OpenClaw rebrands npm package and enhances onboarding security

OpenClaw has undergone a significant rebranding with the recent update on January 29, 2026, where the npm package and CLI have been renamed to `openclaw`. This change includes the introduction of a compatibility shim and the organization of extensions under the `@openclaw/*` scope, enhancing the overall developer experience. Additionally, onboarding processes have been fortified with improved security warnings and the integration of the Venice API key into non-interactive flows, ensuring a smoother transition for new users.

The latest release also addresses various aspects of agent workflow and configuration management, such as auto-migrating legacy state paths and maintaining consistent config resolution. Notably, the update includes enhancements to the Gateway, which now warns about hook tokens in query parameters and introduces a dangerous Control UI device auth bypass flag, along with audit warnings. These updates reflect OpenClaw's commitment to improving developer tooling and API security, making it easier for developers to integrate and utilize the platform effectively.