vesant-sdk 1.7.0-dev.6f300f7 → 1.7.0-dev.6f4bf05

package/dist/{client-D9JZgN3X.d.ts → client-0NOPDnT0.d.ts}

@@ -47,6 +47,8 @@ interface CipherTextPayload {
         heading?: number;
         speed?: number;
         timestamp: number;
+        /** Advisory client-side GPS integrity flags; the server weighs these as risk factors. */
+        integrity_flags?: string[];
     };
     /** Network information */
     network?: {
@@ -227,7 +229,11 @@ interface ValidateCipherTextResponse {
     };
 }
 interface VerifyIPRequest {
-    ip_address: string;
+    /**
+     * Optional. Omit to let the server derive the connecting IP — the SDK never
+     * asserts the client IP (spoofable, and the server extracts it authoritatively).
+     */
+    ip_address?: string;
     user_id: string;
     event_type: string;
     device_fingerprint?: DeviceFingerprintRequest;
@@ -624,16 +630,6 @@ interface ResendLocationRequestRequest {
     email?: string;
     phone?: string;
 }
-interface WiFiNetwork {
-    /** MAC address (BSSID) */
-    macAddress: string;
-    /** Signal strength in dBm (negative number) */
-    signalStrength?: number;
-    /** WiFi channel */
-    channel?: number;
-    /** Network name (optional) */
-    ssid?: string;
-}
 interface LocationCaptureRequest {
     /** GPS latitude (if available) */
     latitude?: number;
@@ -641,8 +637,8 @@ interface LocationCaptureRequest {
     longitude?: number;
     /** GPS accuracy in meters */
     accuracy?: number;
-    /** WiFi networks for positioning (if GPS not available) */
-    wifi_networks?: WiFiNetwork[];
+    /** Advisory client-side GPS integrity flags; the server weighs these as risk factors. */
+    integrity_flags?: string[];
     /** User agent string */
     user_agent?: string;
     /** Device metadata */
@@ -662,6 +658,10 @@ interface LocationShareInfo {
     status: string;
     is_expired: boolean;
     is_completed: boolean;
+    /**
+     * Server-only hint. The web SDK cannot enumerate WiFi networks (no browser API
+     * for BSSIDs); this flag is informational and never satisfied client-side.
+     */
     requires_wifi: boolean;
 }
 interface LocationCaptureResponse {
@@ -730,8 +730,6 @@ interface UseLocationCaptureOptions {
     autoFetch?: boolean;
     /** Auto-request GPS permission on mount */
     autoRequestGPS?: boolean;
-    /** Collect WiFi data as fallback (requires explicit permission) */
-    collectWiFi?: boolean;
 }
 interface UseLocationCaptureResult {
     /** Location share info */
@@ -995,20 +993,12 @@ declare class GeolocationClient extends BaseClient {
      *
      * @example
      * ```typescript
-     * // Using GPS (preferred)
+     * // GPS (the web SDK is GPS + IP only; the server handles the IP fallback)
      * const result = await client.captureLocation(token, {
      *   latitude: 37.7749,
      *   longitude: -122.4194,
      *   accuracy: 10
      * });
-     *
-     * // Using WiFi positioning (fallback)
-     * const result = await client.captureLocation(token, {
-     *   wifi_networks: [
-     *     { macAddress: "00:11:22:33:44:55", signalStrength: -50 },
-     *     { macAddress: "AA:BB:CC:DD:EE:FF", signalStrength: -70 }
-     *   ]
-     * });
      * ```
      */
     captureLocation(token: string, capture: LocationCaptureRequest, requestOptions?: RequestOptions): Promise<LocationCaptureResponse>;
@@ -1031,4 +1021,4 @@ declare class GeolocationClient extends BaseClient {
     generateCipherText(options: Omit<CipherTextOptions, 'apiKey' | 'signingKey'>, gpsConfig?: GeolocationConfigResponse): Promise<CipherTextResult>;
 }
 
-export { type UseLocationRequestsResult as $, type APIError as A, type GeolocationClientConfig as B, type CipherTextCustomerData as C, type DeviceFingerprintRequest as D, type GeolocationConfigResponse as E, type GeolocationRecord as F, GeolocationClient as G, type LocationCaptureRequest as H, type LocationCaptureResponse as I, type JurisdictionConfig as J, type LocationRequestChannel as K, type LocationVerification as L, type LocationRequestResult as M, type LocationRequestStatus as N, type LocationShareInfo as O, type UpdateGeofenceRuleRequest as P, type UpdateJurisdictionRequest as Q, type ResendLocationRequestRequest as R, type UseAlertsOptions as S, type UseAlertsResult as T, type UpdateDeviceTrustRequest as U, type ValidateCipherTextResponse as V, type UseGeolocationOptions as W, type UseGeolocationResult as X, type UseLocationCaptureOptions as Y, type UseLocationCaptureResult as Z, type UseLocationRequestsOptions as _, type LocationRequest as a, type ValidateCipherTextRequest as a0, type VerifyIPRequest as a1, type WiFiNetwork as a2, type LocationRequestFilters as b, type LocationRequestListResponse as c, type AlertFilters as d, type AlertListResponse as e, type AlertSeverity as f, type AlertStatus as g, type AlertType as h, type CipherTextOptions as i, type CipherTextPayload as j, type CipherTextReason as k, type CipherTextResult as l, type ComplianceCheckResponse as m, type CreateGeofenceRuleRequest as n, type CreateJurisdictionRequest as o, type CreateLocationRequestRequest as p, type DashboardMetrics as q, type DecryptedCipherText as r, type DeviceFingerprint as s, type DeviceTrustResult as t, type GeoIPResult as u, type GeofenceAction as v, type GeofenceEvaluation as w, type GeofenceRule as x, type GeofenceRuleType as y, type GeolocationAlert as z };
+export { type UseLocationRequestsResult as $, type APIError as A, type GeolocationClientConfig as B, type CipherTextCustomerData as C, type DeviceFingerprintRequest as D, type GeolocationConfigResponse as E, type GeolocationRecord as F, GeolocationClient as G, type LocationCaptureRequest as H, type LocationCaptureResponse as I, type JurisdictionConfig as J, type LocationRequestChannel as K, type LocationVerification as L, type LocationRequestResult as M, type LocationRequestStatus as N, type LocationShareInfo as O, type UpdateGeofenceRuleRequest as P, type UpdateJurisdictionRequest as Q, type ResendLocationRequestRequest as R, type UseAlertsOptions as S, type UseAlertsResult as T, type UpdateDeviceTrustRequest as U, type ValidateCipherTextResponse as V, type UseGeolocationOptions as W, type UseGeolocationResult as X, type UseLocationCaptureOptions as Y, type UseLocationCaptureResult as Z, type UseLocationRequestsOptions as _, type LocationRequest as a, type ValidateCipherTextRequest as a0, type VerifyIPRequest as a1, type LocationRequestFilters as b, type LocationRequestListResponse as c, type AlertFilters as d, type AlertListResponse as e, type AlertSeverity as f, type AlertStatus as g, type AlertType as h, type CipherTextOptions as i, type CipherTextPayload as j, type CipherTextReason as k, type CipherTextResult as l, type ComplianceCheckResponse as m, type CreateGeofenceRuleRequest as n, type CreateJurisdictionRequest as o, type CreateLocationRequestRequest as p, type DashboardMetrics as q, type DecryptedCipherText as r, type DeviceFingerprint as s, type DeviceTrustResult as t, type GeoIPResult as u, type GeofenceAction as v, type GeofenceEvaluation as w, type GeofenceRule as x, type GeofenceRuleType as y, type GeolocationAlert as z };

package/dist/{client-BG8KtVMc.d.mts → client-CvWNRwwg.d.mts}

@@ -47,6 +47,8 @@ interface CipherTextPayload {
         heading?: number;
         speed?: number;
         timestamp: number;
+        /** Advisory client-side GPS integrity flags; the server weighs these as risk factors. */
+        integrity_flags?: string[];
     };
     /** Network information */
     network?: {
@@ -227,7 +229,11 @@ interface ValidateCipherTextResponse {
     };
 }
 interface VerifyIPRequest {
-    ip_address: string;
+    /**
+     * Optional. Omit to let the server derive the connecting IP — the SDK never
+     * asserts the client IP (spoofable, and the server extracts it authoritatively).
+     */
+    ip_address?: string;
     user_id: string;
     event_type: string;
     device_fingerprint?: DeviceFingerprintRequest;
@@ -624,16 +630,6 @@ interface ResendLocationRequestRequest {
     email?: string;
     phone?: string;
 }
-interface WiFiNetwork {
-    /** MAC address (BSSID) */
-    macAddress: string;
-    /** Signal strength in dBm (negative number) */
-    signalStrength?: number;
-    /** WiFi channel */
-    channel?: number;
-    /** Network name (optional) */
-    ssid?: string;
-}
 interface LocationCaptureRequest {
     /** GPS latitude (if available) */
     latitude?: number;
@@ -641,8 +637,8 @@ interface LocationCaptureRequest {
     longitude?: number;
     /** GPS accuracy in meters */
     accuracy?: number;
-    /** WiFi networks for positioning (if GPS not available) */
-    wifi_networks?: WiFiNetwork[];
+    /** Advisory client-side GPS integrity flags; the server weighs these as risk factors. */
+    integrity_flags?: string[];
     /** User agent string */
     user_agent?: string;
     /** Device metadata */
@@ -662,6 +658,10 @@ interface LocationShareInfo {
     status: string;
     is_expired: boolean;
     is_completed: boolean;
+    /**
+     * Server-only hint. The web SDK cannot enumerate WiFi networks (no browser API
+     * for BSSIDs); this flag is informational and never satisfied client-side.
+     */
     requires_wifi: boolean;
 }
 interface LocationCaptureResponse {
@@ -730,8 +730,6 @@ interface UseLocationCaptureOptions {
     autoFetch?: boolean;
     /** Auto-request GPS permission on mount */
     autoRequestGPS?: boolean;
-    /** Collect WiFi data as fallback (requires explicit permission) */
-    collectWiFi?: boolean;
 }
 interface UseLocationCaptureResult {
     /** Location share info */
@@ -995,20 +993,12 @@ declare class GeolocationClient extends BaseClient {
      *
      * @example
      * ```typescript
-     * // Using GPS (preferred)
+     * // GPS (the web SDK is GPS + IP only; the server handles the IP fallback)
      * const result = await client.captureLocation(token, {
      *   latitude: 37.7749,
      *   longitude: -122.4194,
      *   accuracy: 10
      * });
-     *
-     * // Using WiFi positioning (fallback)
-     * const result = await client.captureLocation(token, {
-     *   wifi_networks: [
-     *     { macAddress: "00:11:22:33:44:55", signalStrength: -50 },
-     *     { macAddress: "AA:BB:CC:DD:EE:FF", signalStrength: -70 }
-     *   ]
-     * });
      * ```
      */
     captureLocation(token: string, capture: LocationCaptureRequest, requestOptions?: RequestOptions): Promise<LocationCaptureResponse>;
@@ -1031,4 +1021,4 @@ declare class GeolocationClient extends BaseClient {
     generateCipherText(options: Omit<CipherTextOptions, 'apiKey' | 'signingKey'>, gpsConfig?: GeolocationConfigResponse): Promise<CipherTextResult>;
 }
 
-export { type UseLocationRequestsResult as $, type APIError as A, type GeolocationClientConfig as B, type CipherTextCustomerData as C, type DeviceFingerprintRequest as D, type GeolocationConfigResponse as E, type GeolocationRecord as F, GeolocationClient as G, type LocationCaptureRequest as H, type LocationCaptureResponse as I, type JurisdictionConfig as J, type LocationRequestChannel as K, type LocationVerification as L, type LocationRequestResult as M, type LocationRequestStatus as N, type LocationShareInfo as O, type UpdateGeofenceRuleRequest as P, type UpdateJurisdictionRequest as Q, type ResendLocationRequestRequest as R, type UseAlertsOptions as S, type UseAlertsResult as T, type UpdateDeviceTrustRequest as U, type ValidateCipherTextResponse as V, type UseGeolocationOptions as W, type UseGeolocationResult as X, type UseLocationCaptureOptions as Y, type UseLocationCaptureResult as Z, type UseLocationRequestsOptions as _, type LocationRequest as a, type ValidateCipherTextRequest as a0, type VerifyIPRequest as a1, type WiFiNetwork as a2, type LocationRequestFilters as b, type LocationRequestListResponse as c, type AlertFilters as d, type AlertListResponse as e, type AlertSeverity as f, type AlertStatus as g, type AlertType as h, type CipherTextOptions as i, type CipherTextPayload as j, type CipherTextReason as k, type CipherTextResult as l, type ComplianceCheckResponse as m, type CreateGeofenceRuleRequest as n, type CreateJurisdictionRequest as o, type CreateLocationRequestRequest as p, type DashboardMetrics as q, type DecryptedCipherText as r, type DeviceFingerprint as s, type DeviceTrustResult as t, type GeoIPResult as u, type GeofenceAction as v, type GeofenceEvaluation as w, type GeofenceRule as x, type GeofenceRuleType as y, type GeolocationAlert as z };
+export { type UseLocationRequestsResult as $, type APIError as A, type GeolocationClientConfig as B, type CipherTextCustomerData as C, type DeviceFingerprintRequest as D, type GeolocationConfigResponse as E, type GeolocationRecord as F, GeolocationClient as G, type LocationCaptureRequest as H, type LocationCaptureResponse as I, type JurisdictionConfig as J, type LocationRequestChannel as K, type LocationVerification as L, type LocationRequestResult as M, type LocationRequestStatus as N, type LocationShareInfo as O, type UpdateGeofenceRuleRequest as P, type UpdateJurisdictionRequest as Q, type ResendLocationRequestRequest as R, type UseAlertsOptions as S, type UseAlertsResult as T, type UpdateDeviceTrustRequest as U, type ValidateCipherTextResponse as V, type UseGeolocationOptions as W, type UseGeolocationResult as X, type UseLocationCaptureOptions as Y, type UseLocationCaptureResult as Z, type UseLocationRequestsOptions as _, type LocationRequest as a, type ValidateCipherTextRequest as a0, type VerifyIPRequest as a1, type LocationRequestFilters as b, type LocationRequestListResponse as c, type AlertFilters as d, type AlertListResponse as e, type AlertSeverity as f, type AlertStatus as g, type AlertType as h, type CipherTextOptions as i, type CipherTextPayload as j, type CipherTextReason as k, type CipherTextResult as l, type ComplianceCheckResponse as m, type CreateGeofenceRuleRequest as n, type CreateJurisdictionRequest as o, type CreateLocationRequestRequest as p, type DashboardMetrics as q, type DecryptedCipherText as r, type DeviceFingerprint as s, type DeviceTrustResult as t, type GeoIPResult as u, type GeofenceAction as v, type GeofenceEvaluation as w, type GeofenceRule as x, type GeofenceRuleType as y, type GeolocationAlert as z };

package/dist/{client-CRZea-eJ.d.mts → client-Dps40EtF.d.mts}

@@ -1,4 +1,4 @@
-import { D as DeviceFingerprintRequest, L as LocationVerification, V as ValidateCipherTextResponse, a as LocationRequest, G as GeolocationClient, b as LocationRequestFilters, c as LocationRequestListResponse } from './client-BG8KtVMc.mjs';
+import { D as DeviceFingerprintRequest, L as LocationVerification, V as ValidateCipherTextResponse, a as LocationRequest, G as GeolocationClient, b as LocationRequestFilters, c as LocationRequestListResponse } from './client-CvWNRwwg.mjs';
 import { RiskProfileClient } from './risk-profile/index.mjs';
 import { V as VesantConfig, R as RequestOptions } from './client-q9fN8Hhf.mjs';
 import { C as CustomerProfile } from './types-BOFaMQxI.mjs';

package/dist/{client-749WqhDT.d.ts → client-SMxqod4j.d.ts}

@@ -1,4 +1,4 @@
-import { D as DeviceFingerprintRequest, L as LocationVerification, V as ValidateCipherTextResponse, a as LocationRequest, G as GeolocationClient, b as LocationRequestFilters, c as LocationRequestListResponse } from './client-D9JZgN3X.js';
+import { D as DeviceFingerprintRequest, L as LocationVerification, V as ValidateCipherTextResponse, a as LocationRequest, G as GeolocationClient, b as LocationRequestFilters, c as LocationRequestListResponse } from './client-0NOPDnT0.js';
 import { RiskProfileClient } from './risk-profile/index.js';
 import { V as VesantConfig, R as RequestOptions } from './client-q9fN8Hhf.js';
 import { C as CustomerProfile } from './types-UGyDl1fd.js';

package/dist/compliance/index.d.mts

@@ -1,6 +1,6 @@
 import { B as BlockReason } from '../types-CBQRNL-l.mjs';
-export { C as ComplianceClient, a as ComplianceLocationRequestInput, b as ComplianceLocationRequestResult, c as CurrencyRates, D as DEFAULT_CURRENCY_RATES, E as EventVerificationRequest, d as EventVerificationResponse, L as LoginVerificationRequest, e as LoginVerificationResponse, R as RegistrationVerificationRequest, f as RegistrationVerificationResponse, T as TransactionRiskResult, g as TransactionVerificationRequest, h as TransactionVerificationResponse } from '../client-CRZea-eJ.mjs';
-export { p as CreateLocationRequestRequest, H as LocationCaptureRequest, I as LocationCaptureResponse, a as LocationRequest, K as LocationRequestChannel, b as LocationRequestFilters, c as LocationRequestListResponse, M as LocationRequestResult, N as LocationRequestStatus, O as LocationShareInfo, R as ResendLocationRequestRequest } from '../client-BG8KtVMc.mjs';
+export { C as ComplianceClient, a as ComplianceLocationRequestInput, b as ComplianceLocationRequestResult, c as CurrencyRates, D as DEFAULT_CURRENCY_RATES, E as EventVerificationRequest, d as EventVerificationResponse, L as LoginVerificationRequest, e as LoginVerificationResponse, R as RegistrationVerificationRequest, f as RegistrationVerificationResponse, T as TransactionRiskResult, g as TransactionVerificationRequest, h as TransactionVerificationResponse } from '../client-Dps40EtF.mjs';
+export { p as CreateLocationRequestRequest, H as LocationCaptureRequest, I as LocationCaptureResponse, a as LocationRequest, K as LocationRequestChannel, b as LocationRequestFilters, c as LocationRequestListResponse, M as LocationRequestResult, N as LocationRequestStatus, O as LocationShareInfo, R as ResendLocationRequestRequest } from '../client-CvWNRwwg.mjs';
 import '../risk-profile/index.mjs';
 import '../client-q9fN8Hhf.mjs';
 import '../types-BOFaMQxI.mjs';

package/dist/compliance/index.d.ts

@@ -1,6 +1,6 @@
 import { B as BlockReason } from '../types-CBQRNL-l.js';
-export { C as ComplianceClient, a as ComplianceLocationRequestInput, b as ComplianceLocationRequestResult, c as CurrencyRates, D as DEFAULT_CURRENCY_RATES, E as EventVerificationRequest, d as EventVerificationResponse, L as LoginVerificationRequest, e as LoginVerificationResponse, R as RegistrationVerificationRequest, f as RegistrationVerificationResponse, T as TransactionRiskResult, g as TransactionVerificationRequest, h as TransactionVerificationResponse } from '../client-749WqhDT.js';
-export { p as CreateLocationRequestRequest, H as LocationCaptureRequest, I as LocationCaptureResponse, a as LocationRequest, K as LocationRequestChannel, b as LocationRequestFilters, c as LocationRequestListResponse, M as LocationRequestResult, N as LocationRequestStatus, O as LocationShareInfo, R as ResendLocationRequestRequest } from '../client-D9JZgN3X.js';
+export { C as ComplianceClient, a as ComplianceLocationRequestInput, b as ComplianceLocationRequestResult, c as CurrencyRates, D as DEFAULT_CURRENCY_RATES, E as EventVerificationRequest, d as EventVerificationResponse, L as LoginVerificationRequest, e as LoginVerificationResponse, R as RegistrationVerificationRequest, f as RegistrationVerificationResponse, T as TransactionRiskResult, g as TransactionVerificationRequest, h as TransactionVerificationResponse } from '../client-SMxqod4j.js';
+export { p as CreateLocationRequestRequest, H as LocationCaptureRequest, I as LocationCaptureResponse, a as LocationRequest, K as LocationRequestChannel, b as LocationRequestFilters, c as LocationRequestListResponse, M as LocationRequestResult, N as LocationRequestStatus, O as LocationShareInfo, R as ResendLocationRequestRequest } from '../client-0NOPDnT0.js';
 import '../risk-profile/index.js';
 import '../client-q9fN8Hhf.js';
 import '../types-UGyDl1fd.js';

package/dist/compliance/index.js

@@ -394,6 +394,12 @@ var BaseClient = class {
     if (!config.tenantId?.trim()) {
       throw new ValidationError("tenantId is required and must be a non-empty string", ["tenantId"]);
     }
+    if (typeof fetch === "undefined") {
+      throw new VesantError(
+        "The Vesant SDK requires a global fetch (Node.js >= 18). Upgrade Node or provide a fetch polyfill.",
+        "RUNTIME_UNSUPPORTED"
+      );
+    }
     this.interceptors = config.interceptors || [];
     this.logger = config.logger || createConsoleLogger();
     let environment = config.environment;
@@ -738,6 +744,61 @@ var BaseClient = class {
   }
 };
 
+// src/geolocation/integrity.ts
+var isNil = (v) => v === null || v === void 0;
+function assessGpsIntegrity(input, opts = {}) {
+  const flags = [];
+  const now = opts.now ?? (() => Date.now());
+  const maxAgeMs = opts.maxAgeMs ?? 6e4;
+  const minAccuracy = opts.minAccuracyMeters ?? 1;
+  const { accuracy, altitude, altitudeAccuracy, heading, speed, timestamp } = input;
+  if (isNil(accuracy)) {
+    flags.push("accuracy_missing");
+  } else if (accuracy === 0) {
+    flags.push("accuracy_zero");
+  } else if (accuracy < minAccuracy) {
+    flags.push("accuracy_implausibly_small");
+  }
+  const hasMotion = !isNil(heading) || !isNil(speed);
+  if (hasMotion && (isNil(accuracy) || accuracy === 0)) {
+    flags.push("motion_without_accuracy");
+  }
+  if (!isNil(altitude) && isNil(altitudeAccuracy)) {
+    flags.push("altitude_without_accuracy");
+  }
+  if (timestamp !== void 0 && now() - timestamp > maxAgeMs) {
+    flags.push("stale_timestamp");
+  }
+  if (opts.permissionState === "denied" || opts.permissionState === "prompt") {
+    flags.push(`permission_${opts.permissionState}`);
+  }
+  return { suspicious: flags.length > 0, flags };
+}
+function gpsIntegrityInputFromPosition(position) {
+  const c = position.coords;
+  return {
+    latitude: c.latitude,
+    longitude: c.longitude,
+    accuracy: c.accuracy,
+    altitude: c.altitude,
+    altitudeAccuracy: c.altitudeAccuracy,
+    heading: c.heading,
+    speed: c.speed,
+    timestamp: position.timestamp
+  };
+}
+async function probeGeolocationPermission() {
+  try {
+    if (typeof navigator === "undefined" || !navigator.permissions?.query) {
+      return "unavailable";
+    }
+    const status = await navigator.permissions.query({ name: "geolocation" });
+    return status.state;
+  } catch {
+    return "unavailable";
+  }
+}
+
 // src/geolocation/ciphertext.ts
 var CIPHER_TEXT_EXPIRY_MINUTES = 5;
 async function computeHMAC(key, message) {
@@ -790,6 +851,7 @@ async function requestGPSLocation(timeout = 1e4, highAccuracy = true) {
   if (typeof navigator === "undefined" || !navigator.geolocation) {
     return null;
   }
+  const permissionState = await probeGeolocationPermission();
   return new Promise((resolve) => {
     navigator.geolocation.getCurrentPosition(
       (position) => {
@@ -806,6 +868,7 @@ async function requestGPSLocation(timeout = 1e4, highAccuracy = true) {
           resolve(null);
           return;
         }
+        const { flags } = assessGpsIntegrity(gpsIntegrityInputFromPosition(position), { permissionState });
         resolve({
           latitude,
           longitude,
@@ -814,7 +877,8 @@ async function requestGPSLocation(timeout = 1e4, highAccuracy = true) {
           altitude_accuracy: position.coords.altitudeAccuracy ?? void 0,
           heading: position.coords.heading ?? void 0,
           speed: position.coords.speed ?? void 0,
-          timestamp: position.timestamp
+          timestamp: position.timestamp,
+          integrity_flags: flags.length ? flags : void 0
         });
       },
       () => {
@@ -881,6 +945,9 @@ async function generateCipherText(options, config) {
     );
     if (location) {
       locationData = location;
+      if (location.integrity_flags?.length) {
+        warnings.push(`GPS integrity flags (advisory): ${location.integrity_flags.join(", ")}`);
+      }
     } else if (gpsRequiredByConfig) {
       throw new VesantError(
         `GPS location is required for ${options.reason} by tenant configuration, but GPS was not available or permission was denied`,
@@ -975,8 +1042,8 @@ var GeolocationClient = class extends BaseClient {
    * ```
    */
   async verifyIP(request, requestOptions) {
-    if (!request.ip_address?.trim()) {
-      throw new ValidationError("ip_address is required and must be a non-empty string", ["ip_address"]);
+    if (request.ip_address !== void 0 && !request.ip_address.trim()) {
+      throw new ValidationError("ip_address, when provided, must be a non-empty string", ["ip_address"]);
     }
     return this.requestWithRetry("/api/v1/geo/verify", {
       method: "POST",
@@ -1326,20 +1393,12 @@ var GeolocationClient = class extends BaseClient {
    *
    * @example
    * ```typescript
-   * // Using GPS (preferred)
+   * // GPS (the web SDK is GPS + IP only; the server handles the IP fallback)
    * const result = await client.captureLocation(token, {
    *   latitude: 37.7749,
    *   longitude: -122.4194,
    *   accuracy: 10
    * });
-   *
-   * // Using WiFi positioning (fallback)
-   * const result = await client.captureLocation(token, {
-   *   wifi_networks: [
-   *     { macAddress: "00:11:22:33:44:55", signalStrength: -50 },
-   *     { macAddress: "AA:BB:CC:DD:EE:FF", signalStrength: -70 }
-   *   ]
-   * });
    * ```
    */
   async captureLocation(token, capture, requestOptions) {