v1.16.25

[1.16.25] — 2026-04-07

v1.16.25 closes the EnterWorktree completion gap discovered when an agent's Phase 0 dispatch failed with 'scripts/platform/ missing'. New 'seed-local-runtime' subcommand finishes what EnterWorktree starts: copies LOCAL_RUNTIME_PATHS (scripts/, .mcp.json, AGENTS.md, CLAUDE.md, qq.yaml), baseline state files, baseline run records, and writes .qq/state/worktree.json metadata so the new worktree behaves identically to a command_create-created one. Without it, every qq script in the new worktree exits 127 because scripts/platform/detect.sh is missing, and 5+ downstream consumers (commit-push Type B closeout, qq-codex-exec --add-dir injection, qq-project-state.py, qq-doctor.py, build_status flags) silently treat the worktree as unmanaged. Validation uses git common-dir matching plus 'git worktree list --porcelain' membership (NOT --show-toplevel, which differs by design between linked worktrees). clone_copy_tree gains an allow_hardlink parameter scoped strictly to Unity (Library is the only currently-supported engine cache that's safe to alias — Godot's uid_cache.bin and Unreal's UBT manifests are rewritten in place and would corrupt the source). Hardlink path uses a sibling staging directory with atomic rename: on partial failure (cross-device, unsupported FS), the staging dir is rmtreed and the function falls through to shutil.copytree on a clean target — preventing the catastrophic case where copytree's O_TRUNC on a partially-hardlinked file would write through the shared inode and corrupt the source's Library cache. On Windows (no rsync, no clonefile), this turns multi-GB Library seed from a 30-120 second real-byte copy into sub-second per-file os.link. /qq:execute and /qq:go SKILL.md updated to call seed-local-runtime then seed-runtime-cache (no --source, so metadata is authoritative). 6 new test.sh checks via TDD, full test.sh 384/384 green. Built test-first; followed two rounds of codex-plan-review (4 + 3 findings, all verified by parallel subagents, all incorporated).