PleasePrompto/ductor: source audit, 2026-10-10
Read from the source at commit 3e3c88af57bc; the bot was not run (it needs a BotFather token). Each answer cites the file and line that shows it. All 20 bots
In short
Will not start without an allowlist. Once you are on it, the agent runs with all permission prompts bypassed on the host; the Docker sandbox exists but is off by default in code (the example config shows it on).
What the source shows
| Answer | Where | |
|---|---|---|
| Who can use it | Serves nobody until you list your Telegram ID | ductor_bot/messenger/telegram/middleware.py:153 — elif user.id not in self._allowed_users: return None |
| With no allowlist set | allowed_user_ids in ~/.ductor/config/config.json, default []; startup exits when empty | ductor_bot/__main__.py:265-269 — needs_users = not config.allowed_user_ids ... sys.exit(1) |
| Before the agent acts | runs the agent with permission prompts switched off | ductor_bot/config.py:439 — permission_mode: str = "bypassPermissions"; config.py:43 — Docker sandbox enabled: bool = False |
| Bot token | Read from the environment or a config file; no real token is committed | |