detectkit 0.16.1__tar.gz → 0.16.3__tar.gz

{detectkit-0.16.1/detectkit.egg-info → detectkit-0.16.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: detectkit
-Version: 0.16.1
+Version: 0.16.3
 Summary: Metric monitoring with automatic anomaly detection
 Author: detectkit team
 License: MIT

{detectkit-0.16.1 → detectkit-0.16.3}/detectkit/__init__.py

@@ -4,7 +4,7 @@ detectk - Anomaly Detection for Time-Series Metrics
 A Python library for data analysts and engineers to monitor metrics with automatic anomaly detection.
 """
 
-__version__ = "0.16.1"
+__version__ = "0.16.3"
 
 from detectkit.core.interval import Interval
 from detectkit.core.models import ColumnDefinition, TableModel

{detectkit-0.16.1 → detectkit-0.16.3}/detectkit/alerting/channels/email.py

@@ -315,13 +315,13 @@ class EmailChannel(BaseAlertChannel):
             parts.append(self._lead_html(ctx["description"]))
 
         if kind == "anomaly":
-            lead = (
-                f"Fired because the latest {ctx['consecutive_count']}/"
-                f"{ctx['consecutive_required']} consecutive points each met the quorum "
-                f"(min_detectors={ctx['min_detectors']}, direction "
-                f"{html.escape(str(ctx['direction_policy']))})."
+            parts.append(self._rule_html(ctx))
+            parts.append(
+                self._lead_html(
+                    f"Latest {ctx['consecutive_count']}/{ctx['consecutive_required']} "
+                    "consecutive points met the quorum."
+                )
             )
-            parts.append(self._lead_html(lead))
             parts.append(
                 self._stat_grid(
                     [
@@ -340,6 +340,7 @@ class EmailChannel(BaseAlertChannel):
                 "expected bounds."
             )
             parts.append(self._lead_html(lead))
+            parts.append(self._rule_html(ctx))
             parts.append(
                 self._stat_grid(
                     [
@@ -380,6 +381,26 @@ class EmailChannel(BaseAlertChannel):
             f"{html.escape(text)}</td></tr>"
         )
 
+    def _rule_html(self, ctx: dict[str, Any]) -> str:
+        """The configured firing rule: a bold ``Rule`` label + a monospace chip.
+
+        Mirrors the inline-code "Rule chip" the webhook/Telegram channels render,
+        so the same firing rule reads the same way in every channel.
+        """
+        expr = (
+            f"min_detectors={ctx['min_detectors']} &middot; "
+            f"direction={html.escape(str(ctx['direction_policy']))} &middot; "
+            f"consecutive={ctx['consecutive_required']}"
+        )
+        return (
+            f'<tr><td style="padding:0 24px 14px 24px;font-family:{_SANS};font-size:13px;'
+            f'color:{_MUTED};mso-line-height-rule:exactly;line-height:22px;">'
+            f'<strong style="color:{_INK};">Rule</strong>&nbsp;'
+            f'<code style="font-family:{_MONO};font-size:12px;background-color:{_PAPER};'
+            f'border:1px solid {_BORDER};border-radius:4px;padding:2px 6px;color:{_INK};">'
+            f"{expr}</code></td></tr>"
+        )
+
     def _stat_grid(self, pairs: list[tuple[str, str]]) -> str:
         """A 2-column grid of (label, value) cells (table-based)."""
         cells = ""

{detectkit-0.16.1 → detectkit-0.16.3}/detectkit/alerting/channels/telegram.py

@@ -167,9 +167,9 @@ class TelegramChannel(BaseAlertChannel):
                 f"<b>{ctx['consecutive_count']}/{ctx['consecutive_required']}</b> consecutive"
             )
             lines.append(
-                f"<i>Rule: min_detectors={ctx['min_detectors']} · "
+                f"<b>Rule</b> <code>min_detectors={ctx['min_detectors']} · "
                 f"direction={esc(ctx['direction_policy'])} · "
-                f"consecutive={ctx['consecutive_required']}</i>"
+                f"consecutive={ctx['consecutive_required']}</code>"
             )
             lines.append("")
             lines.append(
@@ -188,9 +188,9 @@ class TelegramChannel(BaseAlertChannel):
                 "expected bounds."
             )
             lines.append(
-                f"<i>Rule: min_detectors={ctx['min_detectors']} · "
+                f"<b>Rule</b> <code>min_detectors={ctx['min_detectors']} · "
                 f"direction={esc(ctx['direction_policy'])} · "
-                f"consecutive={ctx['consecutive_required']}</i>"
+                f"consecutive={ctx['consecutive_required']}</code>"
             )
             lines.append("")
             lines.append(

{detectkit-0.16.1 → detectkit-0.16.3}/detectkit/alerting/channels/webhook.py

@@ -256,11 +256,19 @@ class WebhookChannel(BaseAlertChannel):
         def code(s: str) -> str:
             return f"`{s}`" if s else ""
 
+        # The configured firing rule, set apart as a bold "Rule" label + an
+        # inline-code chip so it reads as "this is the config that fired" at a
+        # glance. Backticks render identically on Slack and Mattermost; the bold
+        # label is platform-aware (see ``_bold``).
+        rule_chip = f"{self._bold('Rule')} " + code(
+            f"min_detectors={ctx['min_detectors']} · "
+            f"direction={ctx['direction_policy']} · "
+            f"consecutive={ctx['consecutive_required']}"
+        )
+
         if kind == "anomaly":
             lead = (
-                f"Rule: min_detectors={ctx['min_detectors']} · "
-                f"direction={ctx['direction_policy']} · "
-                f"consecutive={ctx['consecutive_required']}. "
+                f"{rule_chip}\n"
                 f"Latest {ctx['consecutive_count']}/{ctx['consecutive_required']} "
                 "consecutive points met the quorum."
             )
@@ -275,9 +283,7 @@ class WebhookChannel(BaseAlertChannel):
         elif kind == "recovery":
             lead = (
                 "The alert condition no longer holds — the metric is back within "
-                f"expected bounds. Rule: min_detectors={ctx['min_detectors']} · "
-                f"direction={ctx['direction_policy']} · "
-                f"consecutive={ctx['consecutive_required']}."
+                f"expected bounds.\n{rule_chip}"
             )
             short("Value", code(ctx["value_display"]))
             short("Expected", code(ctx["expected_range"]))
@@ -329,6 +335,20 @@ class WebhookChannel(BaseAlertChannel):
             "mrkdwn_in": ["text", "fields"],
         }
 
+    def _bold(self, text: str) -> str:
+        """Render *text* bold in the target platform's markdown.
+
+        Slack mrkdwn uses ``*bold*``; Mattermost and generic webhooks use
+        CommonMark ``**bold**`` (where ``*x*`` would render as italic). Mirrors
+        the platform branch in :meth:`_link_markup`, detecting Slack from the
+        webhook host.
+        """
+        if not text:
+            return ""
+        if "hooks.slack.com" in self.webhook_url:
+            return f"*{text}*"
+        return f"**{text}**"
+
     def _link_markup(self, url: str, label: str) -> str:
         """Render *label* as a clickable link in the target platform's syntax.
 

{detectkit-0.16.1 → detectkit-0.16.3}/detectkit/cli/assets/claude/rules/alerting.md

@@ -213,6 +213,15 @@ leads with a colored **status circle** — 🔴 anomaly, 🟢 recovery, 🟡 no-
   table, a monospace params box, an optional "Open dashboard" button, and a
   footer. The plain-text body remains the multipart fallback.
 
+On anomaly **and** recovery alerts the **firing rule is set apart uniformly** in
+every default-rendered channel: a bold **Rule** label + an inline-code chip
+(`min_detectors=… · direction=… · consecutive=…`), with the quorum explanation
+on its own line, so the rule reads as "this is the config that fired" at a
+glance. Bold is platform-aware (`*Rule*` on Slack, `**Rule**` on
+Mattermost/generic; `<b>Rule</b>` on Telegram; `<strong>` in email), while the
+code chip is identical everywhere. Custom templates and the plain-text fallbacks
+are unchanged.
+
 ## Project label (multi-project channels)
 
 The bot keeps the **detectkit brand** name + avatar by default (so users rarely

{detectkit-0.16.1 → detectkit-0.16.3}/detectkit/cli/assets/claude/rules/cli.md

@@ -55,8 +55,9 @@ dtk run --select <sel> [--steps load,detect,alert] [--from DATE] [--to DATE] \
 
 Sends a mock alert (fake value/CI/severity) through the metric's configured
 channels, using that alert config's own rule (`min_detectors` / `direction` /
-`consecutive_anomalies`), so the preview matches a real firing. Use it to
-verify webhook URLs, channel permissions, and custom templates.
+`consecutive_anomalies`) and the project-name `[name]` prefix, so the preview
+matches a real firing. Use it to verify webhook URLs, channel permissions, and
+custom templates.
 
 ## `dtk unlock --select <sel>`
 

{detectkit-0.16.1 → detectkit-0.16.3}/detectkit/cli/commands/test_alert.py

@@ -23,6 +23,7 @@ def create_mock_alert_data(
     alerting_config,
     timezone_display: str = "UTC",
     help_url: str | None = None,
+    project_name: str | None = None,
 ) -> AlertData:
     """
     Create realistic mock AlertData for testing.
@@ -36,6 +37,10 @@ def create_mock_alert_data(
         timezone_display: Timezone for display
         help_url: Resolved "how to read this alert" link to preview (the
             project's ``alert_help_url``); ``None`` renders no help link.
+        project_name: Project name from ``detectkit_project.yml`` — stamped so
+            the preview carries the same ``[name]`` prefix a real ``dtk run``
+            renders (the run pipeline sets it in ``_alert_step.py``); ``None``
+            renders no prefix.
 
     Returns:
         AlertData with mock anomaly data
@@ -90,6 +95,7 @@ def create_mock_alert_data(
         },
         consecutive_count=consecutive_required,
         mentions=mentions,
+        project_name=project_name,
         dashboard_url=getattr(alerting_config, "dashboard_url", None),
         links=dict(getattr(alerting_config, "links", {}) or {}),
         help_url=help_url,
@@ -123,7 +129,13 @@ def run_test_alert(metric_name: str, profile: str | None = None):
     with open(project_config_path) as f:
         project_data = yaml.safe_load(f)
 
-    metrics_dir_name = project_data.get("metrics_path", "metrics")
+    # Project name drives the [name] prefix a real `dtk run` stamps on every
+    # alert (see _alert_step.py); thread it so the preview matches a real firing.
+    project_name = project_data.get("name")
+
+    # Metrics dir lives under `paths.metrics` (default "metrics"); the old
+    # top-level `metrics_path` key is deprecated and ignored by ProjectConfig.
+    metrics_dir_name = (project_data.get("paths") or {}).get("metrics", "metrics")
 
     # Resolve the "how to read this alert" link so the preview matches what real
     # alerts would carry (brand default, a custom URL, or hidden via false).
@@ -187,7 +199,11 @@ def run_test_alert(metric_name: str, profile: str | None = None):
         print(f"   Channels: {', '.join(alerting_config.channels)}\n")
 
         alert_data = create_mock_alert_data(
-            metric_config, alerting_config, timezone_display, help_url=help_url
+            metric_config,
+            alerting_config,
+            timezone_display,
+            help_url=help_url,
+            project_name=project_name,
         )
 
         success_count = 0

{detectkit-0.16.1 → detectkit-0.16.3/detectkit.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: detectkit
-Version: 0.16.1
+Version: 0.16.3
 Summary: Metric monitoring with automatic anomaly detection
 Author: detectkit team
 License: MIT