{
  "_comment": "sing-box 客户端配置模板 — VLESS+REALITY+TUN（PoC tsk_SLCsjNgtmng3 / M4/M5 tsk_xAQhC1xuCd8x）",
  "_usage": "渲染脚本: app/kernel/poc/gen-poc-config.sh；占位符一律 __UPPER_SNAKE__",
  "_m4_note": "URLTest 自动选线：auto-select(urltest) → 成员节点延迟最低者。手动切换经 Clash API PUT /proxies/proxy",

  "log": {
    "level": "info",
    "timestamp": true
  },

  "dns": {
    "servers": [
      {
        "tag": "dns-remote",
        "address": "tls://1.1.1.1",
        "address_resolver": "dns-local",
        "detour": "proxy"
      },
      {
        "tag": "dns-local",
        "address": "local",
        "detour": "direct"
      },
      {
        "tag": "dns-block",
        "address": "rcode://success"
      }
    ],
    "rules": [
      { "outbound": "any", "server": "dns-local" },
      { "geosite": "cn", "server": "dns-local" },
      { "geoip": "private", "server": "dns-local" }
    ],
    "final": "dns-remote",
    "independent_cache": true
  },

  "inbounds": [
    {
      "type": "tun",
      "tag": "tun-in",
      "inet4_address": "172.19.0.1/30",
      "inet6_address": "fdfe:dcba:9876::1/126",
      "mtu": 1492,
      "auto_route": true,
      "strict_route": true,
      "stack": "system",
      "sniff": true,
      "sniff_override_destination": false
    }
  ],

  "outbounds": [
    {
      "_comment": "M4: URLTest 自动选优出口组（成员：所有实际代理节点 tag）",
      "type": "urltest",
      "tag": "auto-select",
      "outbounds": ["reality-out"],
      "url": "http://www.gstatic.com/generate_204",
      "interval": "3m",
      "tolerance": 50
    },
    {
      "_comment": "M4: Selector 出口组（Clash API 操作此组来手动覆盖 / 切回自动）",
      "type": "selector",
      "tag": "proxy",
      "outbounds": ["auto-select", "reality-out"],
      "default": "auto-select"
    },
    {
      "type": "vless",
      "tag": "reality-out",
      "server": "__SERVER_HOST__",
      "server_port": __SERVER_PORT__,
      "uuid": "__UUID__",
      "flow": "xtls-rprx-vision",
      "tls": {
        "enabled": true,
        "server_name": "__REALITY_SNI__",
        "utls": {
          "enabled": true,
          "fingerprint": "chrome"
        },
        "reality": {
          "enabled": true,
          "public_key": "__REALITY_PUBLIC_KEY__",
          "short_id": "__REALITY_SHORT_ID__"
        }
      },
      "packet_encoding": "xudp"
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    },
    {
      "type": "dns",
      "tag": "dns-out"
    }
  ],

  "route": {
    "rules": [
      { "protocol": "dns", "outbound": "dns-out" },
      { "geosite": "cn", "outbound": "direct" },
      { "geoip": "cn", "outbound": "direct" },
      { "geoip": "private", "outbound": "direct" }
    ],
    "final": "proxy",
    "auto_detect_interface": true
  },

  "experimental": {
    "clash_api": {
      "external_controller": "127.0.0.1:__CLASH_API_PORT__",
      "secret": "__CLASH_API_SECRET__"
    },
    "cache_file": {
      "enabled": true,
      "path": "/tmp/pangolin-poc.db"
    }
  }
}