release: v1.6.3 — country flags that appear, and render

Two faults, one visible symptom: no flags on nodes.

Enrichment was called at the two import paths while nodes are created in
nine, so a node from a server deploy never got one. That is fixed at the
model, where every path passes by construction.

And Windows ships no flag glyphs, so the emoji drew as the bare letters
"CH" pressed against the node's name. Detecting the platform and rendering
something different on each is the wrong shape of fix — PiTun now carries
the glyphs: Twemoji Country Flags, self-hosted, flags only, 78 KB, so a
flag looks the same on every machine that opens the panel. The country is
lifted into its own badge as well, since even a correct flag glued to the
name still reads as part of it.

Twemoji artwork is CC-BY 4.0 and the font build is MIT; both are credited
in the README and the licence travels next to the file.

Author: DaveBugg

CHANGELOG.md

@@ -4,6 +4,32 @@ All notable user-facing changes to PiTun. Full per-release detail lives in the
 [GitHub Releases](https://github.com/DaveBugg/PiTun/releases); this file is the
 committed summary.
 
+## v1.6.3 — 2026-08-14
+
+**Country flags on nodes actually appear now** — and look the same on every
+platform.
+
+### Fixed
+
+- **Flags reached two of the nine ways a node is created.** The GeoLite2
+  lookup was never broken; enrichment was simply called at the two import
+  paths while nodes are created in nine places, so a node from a server
+  deploy or an x-ui panel never got one, and existing nodes were never
+  revisited. It is now applied at the model — every path goes through that by
+  construction, including the tenth one somebody adds later. DNS is skipped
+  there deliberately, since it runs inside the database write; the import
+  paths still resolve hostnames as before.
+
+  For nodes that predate all this: `POST /api/nodes/apply-country-flags`,
+  which does resolve, and is idempotent.
+
+- **Windows drew the flags as bare letters.** It ships no flag glyphs, so
+  `🇨🇭 vless-…` rendered as `CH vless-…`, flush against the name. PiTun now
+  carries the glyphs itself — [Twemoji Country Flags](https://github.com/talkjs/country-flag-emoji-polyfill),
+  self-hosted, flags only, 78 KB — so a flag looks the same everywhere. The
+  country is also lifted out of the name into its own badge, rather than
+  reading as the first word of it.
+
 ## v1.6.2 — 2026-08-14
 
 **The Update button in the panel now works.** It never could.

README.md

@@ -1328,6 +1328,11 @@ projects. Without them, none of this would exist:
 - **[React Router](https://reactrouter.com/)** — routing
 - **[Recharts](https://recharts.org/)** — metrics charts
 - **[Lucide](https://lucide.dev/)** — icons
+- **[Twemoji](https://github.com/jdecked/twemoji)** — the flag artwork
+  (CC-BY 4.0), carried as the **[Twemoji Country Flags](https://github.com/talkjs/country-flag-emoji-polyfill)**
+  webfont built by TalkJS (MIT). Self-hosted, flags only, 78 KB: Windows
+  ships no flag glyphs at all, so without it a node named `🇨🇭 vless-…`
+  renders as the bare letters `CH vless-…`
 - **[axios](https://github.com/axios/axios)** — HTTP client
 - **[Vitest](https://vitest.dev/)** + **[Testing Library](https://testing-library.com/)** — tests
 

README.ru.md

@@ -1009,6 +1009,10 @@ PiTun — это glue-код поверх зрелых проектов, без
 - **[React Router](https://reactrouter.com/)** — роутинг
 - **[Recharts](https://recharts.org/)** — графики метрик
 - **[Lucide](https://lucide.dev/)** — иконки
+- **[Twemoji](https://github.com/jdecked/twemoji)** — рисунки флагов
+  (CC-BY 4.0) в виде вебшрифта **[Twemoji Country Flags](https://github.com/talkjs/country-flag-emoji-polyfill)**
+  сборки TalkJS (MIT). Лежит у нас, только флаги, 78 КБ: в Windows глифов
+  флагов нет вовсе, и без него нода `🇨🇭 vless-…` выглядит как `CH vless-…`
 - **[axios](https://github.com/axios/axios)** — HTTP-клиент
 - **[Vitest](https://vitest.dev/)** + **[Testing Library](https://testing-library.com/)** — тесты
 

backend/app/config.py

@@ -5,7 +5,7 @@
 # OpenAPI metadata, `/health` response, and `/system/status` so the
 # frontend can display it next to the xray version. Bump this on each
 # release — frontend keeps its own version in `frontend/package.json`.
-APP_VERSION = "1.6.2"
+APP_VERSION = "1.6.3"
 
 
 class Settings(BaseSettings):

frontend/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pitun-frontend",
   "private": true,
-  "version": "1.6.2",
+  "version": "1.6.3",
   "license": "BSD-3-Clause",
   "type": "module",
   "scripts": {

frontend/src/assets/fonts/TwemojiCountryFlags.LICENSE.md

@@ -0,0 +1,54 @@
+## License for the Code (MIT)
+
+Copyright (c) 2022 TalkJS
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+## License for the Visual Design
+
+The Emoji art in the "Twemoji Country Flags" font comes from [Twemoji](https://twitter.github.io/twemoji),
+and is used and redistributed under the CC-BY-4.0 [license terms](https://github.com/twitter/twemoji#license)
+offered by the Twemoji project.
+
+### Creative Commons Attribution 4.0 International (CC BY 4.0)
+https://creativecommons.org/licenses/by/4.0/legalcode
+or for the human readable summary: https://creativecommons.org/licenses/by/4.0/
+
+
+#### You are free to:
+**Share** — copy and redistribute the material in any medium or format
+
+**Adapt** — remix, transform, and build upon the material for any purpose, even commercially.
+
+The licensor cannot revoke these freedoms as long as you follow the license terms.
+
+
+#### Under the following terms:    
+**Attribution** — You must give appropriate credit, provide a link to the license,
+and indicate if changes were made.
+You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
+
+**No additional restrictions** — You may not apply legal terms or **technological measures**
+that legally restrict others from doing anything the license permits.
+
+#### Notices:
+You do not have to comply with the license for elements of the material in the public domain
+or where your use is permitted by an applicable exception or limitation. No warranties are given.
+The license may not give you all of the permissions necessary for your intended use.
+For example, other rights such as publicity, privacy, or moral rights may limit how you use the material.

frontend/src/assets/fonts/TwemojiCountryFlags.woff2

@@ -5,6 +5,7 @@ import { clsx } from 'clsx'
 import type { Node } from '@/types'
 import { StatusBadge } from './StatusBadge'
 import { useServers } from '@/hooks/useServers'
+import { splitCountryPrefix } from '@/lib/countryPrefix'
 
 // Readings older than this render in a warning colour — the speed is
 // probably stale and worth re-testing.
@@ -84,6 +85,9 @@ export function NodeCard({
   // peers exported via PiTun). Imported nodes / hand-typed nodes don't
   // get this label.
   const isFromServerClient = !!(node.from_deployment_client_id && sourceServer)
+  // The country prefix is part of the stored name; shown as its own badge so
+  // it reads as a label rather than as the first word of the node's name.
+  const country = splitCountryPrefix(node.name)
   return (
     <div
       className={clsx(
@@ -111,7 +115,15 @@ export function NodeCard({
           <div className="min-w-0">
             <div className="flex items-center gap-2 flex-wrap">
               <span className="text-xs text-gray-500 font-mono shrink-0">#{node.id}</span>
-              <span className="text-sm font-medium text-gray-100 truncate">{node.name}</span>
+              {country.code && (
+                <span
+                  className="shrink-0 rounded-sm border border-gray-700 bg-gray-800/60 px-1.5 py-0.5 text-[10px] font-medium tracking-wide text-gray-300"
+                  title={country.code}
+                >
+                  {country.flag}<span className="ml-0.5">{country.code}</span>
+                </span>
+              )}
+              <span className="text-sm font-medium text-gray-100 truncate">{country.name}</span>
               {isActive && (
                 <span className="rounded-full bg-brand-50 dark:bg-brand-600/20 px-2 py-0.5 text-xs text-brand-400">
                   Active

frontend/src/components/NodeCard.tsx

@@ -35,8 +35,31 @@
   --color-gray-900: rgb(var(--ch-gray-900));
   --color-gray-950: rgb(var(--ch-gray-950));
 
-  --font-sans: Inter, system-ui, sans-serif;
-  --font-mono: JetBrains Mono, Fira Code, monospace;
+  /* The flag font goes FIRST and carries nothing but flags, so every other
+     character falls straight through to Inter. See the @font-face below. */
+  --font-sans: "Twemoji Country Flags", Inter, system-ui, sans-serif;
+  --font-mono: "Twemoji Country Flags", JetBrains Mono, Fira Code, monospace;
+}
+
+/*
+  Country flags, self-hosted.
+
+  Windows ships no flag glyphs at all: Chrome there draws a regional-indicator
+  pair as the bare letters — a node named "🇨🇭 vless-…" reads as "CH vless-…".
+  Rather than detect the platform and render something different on each, we
+  carry the glyphs ourselves, so a flag looks the same everywhere.
+
+  Twemoji Country Flags — 78 KB, flags only, no other emoji. Art from Twemoji
+  (twitter.github.io/twemoji), CC-BY 4.0; the font is built and distributed by
+  TalkJS under MIT. Licence text sits next to the file.
+*/
+@font-face {
+  font-family: "Twemoji Country Flags";
+  src: url("./assets/fonts/TwemojiCountryFlags.woff2") format("woff2");
+  /* The glyphs are needed as soon as a node list renders, and swapping them
+     in late would shift the row; 78 KB local is not worth a flash. */
+  font-display: block;
+  unicode-range: U+1F1E6-1F1FF;
 }
 
 /*

frontend/src/index.css

@@ -0,0 +1,48 @@
+/**
+ * The backend stores the country as a flag emoji at the front of the node's
+ * name. Windows has no flag glyphs, so Chrome there draws the pair as bare
+ * letters flush against the name — `CH vless-reality-…` reads as one string.
+ * The prefix is split out and shown as its own badge; the font we now carry
+ * makes the glyph itself render the same everywhere.
+ */
+import { describe, it, expect } from 'vitest'
+
+import { splitCountryPrefix } from '@/lib/countryPrefix'
+
+describe('splitCountryPrefix', () => {
+  it('separates the flag from the name', () => {
+    const r = splitCountryPrefix('🇨🇭 vless-reality-vision-pi-3b574eee')
+    expect(r.code).toBe('CH')
+    expect(r.flag).toBe('🇨🇭')
+    expect(r.name).toBe('vless-reality-vision-pi-3b574eee')
+  })
+
+  it('leaves a name without a flag entirely alone', () => {
+    const r = splitCountryPrefix('vless-reality-vision-pi')
+    expect(r).toEqual({ code: '', flag: '', name: 'vless-reality-vision-pi' })
+  })
+
+  it('does not mistake ordinary leading letters for a flag', () => {
+    // "CH node" is two ASCII letters, not regional indicators — a node
+    // legitimately named that must not lose them.
+    const r = splitCountryPrefix('CH node')
+    expect(r.code).toBe('')
+    expect(r.name).toBe('CH node')
+  })
+
+  it('tolerates a missing separator rather than eating a character', () => {
+    const r = splitCountryPrefix('🇳🇱node')
+    expect(r.code).toBe('NL')
+    expect(r.name).toBe('node')
+  })
+
+  it('handles an empty name', () => {
+    expect(splitCountryPrefix('').name).toBe('')
+  })
+
+  it('keeps non-ASCII names intact', () => {
+    const r = splitCountryPrefix('🇩🇪 узел-берлин')
+    expect(r.code).toBe('DE')
+    expect(r.name).toBe('узел-берлин')
+  })
+})