alexei-led/ccgram: source audit, 2026-10-10
Read from the source at commit 0b8ae82aaed7; the bot was not run (it needs a BotFather token). Each answer cites the file and line that shows it. All 20 bots
In short
Refuses to start without ALLOWED_USERS, and sessions start in normal mode, so Claude's permission prompts reach you in Telegram. An allowed user can switch a session to YOLO, which skips them.
What the source shows
| Answer | Where | |
|---|---|---|
| Who can use it | Serves nobody until you list your Telegram ID | src/ccgram/handlers/text/text_handler.py:646 — if not user or not config.is_user_allowed(user.id) |
| With no allowlist set | env ALLOWED_USERS, no default; startup fails if unset | src/ccgram/config.py:112-113 — raise ValueError("ALLOWED_USERS environment variable is required") |
| Before the agent acts | Claude's permission prompts come to you in Telegram | src/ccgram/window_state_store.py:32 — DEFAULT_APPROVAL_MODE = "normal"; Claude's permission prompts are relayed to Telegram |
| Bot token | Read from the environment or a config file; no real token is committed | |