fix(chat): Campaign CH user-gate round 2 -- portal notice rerouted to SpewBox, verbatim /help extraction, jump-in-air evidence

Item 2: retail's portal-space "In Portal Space..." notice is the SpewBox
(ECM_UI::SendNotice_DisplayStringInfo(0x1A,...) -> AddTextToScroll(str,
0x1A, 1, 0), hardcoded to the SpewBox per the decomp), not a dedicated
centered overlay. PortalWaitNoticeController and its lease are deleted;
PortalTunnelPresentation's per-rotation-segment cadence now writes
straight into RuntimeCommunicationState.AddText(ClientLocal) -- the
SpewBox's own dedupe-at-index-0 handles the repetition exactly as
retail's does. Register row AP-184 records the surface fix and the AP-178
scope extension.

Items 4+5: /help text was partially fabricated -- the user caught the
"/help death" meta-message. Generalized
tools/pdb-extract/sweep_weenie_strings.py to decode narrow
PStringBase<char> literals (the ClientCommunicationSystem::Help* family's
shape) alongside its original UTF-16LE support, then swept every
HelpXxxGroup function's exact byte extent against the PDB-paired
acclient.exe. 4 of 7 group topics (death/status/text/allegiances) are now
complete verbatim listings; the other 3 (channels/chatting/commands) keep
an honest UNVERIFIED note citing HelpStupidChannelHack @0x0056f290 (a
genuinely undecodable BN-mislabeled-fragment mechanism) instead of the
old fabricated sentinel. 7 of ~35 channel one-liners are also now
verbatim. ISSUES.md #364 tracks the remainder;
RetailCommandHelpTableTests.cs pins every result byte-exact.

Item 1: jump-in-air refusal still silent live is NOT reproduced and NOT
speculatively fixed. Exhaustive static re-audit found the mechanism
correct by construction (single-writer OnWalkable, exactly-once-per-frame
Update()/Capture(), no interfering edge-history resets). A live headless
repro (new jump-probe bot policy, real ACE connect) was blocked --
probeaccount2 has no character, and the graphical client already owned
testaccount this session so the task's own fallback rule forbade using
it. Two temporary probes are left behind ACDREAM_PROBE_JUMP=1 (blocked
entirely in Headless by the existing multi-session static-state guard --
graphical-only for the next round).

Item 3 confirmed fixed, no regression. Item 6 (resize: no diagonal
cursors, cannot grow Y from bottom-right) folded into CH6a's existing
scope.

Full Release suite: 12,267 passed / 4 skipped / 0 failed (up from
12,221/4/0).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/AcDream.Runtime/Gameplay/PlayerMovementController.cs

@@ -967,6 +967,20 @@ public sealed class PlayerMovementController
     /// </summary>
     private void ReportJumpRefusal(WeenieError result)
     {
+        // Campaign CH user-gate round 2, item 1 (TEMPORARY): print
+        // UNCONDITIONALLY, before the OnInterfaceText null-check, so the
+        // probe distinguishes "ReportJumpRefusal was never called with a
+        // reportable result" from "it was called but OnInterfaceText was
+        // null" from "the callback fired but downstream dropped the line."
+        if (AcDream.Core.Physics.PhysicsDiagnostics.ProbeJumpEnabled)
+        {
+            Console.WriteLine(
+                $"[jump] ReportJumpRefusal result={result} "
+                + $"hasCallback={OnInterfaceText is not null} "
+                + $"onWalkable={_body.OnWalkable} "
+                + $"prevJumpHeld={_prevJumpHeld}");
+        }
+
         if (OnInterfaceText is null)
             return;
 
@@ -2595,6 +2609,19 @@ public sealed class PlayerMovementController
             // in-air raises exactly one report, not one per frame.
             ReportJumpRefusal(WeenieError.NotGrounded);
         }
+
+        // Campaign CH user-gate round 2, item 1 (TEMPORARY): per-tick trace
+        // bracketing every frame where jump is (or was) held, so the probe
+        // can see the OnWalkable transition around a live jump attempt
+        // without spamming every ordinary frame.
+        if (AcDream.Core.Physics.PhysicsDiagnostics.ProbeJumpEnabled
+            && (input.Jump || _prevJumpHeld))
+        {
+            Console.WriteLine(
+                $"[jump-tick] input.Jump={input.Jump} prevJumpHeld={_prevJumpHeld} "
+                + $"onWalkable={_body.OnWalkable} jumpCharging={_jumpCharging} "
+                + $"jumpExtent={_jumpExtent:F2}");
+        }
         _prevJumpHeld = input.Jump;
 
         // ── 2. Run admitted complete-object quanta ────────────────────────────