six-ddc/ccbot: source audit, 2026-10-10
Read from the source at commit 9d7ab9721f09; the bot was not run (it needs a BotFather token). Each answer cites the file and line that shows it. All 20 bots
In short
Refuses to start without ALLOWED_USERS and by default runs plain claude, forwarding permission prompts as buttons. Its README suggests a CLAUDE_COMMAND with permissions skipped; following that removes the prompts.
What the source shows
| Answer | Where | |
|---|---|---|
| Who can use it | Serves nobody until you list your Telegram ID | src/ccbot/bot.py:813 — if not user or not is_user_allowed(user.id) |
| With no allowlist set | env ALLOWED_USERS, no default; startup fails if unset | src/ccbot/config.py:48-49 — raise ValueError("ALLOWED_USERS environment variable is required") |
| Before the agent acts | Claude's permission prompts come to you in Telegram | src/ccbot/config.py:65 — claude_command = os.getenv("CLAUDE_COMMAND", "claude"); permission prompts are forwarded to Telegram as buttons |
| Bot token | Read from the environment or a config file; no real token is committed | |