v0.4.0 — deterministic one-call setup

Deterministic account setup

• One setup.run call handles configured identity/password entry, existing-session reuse, dedicated passkey enrollment, vault persistence, and session establishment.
• Existing and newly enrolled passkeys must pass a fresh isolated assertion before setup reports ready.
• Explicit recovery, account matching, pending-key protection, and actionable missing-prerequisite/verification/runtime errors.
• Compatible configured browser selection and a one-action Connect panel.
• Native OpenClaw download bundles its core dependencies; no separate npm core publication is required.
• Official requirement-path ranking and clearer incomplete-search reporting.

Verification

178 unit tests, 28 surface validators, production synthetic browser acceptance, and 13 read-only live tests passed. One-call setup on an existing real account verified its passkey and established Vanderbilt and Microsoft sessions. Fresh-passkey enrollment on a second account remains a separate deployment acceptance check. Academic enrollment and live cart mutations were not performed.

Installation

Download openclaw-plugin-vutoolkit-0.4.0.tgz and install with openclaw plugins install ./openclaw-plugin-vutoolkit-0.4.0.tgz. Configure your own identity and optional password through your host secret vault, then invoke vutoolkit_setup_run with confirm:true.

The core npm publication still requires authenticated first-publish bootstrap. Do not interpret the downloadable core tarball as an npm registry publication. ClawHub publication has its own security-scan status.