---

name: alert-management description: > Inspect fired CCAM alerts and manage alert rules for token thresholds, event patterns, inactivity, and status duration. Use when acknowledging alerts, creating or editing a rule, checking cooldowns, or connecting alert rules to webhook targets.

Alert Management

Read

• ccam alerts --unacked
• ccam alert-rules list

Write

Before changing anything, show the rule name, type, normalized config, enabled state, and cooldown. Use --yes only after confirmation.

ccam alert-rules create --name "Token guard" --type token_threshold \
  --config '{"total_tokens":1000000}' --cooldown 300 --yes

Use ccam alert-rules update <id> ... --yes for partial edits and ccam alert-rules delete <id> --yes for deletion. Acknowledgment changes the feed state only. It does not change the rule or underlying session.

Never invent rule configs. Read the current rule and provider catalog first.