Capability System

Data Access = Capability (app-level) AND Consent (user-level)

// Core tier
WearData {
  heartRate: 72,  // 1-min average
  hrv: 45,        // 1-min RMSSD
  sleepStage: 'light'
}

// Extended tier
WearData {
  heartRate: 72,              // 30s average
  heartRateVariability: 45,   // 30s RMSSD
  heartRateTimeSeries: [...], // 30s series
  motion: {...}               // Full motion data
}

// Research tier
WearData {
  heartRate: 72,
  rrIntervals: [...],  // Full RR series
  ppgWaveform: [...],  // Raw PPG (if available)
  motion: {...}
}

// Core tier
PhoneContext {
  screenActive: true,
  motionState: 'stationary',
  appCategory: 'hash_abc123'  // Hashed
}

// Extended tier
PhoneContext {
  screenActive: true,
  motionState: 'stationary',
  appCategory: 'productivity',  // Category
  notificationCount: 3          // Metadata only
}

// Research tier
PhoneContext {
  screenActive: true,
  motionState: 'stationary',
  appIdentifier: 'com.example.app',  // Full identifier
  notificationMetadata: [...]
}

// Core tier
BehaviorMetrics {
  tapCount: 42,
  scrollCount: 15,
  typingCadence: 'medium'
}

// Extended tier
BehaviorMetrics {
  tapCount: 42,
  tapTimings: [...],     // Timing patterns
  scrollVelocity: [...], // Velocity series
  typingRhythm: {...}    // Detailed rhythm
}

// Research tier
BehaviorEvents {
  events: [
    {type: 'tap', timestamp: 1704067200, position: {x: 100, y: 200}},
    {type: 'scroll', timestamp: 1704067201, delta: 50},
    ...
  ]
}

// Core tier
HSI {
  axes: {
    affect: {arousalIndex: 0.72},
    engagement: {engagementStability: 0.68}
  },
  embedding: {
    vector: [...],  // Normalized only
    dimension: 64
  }
}

// Extended tier
HSI {
  axes: {
    affect: {arousalIndex: 0.72, valenceStability: 0.85},
    engagement: {engagementStability: 0.68, interactionCadence: 0.54},
    activity: {...},
    context: {...}
  },
  embedding: {
    vector: [...],  // Full 64D
    dimension: 64,
    metadata: {...}
  }
}

// Research tier
HSI {
  axes: {...},
  embedding: {...},
  fusionState: {
    wearVector: [...],
    phoneVector: [...],
    behaviorVector: [...],
    attentionWeights: [...]
  }
}

{
  "tenantId": "app_xyz_prod",
  "appIdentifier": "com.example.app",
  "capabilities": {
    "tier": "core",
    "modules": {
      "wear": "core",
      "phone": "core",
      "behavior": "core",
      "hsi": "core",
      "cloud": "core"
    },
    "interpretations": ["focus", "emotion"]
  },
  "issuedAt": 1704067200,
  "expiresAt": 1704153600,
  "signature": "..."
}

class WearModule {
  Future<WearData> getBiosignals() async {
    final capabilities = await CapabilityManager.getCapabilities();

    switch (capabilities.wear) {
      case 'core':
        return getCoreWearData();  // 1-min aggregates
      case 'extended':
        return getExtendedWearData();  // 30s + motion
      case 'research':
        return getResearchWearData();  // Raw streams
      default:
        throw UnauthorizedError('Invalid wear capability');
    }
  }
}

def validate_capability(request):
    tenant_id = request.headers.get('X-Synheart-Tenant')
    signature = request.headers.get('X-Synheart-Signature')

    # Validate HMAC signature
    if not verify_hmac(request.body, signature, tenant_id):
        raise AuthenticationError('Invalid signature')

    # Retrieve tenant capabilities
    capabilities = db.get_tenant_capabilities(tenant_id)

    # Check endpoint access
    if request.path == '/v1/ingest/hsi-research':
        if capabilities.tier != 'research':
            raise AuthorizationError('Research tier required')

    return capabilities

logger.info('Capability check', {
  'module': 'wear',
  'requested': 'extended',
  'granted': 'core',
  'result': 'downgraded'
});

// Get current capability tier
CapabilityTier tier = await Synheart.getCapabilityTier();
// Returns: CapabilityTier.core | .extended | .research

// Check module capability
String wearCap = await Synheart.getModuleCapability('wear');
// Returns: 'core' | 'extended' | 'research'

// Check if capability is granted
bool hasExtended = await Synheart.hasCapability('extended');

// Listen for capability changes
Synheart.onCapabilityChanged.listen((event) {
  print('Capability updated: ${event.tier}');
});

// Set mock capability for testing
Synheart.setMockCapability(CapabilityTier.extended);

// Test extended features
final data = await Synheart.getWearData();
expect(data.heartRateTimeSeries, isNotNull);  // Only in Extended