---
name: ca-preview
description: Zero-onboarding, read-only dry-run of the reviewer fleet against the current uncommitted diff. Predicts reviewers, runs the state-free secret scan, writes nothing.
argument-hint: (none)
---

# $ca-preview — reviewer-fleet dry-run

See what codeArbiter would do to your real code before paying any onboarding cost. This is a
read-only dry-run against the current uncommitted diff: it predicts which reviewers the change
would dispatch, runs the checks that need no project rules, and reports. It never writes state.

It requires no `$ca-init`, no `.codearbiter/` directory, and no decompose or create-context
interview. It functions in a repo that never opted in, and it modifies nothing: not the worktree,
not the index, not `.codearbiter/`. `git status` is unchanged by a run.

## Flow

1. **Collect the diff.** Call the thin entry hook `preview.py` in `diff` mode, which wraps
   `collect_diff` from `${CLAUDE_PLUGIN_ROOT}/hooks/_previewlib.py`. It unions HEAD-vs-worktree
   changes, staged changes, and untracked files (forward-slash paths). Run it from the project
   root so `_previewlib`/`_hooklib` resolve on the same `sys.path`:
   ```
   python3 "${CLAUDE_PLUGIN_ROOT}/hooks/preview.py" diff || python "${CLAUDE_PLUGIN_ROOT}/hooks/preview.py" diff
   ```
   If the result is empty (clean tree, or not a git repo), print a friendly **"Nothing to
   preview"** line and STOP. This is a clean exit, not an error: no stack trace, no failure.

2. **Predict reviewers by path.** Read the reviewer-to-path matrix at
   `${CLAUDE_PLUGIN_ROOT}/includes/review-matrix.md`. That include is the single source of truth
   for which reviewer is dispatched when scope touches a given path: do NOT restate, fork, or
   inline a second copy of the table here. For each changed path, list the reviewers that WOULD
   dispatch and name the triggering path for each. This is the same mapping `$ca-review` uses, so
   the predicted set matches what a real review would dispatch.

3. **Run the state-free secret scan.** Call the thin entry hook `preview.py` in `secrets` mode,
   which wraps `scan_secrets` from `${CLAUDE_PLUGIN_ROOT}/hooks/_previewlib.py`. It reads each
   changed file's current content and returns `SecretFinding(path, line_no, snippet)` for every
   credential line, with the secret VALUE already masked to `****` in `snippet`:
   ```
   python3 "${CLAUDE_PLUGIN_ROOT}/hooks/preview.py" secrets || python "${CLAUDE_PLUGIN_ROOT}/hooks/preview.py" secrets
   ```
   Report each finding by `path:line_no` with its redacted snippet. The snippet arrives already
   masked: never reconstruct or print a raw secret value.

## Report

Emit one clear report with these parts:

- **Changed files** — the reviewed-file set from step 1, each with its change kind(s) (unstaged,
  staged, untracked).
- **Predicted reviewers** — per the matrix, which reviewers would dispatch and the triggering path
  for each. These are predicted (would-dispatch), not run here.
- **Secret findings** — the results of the real scan from step 3, by `path:line_no` with the
  redacted snippet, marked as found (ran locally), at BLOCK severity. State "none found" when the
  scan is clean.
- **Onboarding nudge** — close with one line: the full gated review comes via `$ca-init` then
  `$ca-review`.

## Distinct from $ca-doctor

This reports reviewer and gate behavior on the current diff. It makes NO hook-probe claims and says
nothing about whether the install's hooks fire: that is `$ca-doctor`. Do not blend the two.

## When NOT to use

- An onboarded repo wanting the full gated verdict → `$ca-init` then `$ca-review`.
- Proving the install's hooks actually fire → `$ca-doctor`.
- A question about the code → `$ca-btw`.

## Hard gate

- Read-only. MUST NOT write, create, or modify any file, including anything under `.codearbiter/`;
  MUST NOT stage or commit. `git status` MUST be unchanged after a run.
- MUST NOT require, trigger, or error on missing `$ca-init`, `.codearbiter/` state, or the
  decompose / create-context interview.
- MUST NOT print a raw secret value: the lib returns the snippet already redacted, and the report
  carries only that masked form.
- An empty diff or a non-git directory MUST yield the "Nothing to preview" message and a clean
  exit, never a stack trace.
- MUST treat the reviewer prediction as predicted (would-dispatch) and the secret scan as found
  (ran locally): it MUST NOT attribute fabricated findings to any predicted reviewer.