Release guild 0.3.2 · mathomhaus/guild

Highlights

Tighter local-data posture (#80): ~/.guild/ is created with 0o700, SQLite db files and their WAL/SHM/journal sidecars locked to 0o600. New internal/guildpath package centralizes the invariant across all six DB-opening sites. Existing installs get db sidecars tightened on next open.
Catalog kind validation (#97): lore catalog DIR --kind <bogus> now fails up-front with the valid taxonomy listed instead of silently corrupting the corpus.
Quest determinism under load (#93): quest note + event ordering is stable under concurrent writers; race-window-dependent ordering is gone.
Lore + quest stable secondary sort (#74, #75): same-timestamp reads have a deterministic tiebreak instead of relying on insertion-order luck.
Install path resilience: skip MCP register when guild is already registered (#42), skip install when the client CLI is not on PATH (#54), close stale hints DB on rebuild (#68).
Smaller niceties: -q/--query alias scaffolding on lore appraise (#81 — note: spec wired, CLI binding follow-up pending), drop the principle-too-long hint that the inline warning already covers (#62), cache repo-root lookup on the defaultGitFileLastModified hot path (#58).

fix(install): create ~/.guild with 0700 perms (#80) @SAY-5
fix(quest): ensure deterministic note/event ordering under race conditions (fixes #85) (#93) @CatfishGG
fix: validate catalog kind overrides (#97) @puneetdixit200
fix(lore): accept -q/--query alias on lore appraise (#28) (#81) @SAY-5
fix(install): skip MCP register when guild already registered in client (#27) (#42) @SAY-5
fix(lore): stable secondary sort for same-second reads (#25) (#74) @SAY-5
fix(quest): stable secondary sort for latest-brief reads (#23) (#75) @SAY-5
fix(install): skip MCP install when CLI binary is not on PATH (#48) (#54) @SAY-5
fix(mcp): close old hints engine DB on rebuild (#68) @Genmin
fix(hints): drop principle-too-long rule (covered by inline inscribe warning) (#62) @mvanhorn
perf(lore): cache repo-root lookup in defaultGitFileLastModified (#50) (#58) @mvanhorn
test(install): make internal/install tests hermetic (#63) @mvanhorn
chore(ci): bump the actions group with 5 updates (#65) @dependabot

feat(quest): use quest campaign as canonical CLI verb, quest epic as alias (#71) @mvanhorn

chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1 (#98) @dependabot
chore(deps): bump the go-deps group across 1 directory with 4 updates (#82) @dependabot
chore(deps): bump the go-deps group with 4 updates (#64) @dependabot

docs: document Stacked on: #N PR body convention for stacked PRs (#70) @mvanhorn
docs(readme): refresh headline to a more legible one-liner (#78) @kunallanjewar
docs: document campaign / epic taxonomy on the quest board (#66) @mvanhorn
docs(readme): highlight hybrid BM25 + vector retrieval (#59) @kunallanjewar

brew upgrade guild
# or
curl -fsSL https://github.com/mathomhaus/guild/releases/latest/download/install.sh | sh

Full Changelog: v0.3.1...v0.3.2