feat(surfaces): expose H3 safely across Mold

[jamesbrink]

Part of the MiniMax H3 native audio-video milestone (tracking: #814). Expose H3 through one capability/request authority across catalog, CLI/server, Studio, desktop, iPhone remote, web, TUI, and Discord—with ordinary model behavior while preserving exact routing and artifact authority.

Catalog and installation

• Add two task-aware rows/variants for FL2VA and Ref2VA while deduplicating shared Qwen, processor, visual VAE, and AudioVAE components.
• Built-in manifests outrank ambiguous live Hugging Face repository synthesis; never bulk-download the roughly 498 GB repository containing duplicate original/converted layouts.
• Show full/pruned/quantized tier, installed/shared component ownership, required disk/host RAM/VRAM, CUDA/attention requirements, source, format, license, and task limits only from supplied metadata.
• Apply the reviewed narrow acquisition authority: only the two pinned compact manifests are discoverable/downloadable upstream-direct; arbitrary IDs cannot bypass it, and an installed model remains independently subject to host execution capability.
• Use planModelInstall for every merged fleet row and preserve exact-host download/recovery ownership.

Shared Studio capability UX

• Add H3 to shared generation capabilities, resolution/duration/frame-offset logic, prompt requirements, conditioning-aware ExpandTask, model filtering, and video/audio budget helpers.
• Present Output as video with synchronized audio, fixed 24 fps, aligned actual duration, no CFG/negative prompt, and only the sampler/step choices H3 supports.
• Provide accessible endpoint controls for first-only, last-only, and first+last FL2VA.
• Provide an ordered mixed-reference editor with 44pt controls, drag/reorder alternatives, kind badges, video-soundtrack association, duration/count budget, structured errors, and no denoise-strength implication.
• Preserve references/endpoints in templates, prepared expansion, stale-work recovery, exact-host retry, queue rows, gallery provenance, and “use as prompt/source.”

Surface matrix

• Server and CLI: full authoritative request/placement/errors/progress/output.
• Desktop and web: full T2VA/FL2VA/Ref2VA authoring and gallery playback/export.
• iPhone: remote-only parity, Keychain-only host key, bounded native media upload, safe-area/44pt/16px invariants, and authenticated playback/save.
• TUI and Discord: capability-driven fields, bounded attachment/reference syntax, clear unsupported/limit errors, and synchronized video output.
• Machines/host detail: actual H3 component inventory, disk usage, download state, queue plan, attention/backend readiness, host RAM, and cancellation.

Acceptance

• Contract tests prove every client hides/rejects unsupported fields from server capabilities rather than family-string guesses.
• End-to-end tests preserve ordered references and exact host/task partition through missing-model pull, cancellation, reconnect, retry, and saved metadata.
• No surface logs/prompts/URLs expose durable API keys or reference media; media tickets remain exact-path and time-limited.
• Mobile and desktop use shared model-kind labels and show the textual 18+ NSFW badge when catalog metadata supplies it.
• All frontend, desktop, iOS, web architecture/dead-code, Rust, docs, and release-sync gates pass.

Dependencies

• Governance chore(legal): govern MiniMax H3 distribution and expanded use #831 is complete. Remaining dependencies are feat(core): add H3 manifests, capabilities, and validation #816, feat(core): add ordered heterogeneous H3 reference contracts #837, feat(h3): implement T2VA and first/last-frame FL2VA #838, feat(h3): implement ordered multimodal Ref2VA #825, perf(h3): support Comfy pruned AdaLN and quantized layouts #839, perf(h3): ship memory-efficient full attention #840, and perf(h3): add block streaming and exact memory admission #830 according to their current technical status.

[jamesbrink]

Merged #910 at 27913923d932b5ff1ffd96428be6f606fadfff38. Web, desktop, and iPhone now route gallery images into dedicated H3 authoring authority instead of generic fields the serializer drops; iPhone request-size accounting follows only the active H3 wire task. Shared browser/server canonicalization prevents alias drift across upload, placement, queue, retry metadata, and gallery flows, while unknown partitions fail closed.

Independent review caught and verified fixes for future-partition substitution and inactive-media false rejection. The exact reviewed squash diff and all focused Rust/frontend/type/format/conflict gates passed. Public discovery/download/activation and full cross-surface runnable UAT remain gated and this issue stays open.

[jamesbrink]

Handoff at exact main d18bd43: 5 of 15 checklist items are complete. The ten remaining items cover task-aware model rows, built-in manifest precedence, supplied metadata, continued #831 gating and future acceptance flow, planModelInstall routing, and full CLI/server/desktop/web/iPhone/TUI/Discord/Machines behavior. Existing authoring and private ingress seams do not authorize public controls. Keep every discovery/download/generate path fail-closed while #831 is open.