div id="query-info" class="info-box"></div>
+            <div id="query-table" class="config-table-container"></div>
+        </div>
+    </div>
+
+    <!-- Load the official nostr-tools bundle first -->
+    <!-- <script src="https://laantungir.net/nostr-login-lite/nostr.bundle.js"></script> -->
+    <script src="/api/nostr.bundle.js"></script>
+
+    <!-- Load NOSTR_LOGIN_LITE main library -->
+    <!-- <script src="https://laantungir.net/nostr-login-lite/nostr-lite.js"></script> -->
+    <script src="/api/nostr-lite.js"></script>
+    <!-- Load text_graph library -->
+    <script src="/api/text_graph.js"></script>
+
+
+
+
+
+    <script src="/api/index.js"></script>
+</body>
+
+</html>
--- a/api/index.js
+++ b/api/index.js
--- a/api/nostr-lite.js
+++ b/api/nostr-lite.js
--- a/api/nostr.bundle.js
+++ b/api/nostr.bundle.js
--- a/api/text_graph.js
+++ b/api/text_graph.js
@@ -0,0 +1,463 @@
+/**
+ * ASCIIBarChart - A dynamic ASCII-based vertical bar chart renderer
+ * 
+ * Creates real-time animated bar charts using monospaced characters (X)
+ * with automatic scaling, labels, and responsive font sizing.
+ */
+class ASCIIBarChart {
+    /**
+     * Create a new ASCII bar chart
+     * @param {string} containerId - The ID of the HTML element to render the chart in
+     * @param {Object} options - Configuration options
+     * @param {number} [options.maxHeight=20] - Maximum height of the chart in rows
+     * @param {number} [options.maxDataPoints=30] - Maximum number of data columns before scrolling
+     * @param {string} [options.title=''] - Chart title (displayed centered at top)
+     * @param {string} [options.xAxisLabel=''] - X-axis label (displayed centered at bottom)
+     * @param {string} [options.yAxisLabel=''] - Y-axis label (displayed vertically on left)
+     * @param {boolean} [options.autoFitWidth=true] - Automatically adjust font size to fit container width
+     * @param {boolean} [options.useBinMode=false] - Enable time bin mode for data aggregation
+     * @param {number} [options.binDuration=10000] - Duration of each time bin in milliseconds (10 seconds default)
+     * @param {string} [options.xAxisLabelFormat='elapsed'] - X-axis label format: 'elapsed', 'bins', 'timestamps', 'ranges'
+     * @param {boolean} [options.debug=false] - Enable debug logging
+     */
+    constructor(containerId, options = {}) {
+        this.container = document.getElementById(containerId);
+        this.data = [];
+        this.maxHeight = options.maxHeight || 20;
+        this.maxDataPoints = options.maxDataPoints || 30;
+        this.totalDataPoints = 0; // Track total number of data points added
+        this.title = options.title || '';
+        this.xAxisLabel = options.xAxisLabel || '';
+        this.yAxisLabel = options.yAxisLabel || '';
+        this.autoFitWidth = options.autoFitWidth !== false; // Default to true
+        this.debug = options.debug || false; // Debug logging option
+
+        // Time bin configuration
+        this.useBinMode = options.useBinMode !== false; // Default to true
+        this.binDuration = options.binDuration || 4000; // 4 seconds default
+        this.xAxisLabelFormat = options.xAxisLabelFormat || 'elapsed';
+
+        // Time bin data structures
+        this.bins = [];
+        this.currentBinIndex = -1;
+        this.binStartTime = null;
+        this.binCheckInterval = null;
+        this.chartStartTime = Date.now();
+
+        // Set up resize observer if auto-fit is enabled
+        if (this.autoFitWidth) {
+            this.resizeObserver = new ResizeObserver(() => {
+                this.adjustFontSize();
+            });
+            this.resizeObserver.observe(this.container);
+        }
+
+        // Initialize first bin if bin mode is enabled
+        if (this.useBinMode) {
+            this.initializeBins();
+        }
+    }
+
+    /**
+     * Add a new data point to the chart
+     * @param {number} value - The numeric value to add
+     */
+    addValue(value) {
+        // Time bin mode: add value to current active bin count
+        this.checkBinRotation(); // Ensure we have an active bin
+        this.bins[this.currentBinIndex].count += value;  // Changed from ++ to += value
+        this.totalDataPoints++;
+
+        this.render();
+        this.updateInfo();
+    }
+
+    /**
+     * Clear all data from the chart
+     */
+    clear() {
+        this.data = [];
+        this.totalDataPoints = 0;
+
+        if (this.useBinMode) {
+            this.bins = [];
+            this.currentBinIndex = -1;
+            this.binStartTime = null;
+            this.initializeBins();
+        }
+
+        this.render();
+        this.updateInfo();
+    }
+
+    /**
+     * Calculate the width of the chart in characters
+     * @returns {number} The chart width in characters
+     * @private
+     */
+    getChartWidth() {
+        let dataLength = this.maxDataPoints; // Always use maxDataPoints for consistent width
+
+        if (dataLength === 0) return 50; // Default width for empty chart
+
+        const yAxisPadding = this.yAxisLabel ? 2 : 0;
+        const yAxisNumbers = 3; // Width of Y-axis numbers
+        const separator = 1; // The '|' character
+        // const dataWidth = dataLength * 2; // Each column is 2 characters wide  // TEMP: commented for no-space test
+        const dataWidth = dataLength; // Each column is 1 character wide  // TEMP: adjusted for no-space columns
+        const padding = 1; // Extra padding
+
+        const totalWidth = yAxisPadding + yAxisNumbers + separator + dataWidth + padding;
+
+        // Only log when width changes
+        if (this.debug && this.lastChartWidth !== totalWidth) {
+            console.log('getChartWidth changed:', { dataLength, totalWidth, previous: this.lastChartWidth });
+            this.lastChartWidth = totalWidth;
+        }
+
+        return totalWidth;
+    }
+
+    /**
+     * Adjust font size to fit container width
+     * @private
+     */
+    adjustFontSize() {
+        if (!this.autoFitWidth) return;
+
+        const containerWidth = this.container.clientWidth;
+        const chartWidth = this.getChartWidth();
+
+        if (chartWidth === 0) return;
+
+        // Calculate optimal font size
+        // For monospace fonts, character width is approximately 0.6 * font size
+        // Use a slightly smaller ratio to fit more content
+        const charWidthRatio = 0.7;
+        const padding = 30; // Reduce padding to fit more content
+        const availableWidth = containerWidth - padding;
+        const optimalFontSize = Math.floor((availableWidth / chartWidth) / charWidthRatio);
+
+        // Set reasonable bounds (min 4px, max 20px)
+        const fontSize = Math.max(4, Math.min(20, optimalFontSize));
+
+        // Only log when font size changes
+        if (this.debug && this.lastFontSize !== fontSize) {
+            console.log('fontSize changed:', { containerWidth, chartWidth, fontSize, previous: this.lastFontSize });
+            this.lastFontSize = fontSize;
+        }
+
+        this.container.style.fontSize = fontSize + 'px';
+        this.container.style.lineHeight = '1.0';
+    }
+
+    /**
+     * Render the chart to the container
+     * @private
+     */
+    render() {
+        let dataToRender = [];
+        let maxValue = 0;
+        let minValue = 0;
+        let valueRange = 0;
+
+        if (this.useBinMode) {
+            // Bin mode: render bin counts
+            if (this.bins.length === 0) {
+                this.container.textContent = 'No data yet. Click Start to begin.';
+                return;
+            }
+            // Always create a fixed-length array filled with 0s, then overlay actual bin data
+            dataToRender = new Array(this.maxDataPoints).fill(0);
+
+            // Overlay actual bin data (most recent bins, reversed for left-to-right display)
+            const startIndex = Math.max(0, this.bins.length - this.maxDataPoints);
+            const recentBins = this.bins.slice(startIndex);
+
+            // Reverse the bins so most recent is on the left, and overlay onto the fixed array
+            recentBins.reverse().forEach((bin, index) => {
+                if (index < this.maxDataPoints) {
+                    dataToRender[index] = bin.count;
+                }
+            });
+
+            if (this.debug) {
+                console.log('render() dataToRender:', dataToRender, 'bins length:', this.bins.length);
+            }
+            maxValue = Math.max(...dataToRender);
+            minValue = Math.min(...dataToRender);
+            valueRange = maxValue - minValue;
+        } else {
+            // Legacy mode: render individual values
+            if (this.data.length === 0) {
+                this.container.textContent = 'No data yet. Click Start to begin.';
+                return;
+            }
+            dataToRender = this.data;
+            maxValue = Math.max(...this.data);
+            minValue = Math.min(...this.data);
+            valueRange = maxValue - minValue;
+        }
+
+        let output = '';
+        const scale = this.maxHeight;
+
+        // Calculate scaling factor: each X represents at least 1 count
+        const maxCount = Math.max(...dataToRender);
+        const scaleFactor = Math.max(1, Math.ceil(maxCount / scale)); // 1 X = scaleFactor counts
+        const scaledMax = Math.ceil(maxCount / scaleFactor) * scaleFactor;
+
+        // Calculate Y-axis label width (for vertical text)
+        const yLabelWidth = this.yAxisLabel ? 2 : 0;
+        const yAxisPadding = this.yAxisLabel ? '  ' : '';
+
+        // Add title if provided (centered)
+        if (this.title) {
+            // const chartWidth = 4 + this.maxDataPoints * 2; // Y-axis numbers + data columns  // TEMP: commented for no-space test
+            const chartWidth = 4 + this.maxDataPoints; // Y-axis numbers + data columns  // TEMP: adjusted for no-space columns
+            const titlePadding = Math.floor((chartWidth - this.title.length) / 2);
+            output += yAxisPadding + ' '.repeat(Math.max(0, titlePadding)) + this.title + '\n\n';
+        }
+
+        // Draw from top to bottom
+        for (let row = scale; row > 0; row--) {
+            let line = '';
+
+            // Add vertical Y-axis label character
+            if (this.yAxisLabel) {
+                const L = this.yAxisLabel.length;
+                const startRow = Math.floor((scale - L) / 2) + 1;
+                const relativeRow = scale - row + 1; // 1 at top, scale at bottom
+                if (relativeRow >= startRow && relativeRow < startRow + L) {
+                    const labelIndex = relativeRow - startRow;
+                    line += this.yAxisLabel[labelIndex] + ' ';
+                } else {
+                    line += '  ';
+                }
+            }
+
+            // Calculate the actual count value this row represents (1 at bottom, increasing upward)
+            const rowCount = (row - 1) * scaleFactor + 1;
+
+            // Add Y-axis label (show actual count values)
+            line += String(rowCount).padStart(3, ' ') + ' |';
+
+            // Draw each column
+            for (let i = 0; i < dataToRender.length; i++) {
+                const count = dataToRender[i];
+                const scaledHeight = Math.ceil(count / scaleFactor);
+
+                if (scaledHeight >= row) {
+                    // line += ' X';  // TEMP: commented out space between columns
+                    line += 'X';  // TEMP: no space between columns
+                } else {
+                    // line += '  ';  // TEMP: commented out space between columns
+                    line += ' ';  // TEMP: single space for empty columns
+                }
+            }
+
+            output += line + '\n';
+        }
+
+        // Draw X-axis
+        // output += yAxisPadding + '    +' + '-'.repeat(this.maxDataPoints * 2) + '\n';  // TEMP: commented out for no-space test
+        output += yAxisPadding + '    +' + '-'.repeat(this.maxDataPoints) + '\n';  // TEMP: back to original length
+
+        // Draw X-axis labels based on mode and format
+        let xAxisLabels = yAxisPadding + '     ';  // Initial padding to align with X-axis
+
+        // Determine label interval (every 5 columns)
+        const labelInterval = 5;
+
+        // Generate all labels first and store in array
+        let labels = [];
+        for (let i = 0; i < this.maxDataPoints; i++) {
+            if (i % labelInterval === 0) {
+                let label = '';
+                if (this.useBinMode) {
+                    // For bin mode, show labels for all possible positions
+                    // i=0 is leftmost (most recent), i=maxDataPoints-1 is rightmost (oldest)
+                    const elapsedSec = (i * this.binDuration) / 1000;
+                    // Format with appropriate precision for sub-second bins
+                    if (this.binDuration < 1000) {
+                        // Show decimal seconds for sub-second bins
+                        label = elapsedSec.toFixed(1) + 's';
+                    } else {
+                        // Show whole seconds for 1+ second bins
+                        label = String(Math.round(elapsedSec)) + 's';
+                    }
+                } else {
+                    // For legacy mode, show data point numbers
+                    const startIndex = Math.max(1, this.totalDataPoints - this.maxDataPoints + 1);
+                    label = String(startIndex + i);
+                }
+                labels.push(label);
+            }
+        }
+
+        // Build the label string with calculated spacing
+        for (let i = 0; i < labels.length; i++) {
+            const label = labels[i];
+            xAxisLabels += label;
+
+            // Add spacing: labelInterval - label.length (except for last label)
+            if (i < labels.length - 1) {
+                const spacing = labelInterval - label.length;
+                xAxisLabels += ' '.repeat(spacing);
+            }
+        }
+
+        // Ensure the label line extends to match the X-axis dash line length
+        // The dash line is this.maxDataPoints characters long, starting after "    +"
+        const dashLineLength = this.maxDataPoints;
+        const minLabelLineLength = yAxisPadding.length + 4 + dashLineLength; // 4 for "    "
+        if (xAxisLabels.length < minLabelLineLength) {
+            xAxisLabels += ' '.repeat(minLabelLineLength - xAxisLabels.length);
+        }
+        output += xAxisLabels + '\n';
+
+        // Add X-axis label if provided
+        if (this.xAxisLabel) {
+            // const labelPadding = Math.floor((this.maxDataPoints * 2 - this.xAxisLabel.length) / 2);  // TEMP: commented for no-space test
+            const labelPadding = Math.floor((this.maxDataPoints - this.xAxisLabel.length) / 2);  // TEMP: adjusted for no-space columns
+            output += '\n' + yAxisPadding + '     ' + ' '.repeat(Math.max(0, labelPadding)) + this.xAxisLabel + '\n';
+        }
+
+        this.container.textContent = output;
+
+        // Adjust font size to fit width (only once at initialization)
+        if (this.autoFitWidth) {
+            this.adjustFontSize();
+        }
+
+        // Update the external info display
+        if (this.useBinMode) {
+            const binCounts = this.bins.map(bin => bin.count);
+            const scaleFactor = Math.max(1, Math.ceil(maxValue / scale));
+            document.getElementById('values').textContent = `[${dataToRender.join(', ')}]`;
+            document.getElementById('max-value').textContent = maxValue;
+            document.getElementById('scale').textContent = `Min: ${minValue}, Max: ${maxValue}, 1X=${scaleFactor} counts`;
+        } else {
+            document.getElementById('values').textContent = `[${this.data.join(', ')}]`;
+            document.getElementById('max-value').textContent = maxValue;
+            document.getElementById('scale').textContent = `Min: ${minValue}, Max: ${maxValue}, Height: ${scale}`;
+        }
+    }
+
+    /**
+     * Update the info display
+     * @private
+     */
+    updateInfo() {
+        if (this.useBinMode) {
+            const totalCount = this.bins.reduce((sum, bin) => sum + bin.count, 0);
+            document.getElementById('count').textContent = totalCount;
+        } else {
+            document.getElementById('count').textContent = this.data.length;
+        }
+    }
+
+    /**
+     * Initialize the bin system
+     * @private
+     */
+    initializeBins() {
+        this.bins = [];
+        this.currentBinIndex = -1;
+        this.binStartTime = null;
+        this.chartStartTime = Date.now();
+
+        // Create first bin
+        this.rotateBin();
+
+        // Set up automatic bin rotation check
+        this.binCheckInterval = setInterval(() => {
+            this.checkBinRotation();
+        }, 100); // Check every 100ms for responsiveness
+    }
+
+    /**
+     * Check if current bin should rotate and create new bin if needed
+     * @private
+     */
+    checkBinRotation() {
+        if (!this.useBinMode || !this.binStartTime) return;
+
+        const now = Date.now();
+        if ((now - this.binStartTime) >= this.binDuration) {
+            this.rotateBin();
+        }
+    }
+
+    /**
+     * Rotate to a new bin, finalizing the current one
+     */
+    rotateBin() {
+        // Finalize current bin if it exists
+        if (this.currentBinIndex >= 0) {
+            this.bins[this.currentBinIndex].isActive = false;
+        }
+
+        // Create new bin
+        const newBin = {
+            startTime: Date.now(),
+            count: 0,
+            isActive: true
+        };
+
+        this.bins.push(newBin);
+        this.currentBinIndex = this.bins.length - 1;
+        this.binStartTime = newBin.startTime;
+
+        // Keep only the most recent bins
+        if (this.bins.length > this.maxDataPoints) {
+            this.bins.shift();
+            this.currentBinIndex--;
+        }
+
+        // Ensure currentBinIndex points to the last bin (the active one)
+        this.currentBinIndex = this.bins.length - 1;
+
+        // Force a render to update the display immediately
+        this.render();
+        this.updateInfo();
+    }
+
+    /**
+     * Format X-axis label for a bin based on the configured format
+     * @param {number} binIndex - Index of the bin
+     * @returns {string} Formatted label
+     * @private
+     */
+    formatBinLabel(binIndex) {
+        const bin = this.bins[binIndex];
+        if (!bin) return '  ';
+
+        switch (this.xAxisLabelFormat) {
+            case 'bins':
+                return String(binIndex + 1).padStart(2, ' ');
+
+            case 'timestamps':
+                const time = new Date(bin.startTime);
+                return time.toLocaleTimeString('en-US', {
+                    hour12: false,
+                    hour: '2-digit',
+                    minute: '2-digit',
+                    second: '2-digit'
+                }).replace(/:/g, '');
+
+            case 'ranges':
+                const startSec = Math.floor((bin.startTime - this.chartStartTime) / 1000);
+                const endSec = startSec + Math.floor(this.binDuration / 1000);
+                return `${startSec}-${endSec}`;
+
+            case 'elapsed':
+            default:
+                // For elapsed time, always show time relative to the first bin (index 0)
+                // This keeps the leftmost label as 0s and increases to the right
+                const firstBinTime = this.bins[0] ? this.bins[0].startTime : this.chartStartTime;
+                const elapsedSec = Math.floor((bin.startTime - firstBinTime) / 1000);
+                return String(elapsedSec).padStart(2, ' ') + 's';
+        }
+    }
+}
--- a/build/admin_event.o
+++ b/build/admin_event.o
--- a/build/admin_interface.o
+++ b/build/admin_interface.o
--- a/build/ginxsom-fcgi
+++ b/build/ginxsom-fcgi
--- a/build/main.o
+++ b/build/main.o
--- a/config/local-nginx.conf
+++ b/config/local-nginx.conf
@@ -220,6 +220,35 @@ http {
            fastcgi_param HTTP_AUTHORIZATION $http_authorization;
        }

+        # Admin web interface (/admin)
+        location /admin {
+            if ($request_method !~ ^(GET)$) {
+                return 405;
+            }
+            fastcgi_pass fastcgi_backend;
+            fastcgi_param QUERY_STRING $query_string;
+            fastcgi_param REQUEST_METHOD $request_method;
+            fastcgi_param CONTENT_TYPE $content_type;
+            fastcgi_param CONTENT_LENGTH $content_length;
+            fastcgi_param SCRIPT_NAME $fastcgi_script_name;
+            fastcgi_param REQUEST_URI $request_uri;
+            fastcgi_param DOCUMENT_URI $document_uri;
+            fastcgi_param DOCUMENT_ROOT $document_root;
+            fastcgi_param SERVER_PROTOCOL $server_protocol;
+            fastcgi_param REQUEST_SCHEME $scheme;
+            fastcgi_param HTTPS $https if_not_empty;
+            fastcgi_param GATEWAY_INTERFACE CGI/1.1;
+            fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
+            fastcgi_param REMOTE_ADDR $remote_addr;
+            fastcgi_param REMOTE_PORT $remote_port;
+            fastcgi_param SERVER_ADDR $server_addr;
+            fastcgi_param SERVER_PORT $server_port;
+            fastcgi_param SERVER_NAME $server_name;
+            fastcgi_param REDIRECT_STATUS 200;
+            fastcgi_param SCRIPT_FILENAME $document_root/ginxsom.fcgi;
+            fastcgi_param HTTP_AUTHORIZATION $http_authorization;
+        }
+
        # Admin API endpoints (/api/*)
        location /api/ {
            if ($request_method !~ ^(GET|PUT|POST)$) {
@@ -571,6 +600,35 @@ http {
            fastcgi_param HTTP_AUTHORIZATION $http_authorization;
        }

+        # Admin web interface (/admin)
+        location /admin {
+            if ($request_method !~ ^(GET)$) {
+                return 405;
+            }
+            fastcgi_pass fastcgi_backend;
+            fastcgi_param QUERY_STRING $query_string;
+            fastcgi_param REQUEST_METHOD $request_method;
+            fastcgi_param CONTENT_TYPE $content_type;
+            fastcgi_param CONTENT_LENGTH $content_length;
+            fastcgi_param SCRIPT_NAME $fastcgi_script_name;
+            fastcgi_param REQUEST_URI $request_uri;
+            fastcgi_param DOCUMENT_URI $document_uri;
+            fastcgi_param DOCUMENT_ROOT $document_root;
+            fastcgi_param SERVER_PROTOCOL $server_protocol;
+            fastcgi_param REQUEST_SCHEME $scheme;
+            fastcgi_param HTTPS $https if_not_empty;
+            fastcgi_param GATEWAY_INTERFACE CGI/1.1;
+            fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
+            fastcgi_param REMOTE_ADDR $remote_addr;
+            fastcgi_param REMOTE_PORT $remote_port;
+            fastcgi_param SERVER_ADDR $server_addr;
+            fastcgi_param SERVER_PORT $server_port;
+            fastcgi_param SERVER_NAME $server_name;
+            fastcgi_param REDIRECT_STATUS 200;
+            fastcgi_param SCRIPT_FILENAME $document_root/ginxsom.fcgi;
+            fastcgi_param HTTP_AUTHORIZATION $http_authorization;
+        }
+
        # Admin API endpoints (/api/*)
        location /api/ {
            if ($request_method !~ ^(GET|PUT|POST)$) {
--- a/db/52e366edfa4e9cc6a6d4653828e51ccf828a2f5a05227d7a768f33b5a198681a.db
+++ b/db/52e366edfa4e9cc6a6d4653828e51ccf828a2f5a05227d7a768f33b5a198681a.db
--- a/debug.log
+++ b/debug.log
--- a/docs/WEBSOCKET_IMPLEMENTATION.md
+++ b/docs/WEBSOCKET_IMPLEMENTATION.md
--- a/restart-all.sh
+++ b/restart-all.sh
@@ -175,6 +175,12 @@ echo -e "${GREEN}FastCGI cleanup complete${NC}"

 # Step 3: Always rebuild FastCGI binary with clean build
 echo -e "\n${YELLOW}3. Rebuilding FastCGI binary (clean build)...${NC}"
+echo "Embedding web files..."
+./scripts/embed_web_files.sh
+if [ $? -ne 0 ]; then
+    echo -e "${RED}Web file embedding failed! Cannot continue.${NC}"
+    exit 1
+fi
 echo "Performing clean rebuild to ensure all changes are compiled..."
 make clean && make
 if [ $? -ne 0 ]; then
--- a/scripts/embed_web_files.sh
+++ b/scripts/embed_web_files.sh
@@ -0,0 +1,82 @@
+#!/bin/bash
+# Embed web interface files into C source code
+# This script converts HTML, CSS, and JS files into C byte arrays
+
+set -e
+
+# Configuration
+API_DIR="api"
+OUTPUT_DIR="src"
+OUTPUT_FILE="${OUTPUT_DIR}/admin_interface_embedded.h"
+
+# Files to embed
+FILES=(
+    "index.html"
+    "index.css"
+    "index.js"
+    "nostr-lite.js"
+    "nostr.bundle.js"
+    "text_graph.js"
+)
+
+echo "=== Embedding Web Interface Files ==="
+echo "Source directory: ${API_DIR}"
+echo "Output file: ${OUTPUT_FILE}"
+echo ""
+
+# Start output file
+cat > "${OUTPUT_FILE}" << 'EOF'
+/*
+ * Embedded Web Interface Files
+ * Auto-generated by scripts/embed_web_files.sh
+ * DO NOT EDIT MANUALLY
+ */
+
+#ifndef ADMIN_INTERFACE_EMBEDDED_H
+#define ADMIN_INTERFACE_EMBEDDED_H
+
+#include <stddef.h>
+
+EOF
+
+# Process each file
+for file in "${FILES[@]}"; do
+    filepath="${API_DIR}/${file}"
+    
+    if [[ ! -f "${filepath}" ]]; then
+        echo "WARNING: File not found: ${filepath}"
+        continue
+    fi
+    
+    # Create variable name from filename (replace . and - with _)
+    varname=$(echo "${file}" | tr '.-' '__')
+    
+    echo "Embedding: ${file} -> embedded_${varname}"
+    
+    # Get file size
+    filesize=$(stat -f%z "${filepath}" 2>/dev/null || stat -c%s "${filepath}" 2>/dev/null)
+    
+    # Add comment
+    echo "" >> "${OUTPUT_FILE}"
+    echo "// Embedded file: ${file} (${filesize} bytes)" >> "${OUTPUT_FILE}"
+    
+    # Convert file to C byte array
+    echo "static const unsigned char embedded_${varname}[] = {" >> "${OUTPUT_FILE}"
+    
+    # Use xxd to convert to hex, then format as C array
+    xxd -i < "${filepath}" >> "${OUTPUT_FILE}"
+    
+    echo "};" >> "${OUTPUT_FILE}"
+    echo "static const size_t embedded_${varname}_size = sizeof(embedded_${varname});" >> "${OUTPUT_FILE}"
+done
+
+# Close header guard
+cat >> "${OUTPUT_FILE}" << 'EOF'
+
+#endif /* ADMIN_INTERFACE_EMBEDDED_H */
+EOF
+
+echo ""
+echo "=== Embedding Complete ==="
+echo "Generated: ${OUTPUT_FILE}"
+echo "Total files embedded: ${#FILES[@]}"
--- a/src/admin_commands.h
+++ b/src/admin_commands.h
@@ -1,8 +1,8 @@
 /*
 * Ginxsom Admin Commands Interface
 *
- * Handles encrypted admin commands sent via Kind 23456 events
- * and generates encrypted responses as Kind 23457 events.
+ * Handles encrypted admin commands sent via Kind 23458 events
+ * and generates encrypted responses as Kind 23459 events.
 */

 #ifndef ADMIN_COMMANDS_H
--- a/src/admin_event.c
+++ b/src/admin_event.c
@@ -1,4 +1,4 @@
-// Admin event handler for Kind 23456/23457 admin commands
+// Admin event handler for Kind 23458/23459 admin commands
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
@@ -27,90 +27,161 @@ extern char g_db_path[];
 static int get_server_privkey(unsigned char* privkey_bytes);
 static int get_server_pubkey(char* pubkey_hex, size_t size);
 static int handle_config_query_command(cJSON* response_data);
-static int send_admin_response_event(const char* admin_pubkey, const char* request_id, 
+static int send_admin_response_event(const char* admin_pubkey, const char* request_id,
                                     cJSON* response_data);
+static cJSON* parse_authorization_header(void);
+static int process_admin_event(cJSON* event);

 /**
- * Handle Kind 23456 admin command event
- * Expects POST to /api/admin with JSON body containing the event
+ * Handle Kind 23458 admin command event
+ * Supports two delivery methods:
+ * 1. POST body with JSON event
+ * 2. Authorization header with Nostr event
 */
 void handle_admin_event_request(void) {
-    // Read request body
-    const char* content_length_str = getenv("CONTENT_LENGTH");
-    if (!content_length_str) {
-        printf("Status: 411 Length Required\r\n");
-        printf("Content-Type: application/json\r\n\r\n");
-        printf("{\"error\":\"Content-Length header required\"}\n");
-        return;
-    }
+    cJSON* event = NULL;
+    int should_free_event = 1;

-    long content_length = atol(content_length_str);
-    if (content_length <= 0 || content_length > 65536) {
-        printf("Status: 400 Bad Request\r\n");
-        printf("Content-Type: application/json\r\n\r\n");
-        printf("{\"error\":\"Invalid content length\"}\n");
-        return;
-    }
-
-    char* json_body = malloc(content_length + 1);
-    if (!json_body) {
-        printf("Status: 500 Internal Server Error\r\n");
-        printf("Content-Type: application/json\r\n\r\n");
-        printf("{\"error\":\"Memory allocation failed\"}\n");
-        return;
-    }
-
-    size_t bytes_read = fread(json_body, 1, content_length, stdin);
-    if (bytes_read != (size_t)content_length) {
-        free(json_body);
-        printf("Status: 400 Bad Request\r\n");
-        printf("Content-Type: application/json\r\n\r\n");
-        printf("{\"error\":\"Failed to read complete request body\"}\n");
-        return;
-    }
-    json_body[content_length] = '\0';
-
-    // Parse event JSON
-    cJSON* event = cJSON_Parse(json_body);
-    free(json_body);
+    // First, try to get event from Authorization header
+    event = parse_authorization_header();
    
+    // If not in header, try POST body
+    if (!event) {
+        const char* content_length_str = getenv("CONTENT_LENGTH");
+        if (!content_length_str) {
+            printf("Status: 400 Bad Request\r\n");
+            printf("Content-Type: application/json\r\n\r\n");
+            printf("{\"error\":\"Event required in POST body or Authorization header\"}\n");
+            return;
+        }
+
+        long content_length = atol(content_length_str);
+        if (content_length <= 0 || content_length > 65536) {
+            printf("Status: 400 Bad Request\r\n");
+            printf("Content-Type: application/json\r\n\r\n");
+            printf("{\"error\":\"Invalid content length\"}\n");
+            return;
+        }
+
+        char* json_body = malloc(content_length + 1);
+        if (!json_body) {
+            printf("Status: 500 Internal Server Error\r\n");
+            printf("Content-Type: application/json\r\n\r\n");
+            printf("{\"error\":\"Memory allocation failed\"}\n");
+            return;
+        }
+
+        size_t bytes_read = fread(json_body, 1, content_length, stdin);
+        if (bytes_read != (size_t)content_length) {
+            free(json_body);
+            printf("Status: 400 Bad Request\r\n");
+            printf("Content-Type: application/json\r\n\r\n");
+            printf("{\"error\":\"Failed to read complete request body\"}\n");
+            return;
+        }
+        json_body[content_length] = '\0';
+
+        // Parse event JSON
+        event = cJSON_Parse(json_body);
+        
+        // Debug: Log the received JSON
+        app_log(LOG_DEBUG, "ADMIN_EVENT: Received POST body: %s", json_body);
+        
+        free(json_body);
+        
+        if (!event) {
+            app_log(LOG_ERROR, "ADMIN_EVENT: Failed to parse JSON");
+            printf("Status: 400 Bad Request\r\n");
+            printf("Content-Type: application/json\r\n\r\n");
+            printf("{\"error\":\"Invalid JSON\"}\n");
+            return;
+        }
+        
+        // Debug: Log parsed event
+        char* event_str = cJSON_Print(event);
+        if (event_str) {
+            app_log(LOG_DEBUG, "ADMIN_EVENT: Parsed event: %s", event_str);
+            free(event_str);
+        }
+    }
+
+    // Process the event (handles validation, decryption, command execution, response)
+    int result = process_admin_event(event);
+    
+    // Clean up
+    if (should_free_event && event) {
+        cJSON_Delete(event);
+    }
+    
+    (void)result; // Result already handled by process_admin_event
+}
+
+/**
+ * Parse Kind 23458 event from Authorization header
+ * Format: Authorization: Nostr <base64-encoded-event-json>
+ * Returns: cJSON event object or NULL if not present/invalid
+ */
+static cJSON* parse_authorization_header(void) {
+    const char* auth_header = getenv("HTTP_AUTHORIZATION");
+    if (!auth_header) {
+        return NULL;
+    }
+
+    // Check for "Nostr " prefix (case-insensitive)
+    if (strncasecmp(auth_header, "Nostr ", 6) != 0) {
+        return NULL;
+    }
+
+    // Skip "Nostr " prefix
+    const char* base64_event = auth_header + 6;
+    
+    // Decode base64 (simple implementation - in production use proper base64 decoder)
+    // For now, assume the event is JSON directly (not base64 encoded)
+    // This matches the pattern from c-relay's admin interface
+    cJSON* event = cJSON_Parse(base64_event);
+    
+    return event;
+}
+
+/**
+ * Process a Kind 23458 admin event (from POST body or Authorization header)
+ * Returns: 0 on success, -1 on error (error response already sent)
+ */
+static int process_admin_event(cJSON* event) {
    if (!event) {
        printf("Status: 400 Bad Request\r\n");
        printf("Content-Type: application/json\r\n\r\n");
-        printf("{\"error\":\"Invalid JSON\"}\n");
-        return;
+        printf("{\"error\":\"Invalid event\"}\n");
+        return -1;
    }

-    // Verify it's Kind 23456
+    // Verify it's Kind 23458
    cJSON* kind_obj = cJSON_GetObjectItem(event, "kind");
-    if (!kind_obj || !cJSON_IsNumber(kind_obj) || 
-        (int)cJSON_GetNumberValue(kind_obj) != 23456) {
-        cJSON_Delete(event);
+    if (!kind_obj || !cJSON_IsNumber(kind_obj) ||
+        (int)cJSON_GetNumberValue(kind_obj) != 23458) {
        printf("Status: 400 Bad Request\r\n");
        printf("Content-Type: application/json\r\n\r\n");
-        printf("{\"error\":\"Event must be Kind 23456\"}\n");
-        return;
+        printf("{\"error\":\"Event must be Kind 23458\"}\n");
+        return -1;
    }

    // Get event ID for response correlation
    cJSON* id_obj = cJSON_GetObjectItem(event, "id");
    if (!id_obj || !cJSON_IsString(id_obj)) {
-        cJSON_Delete(event);
        printf("Status: 400 Bad Request\r\n");
        printf("Content-Type: application/json\r\n\r\n");
        printf("{\"error\":\"Event missing id\"}\n");
-        return;
+        return -1;
    }
    const char* request_id = cJSON_GetStringValue(id_obj);

    // Get admin pubkey from event
    cJSON* pubkey_obj = cJSON_GetObjectItem(event, "pubkey");
    if (!pubkey_obj || !cJSON_IsString(pubkey_obj)) {
-        cJSON_Delete(event);
        printf("Status: 400 Bad Request\r\n");
        printf("Content-Type: application/json\r\n\r\n");
        printf("{\"error\":\"Event missing pubkey\"}\n");
-        return;
+        return -1;
    }
    const char* admin_pubkey = cJSON_GetStringValue(pubkey_obj);

@@ -118,11 +189,10 @@ void handle_admin_event_request(void) {
    sqlite3* db;
    int rc = sqlite3_open_v2(g_db_path, &db, SQLITE_OPEN_READONLY, NULL);
    if (rc != SQLITE_OK) {
-        cJSON_Delete(event);
        printf("Status: 500 Internal Server Error\r\n");
        printf("Content-Type: application/json\r\n\r\n");
        printf("{\"error\":\"Database error\"}\n");
-        return;
+        return -1;
    }

    sqlite3_stmt* stmt;
@@ -141,42 +211,38 @@ void handle_admin_event_request(void) {
    sqlite3_close(db);

    if (!is_admin) {
-        cJSON_Delete(event);
        printf("Status: 403 Forbidden\r\n");
        printf("Content-Type: application/json\r\n\r\n");
        printf("{\"error\":\"Not authorized as admin\"}\n");
-        return;
+        return -1;
    }

    // Get encrypted content
    cJSON* content_obj = cJSON_GetObjectItem(event, "content");
    if (!content_obj || !cJSON_IsString(content_obj)) {
-        cJSON_Delete(event);
        printf("Status: 400 Bad Request\r\n");
        printf("Content-Type: application/json\r\n\r\n");
        printf("{\"error\":\"Event missing content\"}\n");
-        return;
+        return -1;
    }
    const char* encrypted_content = cJSON_GetStringValue(content_obj);

    // Get server private key for decryption
    unsigned char server_privkey[32];
    if (get_server_privkey(server_privkey) != 0) {
-        cJSON_Delete(event);
        printf("Status: 500 Internal Server Error\r\n");
        printf("Content-Type: application/json\r\n\r\n");
        printf("{\"error\":\"Failed to get server private key\"}\n");
-        return;
+        return -1;
    }

    // Convert admin pubkey to bytes
    unsigned char admin_pubkey_bytes[32];
    if (nostr_hex_to_bytes(admin_pubkey, admin_pubkey_bytes, 32) != 0) {
-        cJSON_Delete(event);
        printf("Status: 400 Bad Request\r\n");
        printf("Content-Type: application/json\r\n\r\n");
        printf("{\"error\":\"Invalid admin pubkey format\"}\n");
-        return;
+        return -1;
    }

    // Decrypt content using NIP-44 (or use plaintext for testing)
@@ -195,11 +261,12 @@ void handle_admin_event_request(void) {
        );

        if (decrypt_result != 0) {
-            cJSON_Delete(event);
+            app_log(LOG_ERROR, "ADMIN_EVENT: Decryption failed with result: %d", decrypt_result);
+            app_log(LOG_ERROR, "ADMIN_EVENT: Encrypted content: %s", encrypted_content);
            printf("Status: 400 Bad Request\r\n");
            printf("Content-Type: application/json\r\n\r\n");
            printf("{\"error\":\"Failed to decrypt content\"}\n");
-            return;
+            return -1;
        }
        content_to_parse = decrypted_content;
    }
@@ -207,22 +274,20 @@ void handle_admin_event_request(void) {
    // Parse command array (either decrypted or plaintext)
    cJSON* command_array = cJSON_Parse(content_to_parse);
    if (!command_array || !cJSON_IsArray(command_array)) {
-        cJSON_Delete(event);
        printf("Status: 400 Bad Request\r\n");
        printf("Content-Type: application/json\r\n\r\n");
        printf("{\"error\":\"Decrypted content is not a valid command array\"}\n");
-        return;
+        return -1;
    }

    // Get command type
    cJSON* command_type = cJSON_GetArrayItem(command_array, 0);
    if (!command_type || !cJSON_IsString(command_type)) {
        cJSON_Delete(command_array);
-        cJSON_Delete(event);
        printf("Status: 400 Bad Request\r\n");
        printf("Content-Type: application/json\r\n\r\n");
        printf("{\"error\":\"Invalid command format\"}\n");
-        return;
+        return -1;
    }

    const char* cmd = cJSON_GetStringValue(command_type);
@@ -242,16 +307,17 @@ void handle_admin_event_request(void) {
    }

    cJSON_Delete(command_array);
-    cJSON_Delete(event);

    if (result == 0) {
-        // Send Kind 23457 response
+        // Send Kind 23459 response
        send_admin_response_event(admin_pubkey, request_id, response_data);
+        return 0;
    } else {
        cJSON_Delete(response_data);
        printf("Status: 500 Internal Server Error\r\n");
        printf("Content-Type: application/json\r\n\r\n");
        printf("{\"error\":\"Command processing failed\"}\n");
+        return -1;
    }
 }

@@ -350,7 +416,7 @@ static int handle_config_query_command(cJSON* response_data) {
 }

 /**
- * Send Kind 23457 admin response event
+ * Send Kind 23459 admin response event
 */
 static int send_admin_response_event(const char* admin_pubkey, const char* request_id,
                                     cJSON* response_data) {
@@ -407,11 +473,11 @@ static int send_admin_response_event(const char* admin_pubkey, const char* reque
        return -1;
    }

-    // Create Kind 23457 response event
+    // Create Kind 23459 response event
    cJSON* response_event = cJSON_CreateObject();
    cJSON_AddStringToObject(response_event, "pubkey", server_pubkey);
    cJSON_AddNumberToObject(response_event, "created_at", (double)time(NULL));
-    cJSON_AddNumberToObject(response_event, "kind", 23457);
+    cJSON_AddNumberToObject(response_event, "kind", 23459);
    cJSON_AddStringToObject(response_event, "content", encrypted_response);
    
    // Add tags
@@ -433,7 +499,7 @@ static int send_admin_response_event(const char* admin_pubkey, const char* reque

    // Sign the event
    cJSON* signed_event = nostr_create_and_sign_event(
-        23457,
+        23459,
        encrypted_response,
        tags,
        server_privkey,
--- a/src/admin_interface.c
+++ b/src/admin_interface.c
@@ -0,0 +1,62 @@
+// Admin interface handler - serves embedded web UI files
+#include <stdio.h>
+#include <string.h>
+#include "ginxsom.h"
+#include "admin_interface_embedded.h"
+
+/**
+ * Serve embedded file with appropriate content type
+ */
+static void serve_embedded_file(const unsigned char* data, size_t size, const char* content_type) {
+    printf("Status: 200 OK\r\n");
+    printf("Content-Type: %s\r\n", content_type);
+    printf("Content-Length: %zu\r\n", size);
+    printf("Cache-Control: public, max-age=3600\r\n");
+    printf("\r\n");
+    fwrite((void*)data, 1, size, stdout);
+    fflush(stdout);
+}
+
+/**
+ * Handle admin interface requests
+ * Serves embedded web UI files from /api path (consistent with c-relay)
+ */
+void handle_admin_interface_request(const char* path) {
+    // Normalize path - remove trailing slash
+    char normalized_path[256];
+    strncpy(normalized_path, path, sizeof(normalized_path) - 1);
+    normalized_path[sizeof(normalized_path) - 1] = '\0';
+    
+    size_t len = strlen(normalized_path);
+    if (len > 1 && normalized_path[len - 1] == '/') {
+        normalized_path[len - 1] = '\0';
+    }
+    
+    // Route to appropriate embedded file
+    // All paths use /api/ prefix for consistency with c-relay
+    if (strcmp(normalized_path, "/api") == 0 || strcmp(normalized_path, "/api/index.html") == 0) {
+        serve_embedded_file(embedded_index_html, embedded_index_html_size, "text/html; charset=utf-8");
+    }
+    else if (strcmp(normalized_path, "/api/index.css") == 0) {
+        serve_embedded_file(embedded_index_css, embedded_index_css_size, "text/css; charset=utf-8");
+    }
+    else if (strcmp(normalized_path, "/api/index.js") == 0) {
+        serve_embedded_file(embedded_index_js, embedded_index_js_size, "application/javascript; charset=utf-8");
+    }
+    else if (strcmp(normalized_path, "/api/nostr-lite.js") == 0) {
+        serve_embedded_file(embedded_nostr_lite_js, embedded_nostr_lite_js_size, "application/javascript; charset=utf-8");
+    }
+    else if (strcmp(normalized_path, "/api/nostr.bundle.js") == 0) {
+        serve_embedded_file(embedded_nostr_bundle_js, embedded_nostr_bundle_js_size, "application/javascript; charset=utf-8");
+    }
+    else if (strcmp(normalized_path, "/api/text_graph.js") == 0) {
+        serve_embedded_file(embedded_text_graph_js, embedded_text_graph_js_size, "application/javascript; charset=utf-8");
+    }
+    else {
+        // 404 Not Found
+        printf("Status: 404 Not Found\r\n");
+        printf("Content-Type: text/html; charset=utf-8\r\n");
+        printf("\r\n");
+        printf("<html><body><h1>404 Not Found</h1><p>File not found: %s</p></body></html>\n", normalized_path);
+    }
+}
--- a/src/admin_interface_embedded.h
+++ b/src/admin_interface_embedded.h
--- a/src/ginxsom.h
+++ b/src/ginxsom.h
@@ -10,8 +10,8 @@
 // Version information (auto-updated by build system)
 #define VERSION_MAJOR 0
 #define VERSION_MINOR 1
-#define VERSION_PATCH 14
-#define VERSION "v0.1.14"
+#define VERSION_PATCH 15
+#define VERSION "v0.1.15"

 #include <stddef.h>
 #include <stdint.h>
@@ -272,9 +272,12 @@ int validate_sha256_format(const char* sha256);
 // Admin API request handler
 void handle_admin_api_request(const char* method, const char* uri, const char* validated_pubkey, int is_authenticated);

-// Admin event handler (Kind 23456/23457)
+// Admin event handler (Kind 23458/23459)
 void handle_admin_event_request(void);

+// Admin interface handler (serves embedded web UI)
+void handle_admin_interface_request(const char* path);
+
 // Individual endpoint handlers
 void handle_stats_api(void);
 void handle_config_get_api(void);
--- a/src/main.c
+++ b/src/main.c
@@ -2314,13 +2314,14 @@ if (!config_loaded /* && !initialize_server_config() */) {

    // Special case: Root endpoint is public and doesn't require authentication
    if (strcmp(request_method, "GET") == 0 && strcmp(request_uri, "/") == 0) {
-      // Handle GET / requests - Server info endpoint
+      // Handle GET / requests - Server info endpoint (NIP-11)
      printf("Status: 200 OK\r\n");
-      printf("Content-Type: application/json\r\n\r\n");
+      printf("Content-Type: application/nostr+json\r\n\r\n");
      printf("{\n");
      printf("  \"server\": \"ginxsom\",\n");
      printf("  \"version\": \"%s\",\n", VERSION);
      printf("  \"description\": \"Ginxsom Blossom Server\",\n");
+      printf("  \"pubkey\": \"%s\",\n", g_blossom_pubkey);
      printf("  \"endpoints\": {\n");
      printf("    \"blob_get\": \"GET /<sha256>\",\n");
      printf("    \"blob_head\": \"HEAD /<sha256>\",\n");
@@ -2382,12 +2383,28 @@ if (!config_loaded /* && !initialize_server_config() */) {
      operation = "mirror";
    } else if (strcmp(request_method, "PUT") == 0 && strcmp(request_uri, "/report") == 0) {
      operation = "report";
+    } else if (strncmp(request_uri, "/admin", 6) == 0) {
+      operation = "admin_interface";  // Public static files - no auth required
    } else if (strncmp(request_uri, "/api/", 5) == 0) {
-      operation = "admin";
-      // Special case: POST /api/admin uses Kind 23456 events for authentication
-      // Skip centralized validation for these requests
-      if (strcmp(request_method, "POST") == 0 && strcmp(request_uri, "/api/admin") == 0) {
-        operation = "admin_event";  // Mark as special case
+      // Check if this is a static file request or API request
+      const char *path = request_uri + 5; // Skip "/api/"
+      int is_static_file = 0;
+      
+      // Check for static file extensions or root /api path
+      if (strstr(path, ".html") || strstr(path, ".css") || strstr(path, ".js") ||
+          strlen(path) == 0 || strcmp(path, "/") == 0) {
+        is_static_file = 1;
+      }
+      
+      if (is_static_file) {
+        operation = "admin_interface";  // Public static files - no auth required
+      } else {
+        operation = "admin";
+        // Special case: POST /api/admin uses Kind 23458 events for authentication
+        // Skip centralized validation for these requests
+        if (strcmp(request_method, "POST") == 0 && strcmp(request_uri, "/api/admin") == 0) {
+          operation = "admin_event";  // Mark as special case
+        }
      }
    } else if (strcmp(request_method, "GET") == 0 && strncmp(request_uri, "/list/", 6) == 0) {
      operation = "list";
@@ -2424,6 +2441,8 @@ if (!config_loaded /* && !initialize_server_config() */) {
      // Special case: challenge generation failure should be handled by the endpoint
      if (strcmp(operation, "challenge") == 0) {
        // Let the /auth endpoint handle this - it will generate its own error response
+      } else if (strcmp(operation, "admin_interface") == 0) {
+        // Admin interface serves public static files - no auth required
      } else if (strcmp(operation, "head") == 0 || strcmp(operation, "head_upload") == 0) {
        // HEAD requests might not require auth depending on config - let handler decide
      } else if (strcmp(operation, "list") == 0) {
@@ -2431,7 +2450,7 @@ if (!config_loaded /* && !initialize_server_config() */) {
      } else if (strcmp(operation, "admin") == 0 && strcmp(request_uri, "/api/health") == 0) {
        // Health endpoint is public and doesn't require authentication - let handler decide
      } else if (strcmp(operation, "admin_event") == 0) {
-        // POST /api/admin uses Kind 23456 events - authentication handled by admin_event.c
+        // POST /api/admin uses Kind 23458 events - authentication handled by admin_event.c
        // Skip centralized validation and let the handler validate the event
      } else {
        // For other operations, validation failure means auth failure
@@ -2528,10 +2547,34 @@ if (!config_loaded /* && !initialize_server_config() */) {



+    } else if (strcmp(request_method, "POST") == 0 &&
+               strcmp(request_uri, "/api/admin") == 0) {
+      // Handle POST /api/admin requests (Kind 23458 admin events)
+      handle_admin_event_request();
+
+    } else if (strncmp(request_uri, "/admin", 6) == 0) {
+      // Handle admin web interface requests (embedded files)
+      handle_admin_interface_request(request_uri);
+
    } else if (strncmp(request_uri, "/api/", 5) == 0) {
-      // Handle admin API requests with pre-validated auth
-      const char *validated_pubkey = (result.valid && strlen(result.pubkey) == 64) ? result.pubkey : NULL;
-      handle_admin_api_request(request_method, request_uri, validated_pubkey, result.valid);
+      // Check if this is a static file request (no auth required) or API request (auth required)
+      const char *path = request_uri + 5; // Skip "/api/"
+      int is_static_file = 0;
+      
+      // Check for static file extensions
+      if (strstr(path, ".html") || strstr(path, ".css") || strstr(path, ".js") ||
+          strcmp(request_uri, "/api") == 0 || strcmp(request_uri, "/api/") == 0) {
+        is_static_file = 1;
+      }
+      
+      if (is_static_file) {
+        // Serve static files without authentication
+        handle_admin_interface_request(request_uri);
+      } else {
+        // Handle admin API requests with pre-validated auth
+        const char *validated_pubkey = (result.valid && strlen(result.pubkey) == 64) ? result.pubkey : NULL;
+        handle_admin_api_request(request_method, request_uri, validated_pubkey, result.valid);
+      }

      
    } else if (strcmp(request_method, "GET") == 0 &&
@@ -2562,13 +2605,14 @@ if (!config_loaded /* && !initialize_server_config() */) {
      }
    } else if (strcmp(request_method, "GET") == 0 &&
               strcmp(request_uri, "/") == 0) {
-      // Handle GET / requests - Server info endpoint
+      // Handle GET / requests - Server info endpoint (NIP-11)
      printf("Status: 200 OK\r\n");
-      printf("Content-Type: application/json\r\n\r\n");
+      printf("Content-Type: application/nostr+json\r\n\r\n");
      printf("{\n");
      printf("  \"server\": \"ginxsom\",\n");
      printf("  \"version\": \"%s\",\n", VERSION);
      printf("  \"description\": \"Ginxsom Blossom Server\",\n");
+      printf("  \"pubkey\": \"%s\",\n", g_blossom_pubkey);
      printf("  \"endpoints\": {\n");
      printf("    \"blob_get\": \"GET /<sha256>\",\n");
      printf("    \"blob_head\": \"HEAD /<sha256>\",\n");
--- a/tests/admin_event_test.sh
+++ b/tests/admin_event_test.sh
@@ -1,7 +1,7 @@
 #!/bin/bash

 # Ginxsom Admin Event Test Script
-# Tests Kind 23456/23457 admin command system with NIP-44 encryption
+# Tests Kind 23458/23459 admin command system with NIP-44 encryption
 #
 # Prerequisites:
 # - nak: https://github.com/fiatjaf/nak
@@ -72,12 +72,12 @@ check_dependencies() {
    log_success "All dependencies found"
 }

-# Create NIP-44 encrypted admin command event (Kind 23456)
+# Create NIP-44 encrypted admin command event (Kind 23458)
 create_admin_command_event() {
    local command="$1"
    local expiration=$(($(date +%s) + 3600))  # 1 hour from now
    
-    log_info "Creating Kind 23456 admin command event..."
+    log_info "Creating Kind 23458 admin command event..."
    log_info "Command: $command"
    
    # For now, we'll create the event structure manually since nak may not support NIP-44 encryption yet
@@ -87,9 +87,9 @@ create_admin_command_event() {
    local content="[\"$command\"]"
    
    # Create event with nak
-    # Kind 23456 = admin command
+    # Kind 23458 = admin command
    # Tags: p = server pubkey, expiration
-    local event=$(nak event -k 23456 \
+    local event=$(nak event -k 23458 \
        -c "$content" \
        --tag p="$SERVER_PUBKEY" \
        --tag expiration="$expiration" \
@@ -104,7 +104,7 @@ send_admin_command() {
    
    log_info "=== Testing Admin Command: $command ==="
    
-    # Create Kind 23456 event
+    # Create Kind 23458 event
    local event=$(create_admin_command_event "$command")
    
    if [[ -z "$event" ]]; then
@@ -132,10 +132,10 @@ send_admin_command() {
        log_success "HTTP $http_code - Response received"
        echo "$body" | jq . 2>/dev/null || echo "$body"
        
-        # Try to parse as Kind 23457 event
+        # Try to parse as Kind 23459 event
        local kind=$(echo "$body" | jq -r '.kind // empty' 2>/dev/null)
-        if [[ "$kind" == "23457" ]]; then
-            log_success "Received Kind 23457 response event"
+        if [[ "$kind" == "23459" ]]; then
+            log_success "Received Kind 23459 response event"
            local response_content=$(echo "$body" | jq -r '.content // empty' 2>/dev/null)
            log_info "Response content (encrypted): $response_content"
            # TODO: Decrypt NIP-44 content to see actual response
@@ -174,7 +174,7 @@ test_server_health() {

 main() {
    echo "=== Ginxsom Admin Event Test Suite ==="
-    echo "Testing Kind 23456/23457 admin command system"
+    echo "Testing Kind 23458/23459 admin command system"
    echo ""
    
    log_info "Test Configuration:"