verified against 2.15.1 rather than remembered, because the remembered version
is wrong: every tutorial sends letsencrypt_email and letsencrypt_agree, and
this NPM rejects both — `meta` is additionalProperties:false. the email comes
from the NPM ACCOUNT, looked up in internal/certificate.js, which refuses with
"a valid email address must be set on your user account" if it has none. that
account here has one; checked.
so for a name that already resolves publicly the whole body is provider plus
domain_names. HTTP-01, nothing else to arrange. the DNS-01 shape is written
down beside it for the private case, along with the fact that the agent cannot
fill dns_provider_credentials in — officer never returns a stored DNS key, and
reaching for one is the refusal-shaped mistake this skill already warns about.
folded the old trailing "not built" section into it rather than leaving two
places saying the same thing differently.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Officer-Session: 656f5c85-e49a-4f1f-b9f3-042a04b4d043
pastilhasandClaude Opus 5
39692ea89b