# Clash Party YAML 覆写 · 港澳 · 单地区／少量节点
# 用法：初始化客户端仅开启 TUN，导入订阅，添加并绑定本文件。
# 节点来自订阅；本文件不能作为独立订阅。一个订阅只绑定本项目的一份 YAML。
# 默认直连；指定 AI 与流媒体走代理，AI 备选默认 DIRECT。
# 源码合并、设备验收边界见 docs/validation-2026-09-25.md。

# 01 · 基础行为与选择记忆
# 顶层 ipv6 跟随应用 IPv6 开关；无论开关状态如何，规则层的 ::/0 REJECT 兜底阻止 IPv6 抢占分流。
mode: rule
ipv6: false
unified-delay: true
tcp-concurrent: true
profile:
  store-selected: true
  store-fake-ip: true

# 02 · 自包含 DNS：整对象替换订阅 DNS
# 应用“DNS 覆写”默认开启时，应用替换默认解析池并置 respect-rules=false，规则分流与 fake-ip 不受影响；
# 关闭时本对象完整生效，AI 域名 DNS 额外随代理出口。两种状态均稳定可用，稳定优先、泄露防护其次。
# 引导解析、节点解析、业务解析分开；respect-rules 按 DNS 连接自身的目标分流。
# fake-ip 只保留兼容排除，不使用全匹配 *；监听仅开放给本机。
# 港澳默认公共 DoH 随 AI 出口，节点解析独立；国内策略仍用国内 DoH；不配置 direct-nameserver。
dns!:
  enable: true
  cache-algorithm: arc
  listen: 127.0.0.1:1053
  ipv6: false
  prefer-h3: false
  use-hosts: true
  use-system-hosts: true
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter-mode: blacklist
  fake-ip-filter:
    - geosite:private
    - geosite:cn
    - geosite:apple-cn
    - geosite:microsoft@cn
    - geosite:steam@cn
    - geosite:category-games@cn
    - +.lan
    - +.local
    - +.localhost
    - localhost.ptlogin2.qq.com
    - dns.msftncsi.com
    - www.msftconnecttest.com
    - "*.msftconnecttest.com"
    - "*.msftncsi.com"
    - +.market.xiaomi.com
    - +.push.apple.com
    - time.*.com
    - time.*.gov
    - time.*.edu.cn
    - time.*.apple.com
    - time1.*.com
    - time2.*.com
    - time3.*.com
    - time4.*.com
    - time5.*.com
    - time6.*.com
    - time7.*.com
    - "*.ntp.org.cn"
    - "*.pool.ntp.org"
  default-nameserver:
    - 223.5.5.5
    - 119.29.29.29
    - 1.1.1.1
    - 8.8.8.8
  nameserver:
    - "https://1.1.1.1/dns-query#🤖 AI 解锁"
    - "https://8.8.8.8/dns-query#🤖 AI 解锁"
  proxy-server-nameserver:
    - https://1.1.1.1/dns-query
    - https://8.8.8.8/dns-query
  nameserver-policy:
    geosite:private,cn,apple-cn,microsoft@cn,steam@cn,category-games@cn:
      - https://doh.pub/dns-query
      - https://dns.alidns.com/dns-query
    rule-set:domestic_sensitive,domestic_ai_domain,tencent_services,tencent_games_static:
      - https://doh.pub/dns-query
      - https://dns.alidns.com/dns-query
    stun.l.google.com:
      - "https://1.1.1.1/dns-query#🤖 AI 解锁"
      - "https://8.8.8.8/dns-query#🤖 AI 解锁"
    stun1.l.google.com:
      - "https://1.1.1.1/dns-query#🤖 AI 解锁"
      - "https://8.8.8.8/dns-query#🤖 AI 解锁"
    stun.cloudflare.com:
      - "https://1.1.1.1/dns-query#🤖 AI 解锁"
      - "https://8.8.8.8/dns-query#🤖 AI 解锁"
    rule-set:openai_domain,anthropic_domain,google_ai_dev,hulu_domain,streaming_special,custom_proxy_domain,overseas_ai_extra:
      - "https://1.1.1.1/dns-query#🤖 AI 解锁"
      - "https://8.8.8.8/dns-query#🤖 AI 解锁"
  respect-rules: true

# 03 · TUN：兼容应用初始化设置
# 应用在覆写后合并，最终协议栈、路由和 DNS 劫持以初始化值为准。
# 不写机器网卡或设备编号；字段存在不等于已完成系统流量接管验收。
tun!:
  enable: true
  stack: mixed
  auto-route: true
  auto-detect-interface: true
  dns-hijack:
    - any:53
    - tcp://any:53
  strict-route: true

# 04 · 域名嗅探：保留 HTTP / TLS / QUIC 与兼容排除
# 2.0.3 默认开启嗅探覆写，会覆盖部分端口、HTTP 目的地行为和 skip-domain。
# Mijia Cloud 保留在源文件中，但该版本合成后仅保留 Apple 推送排除，见验证记录。
sniffer!:
  enable: true
  force-dns-mapping: true
  parse-pure-ip: true
  sniff:
    HTTP:
      ports:
        - 80
        - 8080-8880
      override-destination: true
    TLS:
      ports:
        - 443
        - 8443
    QUIC:
      ports:
        - 443
        - 8443
  skip-domain:
    - Mijia Cloud
    - +.push.apple.com

# 05 · Geo 数据
# 保留既有源和更新意图；实际 geox-url/更新开关仍受应用默认值覆盖。
geodata-mode: true
geox-url!:
  geoip: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.dat
  geosite: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geosite.dat
  mmdb: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/country.mmdb
  asn: https://github.com/xishang0128/geoip/releases/download/latest/GeoLite2-ASN.mmdb
geo-auto-update: true
geo-update-interval: 24

# 06 · 策略组与自动回退
# AI fallback 只纳入实际候选，按家宽（港澳多地区按美国）优先，再纳入全部代理。
# 单个反引号分隔筛选优先级；空偏好不插入 REJECT，不依赖空子组的健康状态。
# 排序锚点是被信息节点过滤器排除的 REJECT 占位，不提供连接、不修改订阅节点。
# 它使 1.19.31 对直接节点、provider 及混合布局统一执行跨集合排序和去重。
# 家宽/地区手动入口仍保留；测速只判断连通，不认证 IP 属性或平台解锁。
proxy-providers:
  __override_sort_anchor:
    type: inline
    payload:
      - name: 订阅排序占位（REJECT）
        type: reject
proxy-groups:
  - name: 🚀 节点选择
    type: select
    include-all: true
    exclude-filter: (?i)官网|流量|剩余|到期|套餐|订阅|expire|traffic
    empty-fallback: REJECT
    proxies:
      - 🛟 通用自动回退
  - name: 🛟 通用自动回退
    type: fallback
    include-all: true
    exclude-filter: (?i)官网|流量|剩余|到期|套餐|订阅|expire|traffic
    empty-fallback: REJECT
    url: http://www.gstatic.com/generate_204
    interval: 300
    timeout: 5000
    lazy: false
  - name: 🏠 家宽
    type: select
    include-all: true
    filter: (?i)(家宽|家寬|原生|静态|靜態|(^|[^a-z])(Home|Residential|ISP|Static)([^a-z]|$))
    exclude-filter: (?i)官网|流量|剩余|到期|套餐|订阅|expire|traffic
    empty-fallback: REJECT
  - name: 🛟 AI 自动回退
    type: fallback
    empty-fallback: REJECT
    url: http://www.gstatic.com/generate_204
    interval: 300
    timeout: 5000
    lazy: false
    include-all: true
    filter: (?i)(家宽|家寬|原生|静态|靜態|(^|[^a-z])(Home|Residential|ISP|Static)([^a-z]|$))`.*
    exclude-filter: (?i)官网|流量|剩余|到期|套餐|订阅|expire|traffic
  - name: 🤖 AI 解锁
    type: select
    proxies:
      - 🛟 AI 自动回退
      - 🏠 家宽
      - 🚀 节点选择
  - name: 🧪 AI 备选
    type: select
    proxies:
      - DIRECT
      - 🏠 家宽
      - 🚀 节点选择
  - name: 🎬 流媒体解锁
    type: select
    proxies:
      - 🚀 节点选择
      - DIRECT
  - name: 🛑 广告拦截
    type: select
    proxies:
      - REJECT
      - DIRECT
  - name: 🎯 全球直连
    type: select
    proxies:
      - DIRECT
      - 🚀 节点选择

# 07 · 规则集：远程格式、缓存路径和内联覆盖保持基线
rule-providers!:
  private_domain:
    type: http
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/override/private_domain.mrs
    url: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/private.mrs

  private_ip:
    type: http
    behavior: ipcidr
    format: mrs
    interval: 86400
    path: ./ruleset/override/private_ip.mrs
    url: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geoip/private.mrs

  # 支付、银行、政务：在广告之前保护。
  domestic_sensitive:
    type: inline
    behavior: classical
    payload:
      - DOMAIN-SUFFIX,gov.cn
      - DOMAIN-SUFFIX,12306.cn
      - DOMAIN-SUFFIX,12333.gov.cn
      - DOMAIN-SUFFIX,chinatax.gov.cn
      - DOMAIN-SUFFIX,nhsa.gov.cn
      - DOMAIN-SUFFIX,mohrss.gov.cn
      - DOMAIN-SUFFIX,mps.gov.cn
      - DOMAIN-SUFFIX,miit.gov.cn
      - DOMAIN-SUFFIX,samr.gov.cn
      - DOMAIN-SUFFIX,nmpa.gov.cn
      - DOMAIN-SUFFIX,customs.gov.cn
      - DOMAIN-SUFFIX,pbc.gov.cn
      - DOMAIN-SUFFIX,safe.gov.cn
      - DOMAIN-SUFFIX,gjj.gov.cn
      - DOMAIN-SUFFIX,creditchina.gov.cn
      - DOMAIN-SUFFIX,alipay.com
      - DOMAIN-SUFFIX,alipayobjects.com
      - DOMAIN-SUFFIX,tenpay.com
      - DOMAIN-SUFFIX,wechatpay.cn
      - DOMAIN-SUFFIX,wechatpay.com.cn
      - DOMAIN-SUFFIX,unionpay.com
      - DOMAIN-SUFFIX,unionpayintl.com
      - DOMAIN-SUFFIX,95516.com
      - DOMAIN-SUFFIX,chinaums.com
      - DOMAIN-SUFFIX,lakala.com
      - DOMAIN-SUFFIX,duxiaoman.com
      - DOMAIN-SUFFIX,jdpay.com
      - DOMAIN-SUFFIX,chinapay.com
      - DOMAIN-SUFFIX,netpay.com.cn
      - DOMAIN-SUFFIX,yeepay.com
      - DOMAIN-SUFFIX,99bill.com
      - DOMAIN-SUFFIX,icbc.com.cn
      - DOMAIN-SUFFIX,abchina.com
      - DOMAIN-SUFFIX,boc.cn
      - DOMAIN-SUFFIX,bankofchina.com
      - DOMAIN-SUFFIX,ccb.com
      - DOMAIN-SUFFIX,ccb.cn
      - DOMAIN-SUFFIX,cmbchina.com
      - DOMAIN-SUFFIX,bankcomm.com
      - DOMAIN-SUFFIX,psbc.com
      - DOMAIN-SUFFIX,spdb.com.cn
      - DOMAIN-SUFFIX,cib.com.cn
      - DOMAIN-SUFFIX,citicbank.com
      - DOMAIN-SUFFIX,cebbank.com
      - DOMAIN-SUFFIX,bank.pingan.com
      - DOMAIN-SUFFIX,pingan.com
      - DOMAIN-SUFFIX,hxb.com.cn
      - DOMAIN-SUFFIX,cgbchina.com.cn
      - DOMAIN-SUFFIX,cmbc.com.cn
      - DOMAIN-SUFFIX,bob.com.cn
      - DOMAIN-SUFFIX,srcb.com
      - DOMAIN-SUFFIX,bankofbeijing.com.cn
      - DOMAIN-SUFFIX,bankofshanghai.com
      - DOMAIN-SUFFIX,nbcb.com.cn
      - DOMAIN-SUFFIX,czbank.com

  # 中国 AI：与腾讯及游戏一起优先直连。
  domestic_ai_domain:
    type: inline
    behavior: classical
    payload:
      - DOMAIN-SUFFIX,deepseek.com
      - DOMAIN-SUFFIX,deepseek.ai
      - DOMAIN-SUFFIX,moonshot.cn
      - DOMAIN-SUFFIX,kimi.moonshot.cn
      - DOMAIN-SUFFIX,qwen.ai
      - DOMAIN-SUFFIX,tongyi.aliyun.com
      - DOMAIN-SUFFIX,dashscope.aliyun.com
      - DOMAIN-SUFFIX,modelscope.cn
      - DOMAIN-SUFFIX,doubao.com
      - DOMAIN-SUFFIX,volcengine.com
      - DOMAIN-SUFFIX,coze.cn
      - DOMAIN-SUFFIX,yuanbao.tencent.com
      - DOMAIN-SUFFIX,hunyuan.tencent.com
      - DOMAIN-SUFFIX,ima.qq.com
      - DOMAIN-SUFFIX,wenxin.baidu.com
      - DOMAIN-SUFFIX,yiyan.baidu.com
      - DOMAIN-SUFFIX,zhipuai.cn
      - DOMAIN-SUFFIX,chatglm.cn
      - DOMAIN-SUFFIX,bigmodel.cn
      - DOMAIN-SUFFIX,minimax.chat
      - DOMAIN-SUFFIX,minimaxi.com
      - DOMAIN-SUFFIX,siliconflow.cn
      - DOMAIN-SUFFIX,tiangong.cn
      - DOMAIN-SUFFIX,xfyun.cn

  # 腾讯服务：保留诊断与安全域名的直连优先级。
  tencent_services:
    type: inline
    behavior: classical
    payload:
      - DOMAIN-SUFFIX,weixin.qq.com
      - DOMAIN-SUFFIX,weixin.qq.com.cn
      - DOMAIN-SUFFIX,weixinbridge.com
      - DOMAIN-SUFFIX,wx.qq.com
      - DOMAIN-SUFFIX,wxs.qq.com
      - DOMAIN-SUFFIX,wechat.com
      - DOMAIN-SUFFIX,wechatpay.cn
      - DOMAIN-SUFFIX,wechatpay.com.cn
      - DOMAIN-SUFFIX,weixin110.qq.com
      - DOMAIN-SUFFIX,ptlogin2.qq.com
      - DOMAIN-SUFFIX,ptlogin2.game.qq.com
      - DOMAIN-SUFFIX,ptlogin2.wegame.com.cn
      - DOMAIN-SUFFIX,urlsec.qq.com
      - DOMAIN-SUFFIX,captcha.gtimg.com
      - DOMAIN-SUFFIX,qqweb.qq.com
      - DOMAIN-SUFFIX,beacon.qq.com
      - DOMAIN-SUFFIX,beaconcdn.qq.com
      - DOMAIN-SUFFIX,beacon.cdn.qq.com
      - DOMAIN-SUFFIX,trace.qq.com
      - DOMAIN-SUFFIX,h.trace.qq.com
      - DOMAIN-SUFFIX,pingjs.qq.com
      - DOMAIN-SUFFIX,tdm.qq.com

  # 腾讯游戏、WeGame、反作弊和 TQOS。
  tencent_games_static:
    type: inline
    behavior: classical
    payload:
      - DOMAIN-SUFFIX,wegame.com.cn
      - DOMAIN-SUFFIX,wegame.gtimg.com
      - DOMAIN-SUFFIX,wegamex.com.hk
      - DOMAIN-SUFFIX,test.wegame.gtimg.com
      - DOMAIN-SUFFIX,game.qq.com
      - DOMAIN-SUFFIX,qqgame.qq.com
      - DOMAIN-SUFFIX,ams.game.qq.com
      - DOMAIN-SUFFIX,comm.ams.game.qq.com
      - DOMAIN-SUFFIX,dnf.qq.com
      - DOMAIN-SUFFIX,dnf.lv.game.qq.com
      - DOMAIN-SUFFIX,dnf2.game.qq.com
      - DOMAIN-SUFFIX,game.gtimg.cn
      - DOMAIN-SUFFIX,vm.gtimg.cn
      - DOMAIN-SUFFIX,ied-tqos.qq.com
      - DOMAIN-SUFFIX,ied-tqos-tgp.qq.com
      - DOMAIN-SUFFIX,tqos.anticheatexpert.com
      - DOMAIN-SUFFIX,anticheatexpert.com
      - DOMAIN-SUFFIX,gamesafe.qq.com
      - DOMAIN-SUFFIX,courtreport.gamesafe.qq.com
      - DOMAIN-SUFFIX,down.qq.com
      - DOMAIN-SUFFIX,cdn.gbot.qq.com
      - DOMAIN-SUFFIX,static.o2.qq.com
      - DOMAIN-SUFFIX,staticfile.qq.com
      - DOMAIN-SUFFIX,ossweb-img.qq.com
      - DOMAIN-SUFFIX,tplay.qq.com

  openai_domain:
    type: http
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/override/openai_domain.mrs
    url: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/openai.mrs

  anthropic_domain:
    type: http
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/override/anthropic_domain.mrs
    url: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/anthropic.mrs

  # 仅列出的 Google AI / Gemini Notebook 后缀走 AI；普通 Google 与 Gemini 网页保持直连。
  google_ai_dev:
    type: inline
    behavior: classical
    payload:
      - DOMAIN-SUFFIX,aistudio.google.com
      - DOMAIN-SUFFIX,generativelanguage.googleapis.com
      - DOMAIN-SUFFIX,ai.google.dev
      - DOMAIN-SUFFIX,notebooklm.google.com
      - DOMAIN-SUFFIX,notebooklm.google
      - DOMAIN-SUFFIX,notebook.google.com
      - DOMAIN-SUFFIX,notebook.google
      - DOMAIN-SUFFIX,labs.google
      - DOMAIN-SUFFIX,antigravity.google
      - DOMAIN-SUFFIX,workspace.google.com

  # 两个既有自定义后缀沿用 AI 解锁组。
  custom_proxy_domain:
    type: inline
    behavior: classical
    payload:
      - DOMAIN-SUFFIX,search.agonygao.top
      - DOMAIN-SUFFIX,luckyg.131518.xyz

  # 有意保留场景差异：内地 15 条走 AI；港澳 23 条默认直连。
  overseas_ai_extra:
    type: inline
    behavior: classical
    payload:
      - DOMAIN-SUFFIX,openrouter.ai
      - DOMAIN-SUFFIX,x.ai
      - DOMAIN-SUFFIX,grok.com
      - DOMAIN-SUFFIX,perplexity.ai
      - DOMAIN-SUFFIX,mistral.ai
      - DOMAIN-SUFFIX,huggingface.co
      - DOMAIN-SUFFIX,replicate.com
      - DOMAIN-SUFFIX,groq.com
      - DOMAIN-SUFFIX,together.ai
      - DOMAIN-SUFFIX,together.xyz
      - DOMAIN-SUFFIX,fireworks.ai
      - DOMAIN-SUFFIX,poe.com
      - DOMAIN-SUFFIX,cohere.com
      - DOMAIN-SUFFIX,midjourney.com
      - DOMAIN-SUFFIX,suno.com
      - DOMAIN-SUFFIX,udio.com
      - DOMAIN-SUFFIX,elevenlabs.io
      - DOMAIN-SUFFIX,cursor.sh
      - DOMAIN-SUFFIX,cursor.com
      - DOMAIN-SUFFIX,windsurf.com
      - DOMAIN-SUFFIX,codeium.com
      - DOMAIN-SUFFIX,lovable.dev
      - DOMAIN-SUFFIX,v0.dev

  # 既有遥测范围，位于国内保护之后。
  telemetry_domain:
    type: inline
    behavior: classical
    payload:
      - DOMAIN-SUFFIX,otel.cline.bot
      - DOMAIN-SUFFIX,i.posthog.com
      - DOMAIN-SUFFIX,arms-retcode.aliyuncs.com
      - DOMAIN-SUFFIX,shence-api.mumu.163.com
      - DOMAIN-SUFFIX,apmplus.volces.com
      - DOMAIN-SUFFIX,ingest.sentry.io
      - DOMAIN-SUFFIX,ingest.us.sentry.io
      - DOMAIN-SUFFIX,ingest.de.sentry.io
      - DOMAIN-SUFFIX,js-agent.newrelic.com

  hulu_domain:
    type: http
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/override/hulu_domain.mrs
    url: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/hulu.mrs

  # 指定流媒体；BBC 按英国域名匹配，bbc.com 保持直连。
  streaming_special:
    type: inline
    behavior: classical
    payload:
      - DOMAIN-SUFFIX,peacocktv.com
      - DOMAIN-SUFFIX,paramountplus.com
      - DOMAIN-SUFFIX,cbsaavideo.com
      - DOMAIN-SUFFIX,pluto.tv
      - DOMAIN-SUFFIX,tubi.tv
      - DOMAIN-SUFFIX,bbc.co.uk
      - DOMAIN-SUFFIX,bbci.co.uk

  ads_domain:
    type: http
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/override/ads_domain.mrs
    url: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/category-ads-all.mrs


# 08 · 首条命中分流：专项优先，兜底最后
rules:
  # 私网
  - "RULE-SET,private_domain,🎯 全球直连"
  - "RULE-SET,private_ip,🎯 全球直连,no-resolve"
  # 国内敏感服务、中国 AI、腾讯与游戏直连保护
  - "RULE-SET,domestic_sensitive,🎯 全球直连"
  - "RULE-SET,domestic_ai_domain,🎯 全球直连"
  - "RULE-SET,tencent_services,🎯 全球直连"
  - "RULE-SET,tencent_games_static,🎯 全球直连"
  # 广告与遥测
  - "RULE-SET,ads_domain,🛑 广告拦截"
  - "RULE-SET,telemetry_domain,🛑 广告拦截"
  # 指定 AI 开发工具、OpenAI、Anthropic
  # STUN 域名是主路径；Safari／TUN 偶尔只把解析后的目标 IP 交给内核，
  # 因此为当前 Google／Cloudflare STUN 地址增加 no-resolve IP 兜底，避免落入 DIRECT。
  - "IP-CIDR,74.125.250.129/32,🤖 AI 解锁,no-resolve"
  - "IP-CIDR,162.159.207.0/32,🤖 AI 解锁,no-resolve"
  - "IP-CIDR6,2001:4860:4864:5:8000::1/128,🤖 AI 解锁,no-resolve"
  - "IP-CIDR6,2606:4700:49::/128,🤖 AI 解锁,no-resolve"
  - "DOMAIN,stun.l.google.com,🤖 AI 解锁"
  - "DOMAIN,stun1.l.google.com,🤖 AI 解锁"
  - "DOMAIN,stun.cloudflare.com,🤖 AI 解锁"
  - "RULE-SET,google_ai_dev,🤖 AI 解锁"
  - "RULE-SET,openai_domain,🤖 AI 解锁"
  - "RULE-SET,anthropic_domain,🤖 AI 解锁"
  - "DOMAIN-SUFFIX,chat.com,🤖 AI 解锁"
  # OpenRouter 明确使用 AI 出口；其余补充 AI 保留可选的默认方向。
  - "DOMAIN-SUFFIX,openrouter.ai,🤖 AI 解锁"
  # 自定义代理与 AI 备选
  - "RULE-SET,custom_proxy_domain,🤖 AI 解锁"
  - "RULE-SET,overseas_ai_extra,🧪 AI 备选"
  # 指定流媒体
  - "RULE-SET,hulu_domain,🎬 流媒体解锁"
  - "RULE-SET,streaming_special,🎬 流媒体解锁"
  # IPv6 fail-closed：未命中任何规则的 IPv6 一律拒绝，强制回退 IPv4。
  # 避免切换覆写或应用 IPv6 开关变化时，物理网卡原生 IPv6 绕过 TUN 抢占分流。
  - "IP-CIDR6,::/0,REJECT,no-resolve"
  # 其余直连
  - "MATCH,🎯 全球直连"