Update Homebrew formula to CodeTruss CLI v0.2.30

[DeliriumPulse]

Important

Merge this after the v0.2.30 CLI release is cut. The formula points at
the v0.2.30 GitHub release asset, which does not exist yet. CI will fail with a
404 until DeliriumPulse/codetruss-cli#16
merges and the v0.2.30 tag is pushed. Re-run CI then and it should go green.

The formula was serving 0.2.24 while the product shipped 0.2.30.

Changes

• url moved to the v0.2.30 release archive, sha256 pinned to 9c97f573aa7e7a052fe8d4c578efda6a8d43f2bcfec9a74ab7d2fdf6b53eccdc.
• The CI version assertion still hardcoded codetruss 0.2.24 and would have failed the moment the url moved. Now 0.2.30.
• desc and the README lede moved to the first-pass verification gate language.

Per the README's release policy, url, SHA-256, and the formula test were updated
together, and the target is a published immutable release.

Verification

• Checksum: downloaded codetruss-cli-0.2.30.tgz from codetruss.com, hashed it locally, and matched both the published .sha256 sidecar and the pinned value. The release asset is the same deterministic artifact as the website archive, which is how 0.2.24 lined up too.
• Ruby syntax: ruby -c clean.
• Style: brew style Formula/codetruss.rb reports no offenses.
• Install block audited against the real 0.2.30 tarball: it unpacks to exactly the eight installed paths (CHANGELOG.md, LICENSE, README.md, SBOM.cdx.json, SECURITY.md, THIRD_PARTY_NOTICES.md, dist, package.json), so nothing is missing or extra.
• Symlink: dist/cli.cjs still carries #!/usr/bin/env node and the executable bit.
• Test block run against the real binary: --version prints codetruss 0.2.30, matching the URL-derived #{version}, and codetruss init --allow "src/**" still writes a .codetruss.yml containing - src/**.

brew install --build-from-source semantics are unchanged: this is still a
prebuilt bundled executable with a node dependency and no compile step, so the
flag only skips bottle lookup as before.

🤖 Generated with Claude Code

Summary by CodeRabbit

• New Features

  • Updated the Codetruss release to version 0.2.30.
  • Expanded product documentation to describe deterministic verification, 13 analyzers, repository checks, and receipt outcomes.

• Chores

  • Updated the Homebrew distribution metadata and release checksum.
  • Updated release validation to recognize version 0.2.30.

[coderabbitai]

📝 Walkthrough

Walkthrough

CodeTruss release references now target v0.2.30. The Homebrew formula uses the new archive checksum, the workflow checks the new version, and the README describes the current verification flow.

Changes

CodeTruss release update

Layer / File(s)	Summary
Release metadata and CLI description .github/workflows/test.yml, Formula/codetruss.rb, README.md	The formula and workflow now reference v0.2.30. The formula includes the updated checksum. The README describes 13 analyzers, repository verification commands, and PASS, REVIEW_REQUIRED, or FAILED receipts.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Possibly related PRs

• DeliriumPulse/homebrew-codetruss#1: Updates the same Homebrew formula and workflow version assertion for an earlier CodeTruss release.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely identifies the main change: updating the Homebrew formula to CodeTruss CLI v0.2.30.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch formula/v0.2.30

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@Formula/codetruss.rb`:
- Around line 4-5: Ensure the v0.2.30 release and its codetruss-cli-0.2.30.tgz
asset are published and accessible at the URL configured by the formula’s url
and sha256 declarations, or update those declarations to reference an existing
published release and matching checksum before merging.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: f57cd735-4dba-4cea-9689-cd625867951c

📥 Commits

Reviewing files that changed from the base of the PR and between da010ed and 0568626.

📒 Files selected for processing (3)

• .github/workflows/test.yml
• Formula/codetruss.rb
• README.md

[DeliriumPulse]

CI result is the expected one, and it is the only problem:

brew audit --strict --online --formula DeliriumPulse/codetruss/codetruss
1 problem in 1 formula detected.
  * Stable: The source URL https://github.com/DeliriumPulse/codetruss-cli/releases/download/v0.2.30/codetruss-cli-0.2.30.tgz is not reachable (HTTP status code 404)

brew style passed on both runners, and the audit found nothing else. The 404
is the v0.2.30 release not existing yet.

Sequence: merge codetruss-cli#16,
push the v0.2.30 tag so the release workflow publishes the attested assets,
then re-run CI here. The pinned SHA-256 already matches those bytes, so nothing
in this PR should need to change.