/alert-management

name: alert-management
description: >
  Inspect fired CCAM alerts and manage alert rules for token thresholds, event
  patterns, inactivity, and status duration. Use when acknowledging alerts,
  creating or editing a rule, checking cooldowns, or connecting alert rules to
  webhook targets.

Alert Management

Read

• `ccam alerts --unacked`
• `ccam alert-rules list`

Write

Before changing anything, show the rule name, type, normalized config, enabled state, and cooldown. Use `--yes` only after confirmation.

ccam alert-rules create --name "Token guard" --type token_threshold \
  --config '{"total_tokens":1000000}' --cooldown 300 --yes

Use `ccam alert-rules update <id> ... --yes` for partial edits and `ccam alert-rules delete <id> --yes` for deletion. Acknowledgment changes the feed state only. It does not change the rule or underlying session.

Never invent rule configs. Read the current rule and provider catalog first.