feat: create plushies from character wardrobe outfits

src/main/java/net/tfminecraft/rpcharacters/RPCharacters.java

@@ -311,6 +311,9 @@ public void onEnable() {
 		var focusCommand = new net.tfminecraft.rpcharacters.focus.FocusCommand(this);
 		getCommand("focus").setExecutor(focusCommand);
 		getCommand("focus").setTabCompleter(focusCommand);
+		var plushieCommand = new net.tfminecraft.rpcharacters.wardrobe.PlushieCommand();
+		getCommand("plushie").setExecutor(plushieCommand);
+		getCommand("plushie").setTabCompleter(plushieCommand);
 		startManagers();
 		getCommand(commandManager.cmd1).setExecutor(commandManager);
 		getCommand("rpcharacter").setTabCompleter(new CommandTabCompleter());

src/main/java/net/tfminecraft/rpcharacters/api/ProvinceSystemClient.java

@@ -298,6 +298,16 @@ public static SimpleResult fetchWornSkin(String playerUuid, String characterId)
 		return request("GET", "/characters/plugin/wardrobe/" + uuid + "/" + cid + "/worn", null);
 	}
 
+	/** Read one saved outfit without reconciling slots or changing the worn skin. */
+	public static SimpleResult fetchWardrobeSkin(String playerUuid, String characterId, String slot) {
+		String uuid = sanitizePathSegment(playerUuid);
+		String cid = sanitizePathSegment(characterId);
+		if (uuid == null || cid == null || slot == null || !List.of("base", "extra_1", "extra_2").contains(slot)) {
+			return SimpleResult.fail("invalid player, character or outfit");
+		}
+		return request("GET", "/characters/plugin/wardrobe/" + uuid + "/" + cid + "/slots/" + slot, null);
+	}
+
 	/**
 	 * POST /characters/plugin/wardrobe/{playerUuid}/{characterId}/active
 	 * Same as PATCH — POST used because Java HttpURLConnection often rejects PATCH.

src/main/java/net/tfminecraft/rpcharacters/wardrobe/PlushieCommand.java

@@ -0,0 +1,152 @@
+package net.tfminecraft.rpcharacters.wardrobe;
+
+import java.nio.charset.StandardCharsets;
+import java.util.Arrays;
+import java.util.Base64;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.UUID;
+
+import org.bukkit.Bukkit;
+import org.bukkit.Material;
+import org.bukkit.command.Command;
+import org.bukkit.command.CommandExecutor;
+import org.bukkit.command.CommandSender;
+import org.bukkit.command.TabCompleter;
+import org.bukkit.entity.Player;
+import org.bukkit.inventory.ItemStack;
+import org.bukkit.inventory.meta.SkullMeta;
+
+import com.destroystokyo.paper.profile.ProfileProperty;
+import com.google.gson.JsonObject;
+import com.google.gson.JsonParser;
+
+import net.kyori.adventure.text.Component;
+import net.kyori.adventure.text.format.TextDecoration;
+import net.tfminecraft.rpcharacters.RPCharacters;
+import net.tfminecraft.rpcharacters.api.ProvinceSystemClient;
+import net.tfminecraft.rpcharacters.playerlist.SkinPortrait;
+import net.tfminecraft.tlibs.character.CharacterInfo;
+import net.tfminecraft.tlibs.character.Characters;
+
+/** Gives a static head from an explicitly selected character outfit. */
+public final class PlushieCommand implements CommandExecutor, TabCompleter {
+
+	public static final String PERMISSION = "rpchar.plushie.give";
+	private static final List<String> SLOTS = List.of("base", "extra_1", "extra_2");
+	private final Set<UUID> pending = new HashSet<>();
+
+	@Override
+	public boolean onCommand(CommandSender sender, Command command, String label, String[] args) {
+		if (!sender.hasPermission(PERMISSION)) {
+			sender.sendMessage("You do not have permission to create plushies.");
+			return true;
+		}
+		if (!(sender instanceof Player player)) {
+			sender.sendMessage("Run this command in game to receive the plushie.");
+			return true;
+		}
+		int outfit = 1;
+		int nameLength = args.length;
+		if (args.length > 1 && args[args.length - 1].matches("-?\\d+")) {
+			try {
+				outfit = Integer.parseInt(args[--nameLength]);
+			} catch (NumberFormatException invalid) {
+				outfit = 0;
+			}
+		}
+		if (nameLength == 0 || outfit < 1 || outfit > SLOTS.size()) {
+			sender.sendMessage("Usage: /" + label + " <character name or UUID> [1|2|3]");
+			return true;
+		}
+		String name = String.join(" ", Arrays.copyOf(args, nameLength)).trim();
+		var identity = RPCharacters.getCharacterIdentity();
+		List<CharacterInfo> matches;
+		try {
+			matches = identity.info(UUID.fromString(name)).stream().toList();
+		} catch (IllegalArgumentException notUuid) {
+			matches = identity.findByName(name);
+		}
+		if (matches.size() != 1) {
+			sender.sendMessage(matches.isEmpty() ? "Character not found: " + name
+					: "More than one character has that name. Use their character UUID: "
+							+ matches.stream().map(info -> info.ref().characterId().toString()).toList());
+			return true;
+		}
+		UUID playerId = player.getUniqueId();
+		if (!pending.add(playerId)) {
+			sender.sendMessage("Your previous plushie is still loading.");
+			return true;
+		}
+		CharacterInfo character = matches.getFirst();
+		String slot = SLOTS.get(outfit - 1);
+		int selectedOutfit = outfit;
+		var session = Characters.currentSession(player).orElse(null);
+		player.sendMessage("Loading " + character.name() + "'s wardrobe outfit " + outfit + "…");
+		Bukkit.getScheduler().runTaskAsynchronously(RPCharacters.plugin, () -> {
+			String texture = loadTexture(character, slot);
+			Bukkit.getScheduler().runTask(RPCharacters.plugin, () -> {
+				pending.remove(playerId);
+				if (!player.isOnline() || !player.hasPermission(PERMISSION)) return;
+				if (session == null ? Characters.currentSession(player).isPresent() : !Characters.isCurrent(session)) {
+					player.sendMessage("Your character changed while loading. Run the command again.");
+					return;
+				}
+				if (texture == null) {
+					player.sendMessage("That outfit is unavailable, locked or has no ready skin. No plushie was created.");
+					return;
+				}
+				ItemStack head = createHead(character.name(), texture);
+				if (!player.getInventory().addItem(head).isEmpty()) {
+					player.sendMessage("Your inventory is full. Make room and try again.");
+					return;
+				}
+				player.sendMessage("Created " + character.name() + " Plushie from wardrobe outfit " + selectedOutfit + ".");
+			});
+		});
+		return true;
+	}
+
+	static String loadTexture(CharacterInfo character, String slot) {
+		try {
+			String id = character.ref().characterId().toString();
+			var result = ProvinceSystemClient.fetchWardrobeSkin(character.ref().ownerId().toString(), id, slot);
+			if (!result.ok) return null;
+			JsonObject body = JsonParser.parseString(result.body).getAsJsonObject();
+			if (!id.equalsIgnoreCase(body.get("character_id").getAsString())
+					|| !slot.equals(body.get("slot").getAsString())
+					|| body.get("signature").getAsString().isBlank()) return null;
+			var texture = SkinPortrait.parseTextures(body.get("value").getAsString());
+			if (texture == null) return null;
+			// A URL-only property excludes changing profile timestamps, identities and signatures.
+			JsonObject skin = new JsonObject();
+			skin.addProperty("url", texture.url());
+			JsonObject textures = new JsonObject();
+			textures.add("SKIN", skin);
+			JsonObject profile = new JsonObject();
+			profile.add("textures", textures);
+			return Base64.getEncoder().encodeToString(profile.toString().getBytes(StandardCharsets.UTF_8));
+		} catch (RuntimeException unavailable) {
+			return null;
+		}
+	}
+
+	static ItemStack createHead(String characterName, String texture) {
+		ItemStack head = new ItemStack(Material.PLAYER_HEAD);
+		SkullMeta meta = (SkullMeta) head.getItemMeta();
+		UUID id = UUID.nameUUIDFromBytes(("rpcharacters:head:" + texture).getBytes(StandardCharsets.UTF_8));
+		var profile = Bukkit.createProfile(id);
+		profile.setProperty(new ProfileProperty("textures", texture));
+		meta.setPlayerProfile(profile);
+		meta.displayName(Component.text(characterName + " Plushie").decoration(TextDecoration.ITALIC, false));
+		head.setItemMeta(meta);
+		return head;
+	}
+
+	@Override
+	public List<String> onTabComplete(CommandSender sender, Command command, String alias, String[] args) {
+		if (!sender.hasPermission(PERMISSION) || args.length < 2) return List.of();
+		return List.of("1", "2", "3").stream().filter(number -> number.startsWith(args[args.length - 1])).toList();
+	}
+}

src/main/resources/plugin.yml

@@ -8,6 +8,10 @@ depend: [TLibs, MMOCore, TFMCWeb, MMOItems, MythicLib]
 softdepend: [ProtocolLib, PlaceholderAPI, LuckPerms, WorldGuard, SimpleFactions, GSit, Codex, ModelEngine]
 
 commands:
+  plushie:
+    description: Create a plushie from a character's wardrobe outfit
+    usage: /plushie <character name or UUID> [1|2|3]
+    permission: rpchar.plushie.give
   class:
     description: Choose your character's base class
     aliases: [c]
@@ -54,6 +58,9 @@ commands:
     usage: /<command> collect | list | show | hold | release | decide | assign | retry | waive | revert
     description: Collect an inheritance; staff estate tools
 permissions:
+  rpchar.plushie.give:
+    description: Create plushies from character wardrobe outfits
+    default: op
   rpchar.focus.admin:
     description: Restore character focus and reload focus configuration
     default: op

src/test/java/net/tfminecraft/rpcharacters/api/ProvinceSystemClientTest.java

@@ -48,6 +48,22 @@ void respond(String json) {
         gateway.verify(() -> GatewayClient.request("POST", "/characters/plugin/wills/applied", "{\"realm_id\":\"dev\"}"));
     }
 
+    @Test void outfitLookupUsesTheReadOnlySlotRouteAndRejectsOtherSources() {
+        for (String invalid : Arrays.asList(null, " ", "../x", "x/y", "x\\y")) {
+            assertFalse(fetchWardrobeSkin(invalid, "char", "base").ok);
+            assertFalse(fetchWardrobeSkin("owner", invalid, "base").ok);
+        }
+        for (String invalid : Arrays.asList(null, "", "masked", "../base", "1")) {
+            assertFalse(fetchWardrobeSkin("owner", "char", invalid).ok);
+        }
+        gateway.verifyNoInteractions();
+        for (String slot : List.of("base", "extra_1", "extra_2")) {
+            assertTrue(fetchWardrobeSkin(" owner ", " char ", slot).ok);
+            gateway.verify(() -> GatewayClient.request("GET", "/characters/plugin/wardrobe/owner/char/slots/" + slot, null));
+        }
+        gateway.verifyNoMoreInteractions();
+    }
+
     @Test void resultFactoriesExposeSuccessPayloadsAndFailureDetails() {
         var catalog = CatalogPushResult.success(1, 2, 3, 4, "now");
         assertTrue(catalog.ok); assertEquals(1, catalog.stages); assertEquals(2, catalog.races);