feat(frontend): call out a catch-all that only repeats the final fallback

A catch-all routed to the proxy with nothing enabled below it shadows
only the automatic tail, which already ends in the same proxy fallback.
Saying it matches everything is true but unhelpful there — the rule buys
nothing and costs the automatic IP check, so name that instead.

Author: loss-and-quick

frontend/src/features/settings/__tests__/isCatchAllRule.test.ts

@@ -1,6 +1,6 @@
 import { describe, expect, it } from "vitest";
 import type { RoutingRule } from "../../../generated/bindings";
-import { isCatchAllRule } from "../helpers";
+import { isCatchAllRule, isRedundantCatchAll } from "../helpers";
 
 const rule = (patch: Partial<RoutingRule>): RoutingRule => ({
   id: "r1",
@@ -47,3 +47,31 @@ describe("isCatchAllRule", () => {
     expect(isCatchAllRule(rule({ port: "0-abc" }))).toBe(false);
   });
 });
+
+describe("isRedundantCatchAll", () => {
+  const catchAll = (patch: Partial<RoutingRule> = {}) => rule({ port: "0-65535", ...patch });
+
+  it("flags a trailing catch-all that only repeats the final proxy fallback", () => {
+    expect(isRedundantCatchAll([rule({ ip: ["geoip:ru"] }), catchAll()], 1)).toBe(true);
+  });
+
+  it("ignores one that still shadows an enabled rule below", () => {
+    expect(isRedundantCatchAll([catchAll(), rule({ ip: ["geoip:ru"] })], 0)).toBe(false);
+  });
+
+  it("looks past disabled rules below", () => {
+    expect(isRedundantCatchAll([catchAll(), rule({ ip: ["geoip:ru"], enabled: false })], 0)).toBe(
+      true,
+    );
+  });
+
+  it("ignores a catch-all routed anywhere but the proxy", () => {
+    expect(isRedundantCatchAll([catchAll({ outboundTag: "direct" })], 0)).toBe(false);
+    expect(isRedundantCatchAll([catchAll({ outboundTag: "block" })], 0)).toBe(false);
+  });
+
+  it("ignores an index that points at no rule", () => {
+    expect(isRedundantCatchAll([catchAll()], -1)).toBe(false);
+    expect(isRedundantCatchAll([], 0)).toBe(false);
+  });
+});

frontend/src/features/settings/helpers.ts

@@ -94,6 +94,15 @@ export function isCatchAllRule(rule: RoutingRule): boolean {
   return portCoversEveryPort(rule.port);
 }
 
+/**
+ * Whether the catch-all at `index` shadows nothing but the automatic tail, which
+ * already ends in the proxy fallback — so the rule costs the IP check and buys nothing.
+ */
+export function isRedundantCatchAll(rules: RoutingRule[], index: number): boolean {
+  if (index < 0 || rules[index]?.outboundTag !== "proxy") return false;
+  return !rules.slice(index + 1).some((rule) => rule.enabled);
+}
+
 export function ruleIcon(rule: RoutingRule): string {
   if (rule.outboundTag === "direct") return "near_me";
   if (rule.outboundTag === "block") return "block";

frontend/src/features/settings/sections/RoutingSection.tsx

@@ -14,7 +14,7 @@ import type { RoutingRule } from "../../../generated/bindings";
 import { useFormatters, useT } from "../../../i18n";
 import type { AdvancedSettings } from "../../../lib/bridge";
 import { getRuntimeBridgeMode } from "../../../lib/ksu-webui";
-import { isCatchAllRule, ruleIcon, ruleSummary } from "../helpers";
+import { isCatchAllRule, isRedundantCatchAll, ruleIcon, ruleSummary } from "../helpers";
 import { makePresetRule, RULE_PRESETS } from "../rule-presets";
 
 export function RoutingSection({
@@ -52,6 +52,7 @@ export function RoutingSection({
   const domainStrategy4Xray = settings.domainStrategy;
   const domainStrategy4Singbox = settings.domainStrategy4Singbox;
   const catchAllIndex = routingRules.findIndex(isCatchAllRule);
+  const catchAllRedundant = isRedundantCatchAll(routingRules, catchAllIndex);
 
   return (
     <>
@@ -210,7 +211,11 @@ export function RoutingSection({
                       {ruleSummary(rule, t, formatters, profileName)}
                       {index === catchAllIndex && (
                         <div style={{ color: "var(--warn)", marginTop: 2 }}>
-                          {t("settings.routingCatchAll")}
+                          {t(
+                            catchAllRedundant
+                              ? "settings.routingCatchAllRedundant"
+                              : "settings.routingCatchAll",
+                          )}
                         </div>
                       )}
                       {catchAllIndex >= 0 && index > catchAllIndex && rule.enabled && (

frontend/src/i18n/ar.ts

@@ -737,6 +737,8 @@ const ar = {
   "settings.routingEmpty": "لا توجد قواعد توجيه بعد.",
   "settings.routingRuleDefault": "القاعدة {n}",
   "settings.routingCatchAll": "يطابق كل اتصال — القواعد أدناه وفحص IP التلقائي لن تُنفَّذ.",
+  "settings.routingCatchAllRedundant":
+    "يطابق كل اتصال. يُضاف التوجيه النهائي إلى البروكسي تلقائيًا بالفعل، لذا فإن هذه القاعدة تُلغي فحص IP التلقائي دون أي فائدة.",
   "settings.routingUnreachable": "لا يتم الوصول إليها أبدًا.",
   "settings.routingRuleDomains": plural("count", {
     zero: "لا نطاقات",

frontend/src/i18n/en.ts

@@ -627,6 +627,8 @@ const en = {
   "settings.routingRuleDefault": "Rule {n}",
   "settings.routingCatchAll":
     "Matches every connection — the rules below and the automatic IP check never run.",
+  "settings.routingCatchAllRedundant":
+    "Matches every connection. The proxy fallback is already appended automatically, so this rule only costs you the automatic IP check.",
   "settings.routingUnreachable": "Never reached.",
   "settings.routingRuleDomains": plural("count", {
     one: "# domain",

frontend/src/i18n/es.ts

@@ -621,6 +621,8 @@ const es = {
   "settings.routingRuleDefault": "Regla {n}",
   "settings.routingCatchAll":
     "Coincide con todas las conexiones: las reglas siguientes y la comprobación automática de IP nunca se ejecutan.",
+  "settings.routingCatchAllRedundant":
+    "Coincide con todas las conexiones. La salida final por el proxy ya se añade automáticamente, así que esta regla solo te cuesta la comprobación automática de IP.",
   "settings.routingUnreachable": "Nunca se alcanza.",
   "settings.routingRuleDomains": plural("count", {
     one: "# dominio",

frontend/src/i18n/hi.ts

@@ -611,6 +611,8 @@ const hi = {
   "settings.routingEmpty": "अभी कोई रूटिंग नियम नहीं हैं।",
   "settings.routingRuleDefault": "नियम {n}",
   "settings.routingCatchAll": "हर कनेक्शन से मेल खाता है — नीचे के नियम और स्वचालित IP जाँच कभी नहीं चलते।",
+  "settings.routingCatchAllRedundant":
+    "हर कनेक्शन से मेल खाता है। प्रॉक्सी पर अंतिम फ़ॉलबैक पहले से ही अपने आप जुड़ जाता है, इसलिए यह नियम सिर्फ़ स्वचालित IP जाँच छीन लेता है।",
   "settings.routingUnreachable": "कभी लागू नहीं होता।",
   "settings.routingRuleDomains": plural("count", {
     one: "# डोमेन",

frontend/src/i18n/pt.ts

@@ -620,6 +620,8 @@ const pt = {
   "settings.routingRuleDefault": "Regra {n}",
   "settings.routingCatchAll":
     "Corresponde a todas as conexões — as regras abaixo e a verificação automática de IP nunca são executadas.",
+  "settings.routingCatchAllRedundant":
+    "Corresponde a todas as conexões. O encaminhamento final para o proxy já é adicionado automaticamente, portanto esta regra só lhe custa a verificação automática de IP.",
   "settings.routingUnreachable": "Nunca é alcançada.",
   "settings.routingRuleDomains": plural("count", {
     one: "# domínio",

frontend/src/i18n/ru.ts

@@ -656,6 +656,8 @@ const ru = {
   "settings.routingRuleDefault": "Правило {n}",
   "settings.routingCatchAll":
     "Перехватывает весь трафик — правила ниже и автопроверка по IP не сработают.",
+  "settings.routingCatchAllRedundant":
+    "Перехватывает весь трафик. Переход на прокси и так добавляется автоматически, поэтому правило лишь отключает автопроверку по IP.",
   "settings.routingUnreachable": "Никогда не сработает.",
   "settings.routingRuleDomains": plural("count", {
     one: "# домен",

frontend/src/i18n/vi.ts

@@ -616,6 +616,8 @@ const vi = {
   "settings.routingRuleDefault": "Quy tắc {n}",
   "settings.routingCatchAll":
     "Khớp mọi kết nối — các quy tắc bên dưới và bước kiểm tra IP tự động sẽ không chạy.",
+  "settings.routingCatchAllRedundant":
+    "Khớp mọi kết nối. Bước chuyển cuối sang proxy vốn đã được thêm tự động, nên quy tắc này chỉ khiến bạn mất bước kiểm tra IP tự động.",
   "settings.routingUnreachable": "Không bao giờ được dùng.",
   "settings.routingRuleDomains": plural("count", {
     one: "# domain",