Update bypass action behavior for auto redirect

docs/configuration/route/rule_action.md

@@ -62,19 +62,19 @@ See `route-options` fields below.
 }
 ```
 
-`bypass` routes connection to the specified outbound.
+`bypass` bypasses sing-box at the kernel level for auto redirect connections in pre-match.
 
-For tun connections in [pre-match](/configuration/shared/pre-match/),
-the connection will bypass sing-box and connect directly at the kernel level.
-
-For non-tun connections and already established connections, the behavior is the same as `route`.
+For non-auto-redirect connections and already established connections,
+if `outbound` is specified, the behavior is the same as `route`;
+otherwise, the rule will be skipped.
 
 #### outbound
 
-==Required==
-
 Tag of target outbound.
 
+If not specified, the rule only matches in [pre-match](/configuration/shared/pre-match/)
+from auto redirect, and will be skipped in other contexts.
+
 #### route-options Fields
 
 See `route-options` fields below.

docs/configuration/route/rule_action.zh.md

@@ -58,18 +58,16 @@ icon: material/new-box
 }
 ```
 
-`bypass` 将连接路由到指定出站。
+`bypass` 在预匹配中为 auto redirect 连接在内核层面绕过 sing-box。
 
-对于[预匹配](/configuration/shared/pre-match/)中的 tun 连接，连接将在内核层面绕过 sing-box 直接连接。
-
-对于非 tun 连接和已建立的连接，行为与 `route` 相同。
+对于非 auto redirect 连接和已建立的连接，如果指定了 `outbound`，行为与 `route` 相同；否则规则将被跳过。
 
 #### outbound
 
-==必填==
-
 目标出站的标签。
 
+如果未指定，规则仅在来自 auto redirect 的[预匹配](/configuration/shared/pre-match/)中匹配，在其他场景中将被跳过。
+
 #### route-options 字段
 
 参阅下方的 `route-options` 字段。

docs/configuration/shared/pre-match.md

@@ -24,10 +24,14 @@ When a rule matches an action that requires an established connection, pre-match
 
 Reject with TCP RST / ICMP unreachable.
 
+See [reject](/configuration/route/rule_action/#reject) for details.
+
 #### route
 
 Route ICMP connections to the specified outbound for direct reply.
 
+See [route](/configuration/route/rule_action/#route) for details.
+
 #### bypass
 
 !!! question "Since sing-box 1.13.0"
@@ -37,3 +41,10 @@ Route ICMP connections to the specified outbound for direct reply.
     Only supported on Linux with `auto_redirect` enabled.
 
 Bypass sing-box and connect directly at kernel level.
+
+If `outbound` is not specified, the rule only matches in pre-match from auto redirect,
+and will be skipped in other contexts.
+
+For all other contexts, bypass with `outbound` behaves like `route` action.
+
+See [bypass](/configuration/route/rule_action/#bypass) for details.

docs/configuration/shared/pre-match.zh.md

@@ -22,10 +22,14 @@ icon: material/new-box
 
 以 TCP RST / ICMP 不可达拒绝。
 
+详情参阅 [reject](/configuration/route/rule_action/#reject)。
+
 #### route
 
 将 ICMP 连接路由到指定出站以直接回复。
 
+详情参阅 [route](/configuration/route/rule_action/#route)。
+
 #### bypass
 
 !!! question "自 sing-box 1.13.0 起"
@@ -35,3 +39,9 @@ icon: material/new-box
     仅支持 Linux，且需要启用 `auto_redirect`。
 
 在内核层面绕过 sing-box 直接连接。
+
+如果未指定 `outbound`，规则仅在来自 auto redirect 的预匹配中匹配，在其他场景中将被跳过。
+
+对于其他所有场景，指定了 `outbound` 的 bypass 行为与 `route` 相同。
+
+详情参阅 [bypass](/configuration/route/rule_action/#bypass)。