Clawbolt Files

What's Changed

• chore: retire PREMIUM_PLUGIN and adopt the wrapper's leftovers by @njbrake in https://github.com/mozilla-ai/clawbolt/pull/1521

Takes in the last three things the premium deploy wrapper still owned, so it can be reduced to a Dockerfile and some scripts.

PREMIUM_PLUGIN is gone. It named a module this repo imported for an auth backend and a KEK provider; both resolve from AUTH_MODE and KMS_KEY_ARN on their own now. Deployments can leave the variable set, since Pydantic's extra="ignore" makes it inert.

One behavior fix rides along. _get_or_create_user gated its single-tenant reuse path on not settings.premium_plugin, so an unrecognized sender was linked to the sole existing user whenever that variable was unset. Correct for a self-host, wrong for a hosted deployment, and it was protected only by an env var with no other purpose left. It now keys on auth_mode == "single_user", which is what the condition always meant. Reachable only when the database holds exactly one user, so a populated deployment was never exposed.

Also new: e2e/multi_user, a second Playwright project covering sign-in, CSP headers, and the marketing homepage under AUTH_MODE=multi_user, and docs/self-host/monitoring.md, the operator runbook for error alerts and health probes.

Self-hosters running the default single_user mode are unaffected.

Note: the prose in these release notes was drafted by Claude Opus 5 via back-and-forth with @njbrake. The reasoning and decisions are his; the wording is Claude's.