# Shadowrocket · 港澳：默认直连，指定服务代理
# 导入节点或订阅后，导入并启用本配置；全局路由使用「配置」。
# PROXY 沿用首页当前节点；ALL 手动选节点，AUTO 测速。
# 无脚本、重写或生效 MITM 主机列表；iOS 实机验收状态见验证记录。

[General]
skip-proxy = localhost,*.local,*.lan,captive.apple.com,sequoia.apple.com,seed-sequoia.siri.apple.com,*.ls.apple.com,10.0.0.0/8,100.64.0.0/10,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.168.0.0/16,::1/128,fc00::/7,fe80::/10
# iOS TUN 排除路由，保留当前参数名与网段。
tun-excluded-routes = 10.0.0.0/8,100.64.0.0/10,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.0.0.0/24,192.0.2.0/24,192.88.99.0/24,192.168.0.0/16,198.18.0.0/15,198.51.100.0/24,203.0.113.0/24,224.0.0.0/4,233.252.0.0/24,255.255.255.255/32,::1/128,fc00::/7,fe80::/10,ff00::/8
# 国内 DoH + 明文主池；两个地区的 iOS 配置均沿用此池。
dns-server = https://doh.pub/dns-query,https://dns.alidns.com/dns-query,223.5.5.5,119.29.29.29
# 备用明文池；与港澳 YAML 的公共 DoH 实现有意不同。
fallback-dns-server = 223.6.6.6,119.28.28.28
ipv6 = false
dns-direct-system = false
# 直连解析失败允许经代理兜底；不能宣称所有直连查询都仅走直连。
dns-direct-fallback-proxy = true
private-ip-answer = true
icmp-auto-reply = true
hijack-dns = :53,8.8.8.8:53,8.8.4.4:53,1.1.1.1:53,1.0.0.1:53,9.9.9.9:53,149.112.112.112:53,208.67.222.222:53,208.67.220.220:53,114.114.114.114:53,223.5.5.5:53,223.6.6.6:53,119.29.29.29:53
# 局域网、Apple 推送、米家、NTP 和 QQ 登录等兼容项。
always-real-ip = *.lan,*.local,captive.apple.com,*.msftconnecttest.com,*.msftncsi.com,*.push.apple.com,*.market.xiaomi.com,localhost.ptlogin2.qq.com,pool.ntp.org,*.pool.ntp.org,time.*.com,time.*.gov,time.*.edu.cn,time.*.apple.com,*.ntp.org.cn
# 仅代理连接阻止 QUIC；直连不受此项影响。
block-quic = all-proxy
# 节点不支持 UDP 时拒绝，保留明确失败行为。
udp-policy-not-supported-behaviour = REJECT

[Proxy Group]
# AI 与流媒体默认 PROXY；内地 Microsoft/Apple 和港澳 AI_EXTRA 默认 DIRECT。
ALL = select,policy-regex-filter=^((?!(流量|到期|套餐|订阅|官网|剩余|Expire|expire|Traffic|traffic)).)*$
AUTO = url-test,policy-regex-filter=^((?!(流量|到期|套餐|订阅|官网|剩余|Expire|expire|Traffic|traffic)).)*$,interval=300,timeout=5,url=https://cp.cloudflare.com/generate_204
AI = select,PROXY,AUTO,ALL,DIRECT
AI_EXTRA = select,DIRECT,PROXY,AUTO,ALL
Streaming = select,PROXY,AUTO,ALL,DIRECT

[Rule]
# 顺序与基线逐条一致：国内保护先于广告，专项服务先于宽泛规则和兜底。
# 自建清单通过线上 raw 读取，修改后须随主配置一起发布。
# force-remote-dns 仅保留在已有内联规则，不移到 RULE-SET。
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Lan/Lan.list,DIRECT
RULE-SET,https://raw.githubusercontent.com/UykiZhao/Clash-Party-Override-Rule/main/rules/shadowrocket/direct-supplement.list,DIRECT
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/AdvertisingLite/AdvertisingLite.list,REJECT
# 与同名 RULE-SET 成对保留：上游域名表使用 DOMAIN-SET。
DOMAIN-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/AdvertisingLite/AdvertisingLite_Domain.list,REJECT
RULE-SET,https://raw.githubusercontent.com/UykiZhao/Clash-Party-Override-Rule/main/rules/shadowrocket/telemetry.list,REJECT
DOMAIN-SUFFIX,openai.com,AI,force-remote-dns
DOMAIN-SUFFIX,chatgpt.com,AI,force-remote-dns
DOMAIN-SUFFIX,oaistatic.com,AI,force-remote-dns
DOMAIN-SUFFIX,oaiusercontent.com,AI,force-remote-dns
DOMAIN-SUFFIX,chat.com,AI,force-remote-dns
DOMAIN-SUFFIX,anthropic.com,AI,force-remote-dns
DOMAIN-SUFFIX,claude.ai,AI,force-remote-dns
DOMAIN-SUFFIX,claudeusercontent.com,AI,force-remote-dns
DOMAIN-SUFFIX,aistudio.google.com,AI,force-remote-dns
DOMAIN-SUFFIX,generativelanguage.googleapis.com,AI,force-remote-dns
DOMAIN-SUFFIX,ai.google.dev,AI,force-remote-dns
DOMAIN-SUFFIX,notebooklm.google.com,AI,force-remote-dns
DOMAIN-SUFFIX,notebooklm.google,AI,force-remote-dns
DOMAIN-SUFFIX,notebook.google.com,AI,force-remote-dns
DOMAIN-SUFFIX,notebook.google,AI,force-remote-dns
DOMAIN-SUFFIX,labs.google,AI,force-remote-dns
DOMAIN-SUFFIX,antigravity.google,AI,force-remote-dns
# 保留既有 Google AI 开发工具范围；Gemini 网页和普通 Google 走默认直连。
DOMAIN-SUFFIX,workspace.google.com,AI,force-remote-dns
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/OpenAI/OpenAI.list,AI
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Claude/Claude.list,AI
DOMAIN-SUFFIX,search.agonygao.top,AI,force-remote-dns
DOMAIN-SUFFIX,luckyg.131518.xyz,AI,force-remote-dns
DOMAIN,stun.l.google.com,AI,force-remote-dns
DOMAIN,stun1.l.google.com,AI,force-remote-dns
DOMAIN,stun.cloudflare.com,AI,force-remote-dns
DOMAIN-SUFFIX,openrouter.ai,AI,force-remote-dns
RULE-SET,https://raw.githubusercontent.com/UykiZhao/Clash-Party-Override-Rule/main/rules/shadowrocket/overseas-ai-extra.list,AI_EXTRA
DOMAIN-SUFFIX,peacocktv.com,Streaming,force-remote-dns
DOMAIN-SUFFIX,paramountplus.com,Streaming,force-remote-dns
DOMAIN-SUFFIX,cbsaavideo.com,Streaming,force-remote-dns
DOMAIN-SUFFIX,pluto.tv,Streaming,force-remote-dns
DOMAIN-SUFFIX,tubi.tv,Streaming,force-remote-dns
# BBC 英国域名走流媒体，bbc.com 直连；不按网页路径分流。
DOMAIN-SUFFIX,bbc.co.uk,Streaming,force-remote-dns
DOMAIN-SUFFIX,bbci.co.uk,Streaming,force-remote-dns
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Hulu/Hulu.list,Streaming
FINAL,DIRECT

[Host]
localhost = 127.0.0.1

[MITM]
hostname =