import { type ProtectionModule } from '../core/module';
/**
 * Expert WebRTC IP-leak protection.
 *
 * The real leak is not the SDP body — it's the asynchronously-gathered ICE
 * candidates (delivered via `onicecandidate` / `icecandidate` events) and the
 * candidate rows in `getStats()`. A STUN `srflx` candidate exposes the host's
 * true public IP, bypassing any HTTP proxy. This module intercepts every path:
 *
 *  - `createOffer` / `createAnswer` SDP
 *  - `localDescription` / `currentLocalDescription` getters
 *  - `onicecandidate` setter and `addEventListener('icecandidate')`
 *  - `getStats()` candidate rows
 *
 * Policy (`FP.webrtc.policy`):
 *  - `fake` (default): rewrite public (`srflx`/`relay`/`prflx`) IPs to the proxy
 *    egress (`FP.webrtc.publicIp`); if unknown, drop those candidates. Raw
 *    private host IPs are dropped; mDNS `.local` host candidates pass through.
 *  - `block`: drop every candidate — no IPs are discovered at all.
 *  - `passthrough`: do nothing.
 */
export declare const webrtcModule: ProtectionModule;
//# sourceMappingURL=webrtc.d.ts.map