[iitzSeriZdev]

Row-Template 1.4.0, for review. Do not merge before approval; no tag and no release are created by this PR.

What's in it

Every country's flag, on every platform. The page now carries Twemoji's flags as a small colour font (COLR v0, subset to the regional-indicator range, 64 units per em: 51,560 B woff2) and uses it for the flag badge only. All 258 flags draw the same on Windows, Android, iOS, macOS and Linux — including Chromium on Windows, which has no flag glyphs and used to print TR, SG, … for all but six countries. Flag emoji and ISO codes alike; UK → 🇬🇧; XK recognised. The font is placed after the page markup (not in <head>), so first paint does not wait for it. Reproducible build: tools/subset-flag-font.sh; licence: src/fonts/TWEMOJI-LICENSE.txt (CC-BY 4.0).

PasarGuard: the operator's own applications. When Settings → Subscription → Applications has entries, the Connect card shows those instead of the built-in list: a tab per platform the list covers (Android, iOS, Windows, macOS, Linux, Android TV, Apple TV), recommended app first, the operator's description in the reader's language, a download link, Import with the link PasarGuard built (a bare /sub/… path is completed with the page origin at click), and Copy. Icons are never loaded. Import links with javascript:/data:/file:/… schemes are refused; download links must be http(s).

PasarGuard: the announcement's link (announce_url) is shown under the announcement as Open link (http/https only).

Live figures on PasarGuard and Rebecca. The page polls /<token>/info and translates each panel's own format (Rebecca nests under user and uses zoneless UTC timestamps). Anything unrecognised stops polling and keeps the rendered figures.

The panel's own name and support link, offered at install (PasarGuard and Rebecca, SQLite, read-only): Use them for this page? [Y/n] on a fresh interactive install, RT_PANEL_BRANDING=1|0 for scripts, manager item Reconfigure → 7 for existing installs. Panel defaults (Subscription, bare https://t.me/) and PasarGuard titles with {PLACEHOLDERS} are never offered; every value passes the usual validators.

Fixes: a panel's default https://t.me/ support link no longer overrides the operator's link (Rebecca default install); rolling back to a backup taken by a pre-1.4.0 updater restores the design selected in that backup's saved config.env instead of Row (only TEMPLATE is read, as data; branding is never restored).

Changed: +81,052 B per design (68,748 B of it the font; largest design 285,757 B); size budget WARN 272 KiB / FAIL 280 KiB (was 185/200). Tab strips wrap with >4 platforms. Rebecca's Docker refusal now points to rebecca-binary.sh only (the previously mentioned rebecca migrate-binary is not routed by Rebecca's current rebecca command).

Deferred (documented as known limitations): PasarGuard app icons, Rebecca VPN profiles, PasarGuard page title / Clash templates, MySQL/MariaDB branding read.

Commits

• 55340ee 1.4.0: every country's flag, the panel's own apps, live refresh on PasarGuard and Rebecca, panel branding
• df5d24d 1.4.0: changelog, READMEs, documentation; Rebecca's refusal names its binary installer
• 372928e Rollback: a backup that names no design takes the selection its config.env saved
• 7000c62 PasarGuard: complete a bare subscription path in an import link with the page origin
• e8b0342 CHANGELOG: final 1.4.0 sizes; the import-link completion
• 8faf6a3 Rollback: read the saved selection through rt_backup_saved_template
• 52d8529 docs: refresh the template previews for the 1.4.0 flag font
• 48979e8 tests: give each test process its own sqlite-free PATH mirror — fixes a harness race GitHub's first run hit (the shared /usr/bin mirror was deleted by whichever suite finished first: 12 × spawnSync bash ENOENT); reproduced on Linux with sqlite3 present and 4 CPUs (823/835), 835/835 twice after the fix

Verification

Suite	Result
Linux CI (clean clone, WSL Ubuntu) on 8faf6a3: npm test	835 / 835 pass
Linux, sqlite3 present, 4 CPUs (as GitHub's runner), with 48979e8: npm test ×2	835 / 835 both runs
Windows (Git Bash) npm test on 52d8529	828 pass, 0 fail, 7 skipped (symlink/systemd cases that need Linux)
npm run verify · npm run lint:sh (shellcheck)	all checks passed · 13 scripts clean
npm run build:panels	51 shells (17 designs × 3 panels)
Release packaging, built twice	byte-identical (a0d8c0de…613b), tracked tree clean
Release preflight (checksums, two identical builds, 17 designs × 3 panels, flag face in every page, published v1.3.1 downloads)	10 / 10
Real 3X-UI 3.8.5: update from the published 1.3.1, rollback to its backup and forward again, all 17 designs served, RT_PANEL_BRANDING=1 a no-op, uninstall; then a fresh 1.4.0 install + uninstall	43 / 43
Real PasarGuard 5.4.1 (Docker): update from 1.3.1, the operator's apps + announcement link on the page, rollback and forward, the panel's name/link taken (settings only read), all 17 designs	40 / 40
Real Rebecca 1.x (binary): PasarGuard uninstall left no .env block; update from 1.3.1, the default t.me fix, rollback and forward, the panel's name/link, defaults never taken, all 17 designs	39 / 39
Interactive installer over a real pty on Rebecca (the [Y/n] offer, yes and no paths, uninstall restores the settings row byte-for-byte)	11 / 11
Final flags check and cleanup (no Row-Template left installed)	3 / 3
Real-browser, real panels (Chromium, WebKit, Firefox)	PasarGuard 34/34 · Rebecca 21/21 · 3X-UI 18/18
Fixture E2E: 8 designs × (PasarGuard, PasarGuard without apps, Rebecca) × 3 engines	911 / 911
Performance (Chromium, 4× CPU, median of 9, 1.3.1 → 1.4.0)	FCP on 3G: row 564→588 ms, meter 1020→608 ms; DCL +~0.4 s on 3G, +~0.1 s on 4G; script time unchanged

All test machines were returned to their original state afterwards (no Row-Template left installed; panel settings restored).

Documentation for this release: iitzSeriZdev/Web-Row-Template (branch docs/row-template-1.4.0) — to be merged only when 1.4.0 is released, since merging it deploys the site.

🤖 Generated with Claude Code