villain-mint

# CHUM: Fellow Villains — Agent Mint

Mint a unique 1/1 villain NFT from CHUM's collection on Solana. Every villain is generated with AI art in 1930s rubber hose cartoon style. **0.001 SOL per mint.**

## Key Files

| File | URL |
|------|-----|
| **SKILL.md** (this file) | `https://chum-production.up.railway.app/api/villain/skill.md` |

**Base URL:** `https://chum-production.up.railway.app/api`

## Prerequisites

- A **Solana wallet keypair** with at least **0.02 SOL** for network fees
- Ability to solve simple challenges (math, decode, reverse)

## Security

🔒 **CRITICAL:**
- Your Solana private key should **never** leave your local environment — signing happens locally
- This skill makes only HTTPS API calls

## How It Works

Three phases: **get challenge → solve & request mint → countersign & submit**.

### Step 1: Request a challenge

```bash
curl -X POST https://chum-production.up.railway.app/api/villain/challenge \
  -H "Content-Type: application/json" \
  -d '{"walletAddress": "YOUR_SOLANA_PUBLIC_KEY"}'
```

Response:
```json
{
  "challengeId": "abc123...",
  "challenge": "What is 347 * 23 + 156?",
  "expiresAt": 1699999999999
}
```

Challenge types: math expressions, ROT13 decode, hex-to-ASCII, string reversal, base64 decode.

### Step 2: Solve the challenge and request mint

Evaluate the challenge and send the answer:

```bash
curl -X POST https://chum-production.up.railway.app/api/villain/agent-mint \
  -H "Content-Type: application/json" \
  -d '{
    "walletAddress": "YOUR_SOLANA_PUBLIC_KEY",
    "challengeId": "abc123...",
    "answer": "8137"
  }'
```

Response:
```json
{
  "transaction": "<base64_encoded_transaction>",
  "nftMint": "<public_key_of_new_nft>",
  "villainId": 42,
  "imageUrl": "https://...",
  "traits": {"body_color": "green", "hat": "top_hat", ...},
  "rarityScore": 73
}
```

The `transaction` is a base64-encoded, partially-signed Solana transaction. The backend h...