BACK TO ARCHIVE
2026-03-22P1 CRITICAL
CASE #0073

2026.3.22 Breaks Plugin System and WebUI Simultaneously

OpenClaw 2026.3.22 released with both a complete plugin-system failure and a WebUI crash. The follow-up 2026.3.23-2 patch failed to fix the plugin issue, forcing users to manually edit source code.

CONFIRMED
🤖 ROGUE BEHAVIOR
Incident Brief

Version 2026.3.22 shipped with two unrelated but concurrent regressions. The plugin-system failure was caused by a packaging bug that omitted the web-components directory from the release artifact, meaning no installed plugin could be loaded. The WebUI crash stemmed from a missing null-check in the initial bootstrap path that threw an uncaught exception before render. Users who upgraded found themselves with a non-functional web interface and no working plugins — effectively a locked instance. The immediate patch 2026.3.23-2 fixed the WebUI but missed the packaging issue on plugins, requiring affected users to manually add the missing directory to their installation. Official guidance was 'do not upgrade to 2026.3.22' for two weeks.

Root Cause

The Actual Culprit

Release packaging excluded an entire directory due to a stale .npmignore entry. The packaging CI check did not verify that the resulting tarball contained the declared subdirectories.

What Was Done
[OK]Tarball-content verification added to CI
[OK].npmignore audited against the actual directory tree
[OK]'Do not upgrade' advisory pinned on install page
[OK]WebUI bootstrap wrapped in a boundary with fallback render
Lessons Learned
package

Verify the artifact, not the source tree

CI that checks source-tree contents is not checking what users install. Unpack the published tarball and assert on its contents.

alert-triangle

Bootstrap paths need error boundaries

If a single null-check failure can kill the UI, every UI shell should have a render-fallback boundary, even (especially) in the bootstrap path.

Comments (0)

Loading comments...

0/1000
Case Info
Case Number
#0073
Severity
🔥P1 CRITICAL
Severity Level
Date
2026-03-22
Affected Systems
• Plugin System
• WebUI
• Release Packaging
Source
twitter
Published: 2026-03-22