Add server-side anti-cheat framework (movement/physics/spell/item detection + enforcement)

Introduces a config-gated, server-side anti-cheat / movement-validation
framework. OFF by default (AntiCheat.Enable = 0) — fully inert until enabled.

Core pieces:
- AntiCheatMgr: central scoring manager. Detectors only observe and score via
  a single RecordViolation() ingress; the manager owns ALL enforcement. Score
  decays over time and escalates through capped actions (log -> GM alert ->
  rubberband to last validated position -> kick), with an optional account-level
  autoban accumulator (escalating ban durations, slow hourly decay).
- MovementAnticheat: per-player validator running cheap, event-driven detectors
  on each movement packet — fly/flag-spoof (water-walk/hover/slow-fall/transport/
  swim, aura- or grant-aware), teleport/blink, speed, acceleration gate, vertical
  climb, root/stun-break, opcode-legality, no-clip (VMap LoS), jump (infinite/
  mid-air), fall-damage suppression, packet burst, client-timestamp regression,
  bot-movement heuristic, and spell-cast timing (GCD bypass + cast spam).
- PhysicsValidator: side-effect-free terrain-plausibility stage (float-above /
  below-surface), invoked only on suspicion to stay off the hot path.

Integration: movement validation in the movement opcode handler; spell-injection,
item-in-trade, GO-use and NPC interaction-distance hooks; cast-timing hook;
server-granted movement flags recorded in the Player Set* setters so the
flag-spoof detectors don't fire on legit grants; a rolling latency EWMA fed from
CMSG_PING for latency-aware tolerances. GM commands: .anticheat status / report /
reload / warn / jail / unjail / delete. Violations persist to
character_anticheat_violation; account autoban state to account_anticheat.

Time-sync, the spoof/test GM tooling, and the violation-marker visualizer are
follow-ups that build additively on this core.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Krilliac

cmake/MangosParams.cmake

@@ -1,5 +1,5 @@
 set(MANGOS_EXP "CLASSIC")
 set(MANGOS_PKG "Mangos Zero")
-set(MANGOS_WORLD_VER 2026061702)
+set(MANGOS_WORLD_VER 2026062002)
 set(MANGOS_REALM_VER 2026060300)
 set(MANGOS_AHBOT_VER 2021010100)

src/game/AntiCheat/AntiCheatDefines.h

@@ -0,0 +1,68 @@
+/*
+ * Anti-Cheat / Movement-Validation framework — shared definitions.
+ * Slice 1 (core detection pipeline). See
+ * docs/superpowers/specs/2026-06-17-anticheat-detection-framework-slice1-design.md
+ *
+ * This header carries only enums and small constants so it can be included
+ * widely without pulling heavy dependencies.
+ */
+
+#ifndef MANGOS_ANTICHEAT_DEFINES_H
+#define MANGOS_ANTICHEAT_DEFINES_H
+
+#include "Common.h"
+
+// Types of detected violations. Persisted as the `type` column and used as the
+// index into the (config-driven) scoring weights.
+enum AntiCheatViolationType
+{
+    AC_VIOLATION_NONE            = 0,
+    AC_VIOLATION_SPEED           = 1,   // horizontal speed beyond allowed + tolerance
+    AC_VIOLATION_TELEPORT        = 2,   // single-packet jump beyond latency-adjusted max
+    AC_VIOLATION_VERTICAL        = 3,   // unexplained upward Z movement (no jump/levitate/fly)
+    AC_VIOLATION_FLAG_CONTRADICT = 4,   // movement flags that the server never granted
+    AC_VIOLATION_PHYSICS         = 5,   // position implausible vs terrain/liquid/collision
+    AC_VIOLATION_DESYNC          = 6,   // latency drift / time-sync anomaly (informational)
+    AC_VIOLATION_JUMP            = 7,   // illegal mid-air / infinite jump (re-jump while airborne)
+    AC_VIOLATION_FALL            = 8,   // fall-damage suppression (big drop, no FALL_LAND)
+    AC_VIOLATION_BURST           = 9,   // abnormal burst of movement packets (flood/timing)
+    AC_VIOLATION_PACKETTIMING    = 10,  // client movement timestamp inconsistency
+    AC_VIOLATION_SPELL           = 11,  // cast of a spell the player does not have (injection)
+    AC_VIOLATION_ITEM            = 12,  // illegitimate item use (e.g. using an item in the trade window)
+    AC_VIOLATION_INTERACT        = 13,  // interaction beyond range (remote loot/use/interact attempt)
+    AC_VIOLATION_BOT             = 14,  // bot-like movement (snap-to-waypoint + metronomic timing)
+
+    AC_VIOLATION_MAX
+};
+
+// Escalation actions. Also the meaning of the AntiCheat.Action config ceiling:
+// the manager never applies an action above the configured maximum.
+enum AntiCheatAction
+{
+    AC_ACTION_NONE       = 0,   // disabled
+    AC_ACTION_LOG        = 1,   // record only (log + DB)
+    AC_ACTION_GM_ALERT   = 2,   // notify online GMs
+    AC_ACTION_RUBBERBAND = 3,   // teleport player back to last validated position
+    AC_ACTION_KICK       = 4    // disconnect the session
+};
+
+// Result of the physics-plausibility stage.
+enum AntiCheatPhysicsResult
+{
+    AC_PHYS_OK         = 0,   // position is plausible for the current move state
+    AC_PHYS_SUSPECT    = 1,   // borderline; raise confidence but light weight
+    AC_PHYS_IMPOSSIBLE = 2    // cannot legitimately occupy this position
+};
+
+// Normalised movement state derived once from MovementInfo flags, so every
+// detector reasons over the same interpretation rather than re-reading flags.
+enum AntiCheatMoveState
+{
+    AC_MOVE_GROUND    = 0,
+    AC_MOVE_SWIM      = 1,
+    AC_MOVE_FALL      = 2,
+    AC_MOVE_FLY       = 3,
+    AC_MOVE_TRANSPORT = 4
+};
+
+#endif // MANGOS_ANTICHEAT_DEFINES_H