ci: fix Windows lint-paths false positive; soften release-prod tag check; bump to 1.0.1

Two longstanding CI failures (every push since the public-repo extraction):

1. lint-paths.mjs (Windows): SELF_EXCLUDE compared against the literal
   'scripts/lint-paths.mjs', but walk() yields backslash-separated paths
   on Windows ('scripts\\lint-paths.mjs'), so the script never excluded
   itself — read its own regex examples and failed. Fixed by comparing
   basename only (cross-platform).

2. release-prod.yml: every push to main hard-failed because the
   workflow refused to release when the tag already existed (v1.0.0
   from initial release). Softened to skip-not-fail: if the tag is
   already there, log "no version bump, skipping release" and exit 0.
   Lints + tests still run on every push; release only fires when
   package.json version is actually bumped.

Bumped package.json 1.0.0 → 1.0.1 to release the accumulated changes
since 1.0.0:
  - architect: MCP-first decision tree + tool discovery + trigger flow
  - sync flag fix (lua sync --pull → --accept)
  - /lua-init: optional --promo-code prompt
  - new lint-cli-flags.mjs guard against known-wrong CLI flags

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: lua-stefan-kruger

.github/workflows/release-prod.yml

@@ -76,15 +76,19 @@ jobs:
           echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
           echo "Production version: ${VERSION}"
 
-      - name: Verify tag does not already exist
+      - name: Check if tag already exists
+        id: tag_check
         working-directory: ${{ github.workspace }}
         run: |
           if git rev-parse "${{ steps.version.outputs.tag }}" >/dev/null 2>&1; then
-            echo "::error::Tag ${{ steps.version.outputs.tag }} already exists. Bump plugins/lua-agent-builder/package.json version before merging to main."
-            exit 1
+            echo "Tag ${{ steps.version.outputs.tag }} already exists — no version bump in this push, skipping release. (Lints + tests still ran.)"
+            echo "skip=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "skip=false" >> "$GITHUB_OUTPUT"
           fi
 
       - name: Build release tarball
+        if: steps.tag_check.outputs.skip != 'true'
         # scripts/pack.mjs handles the MCP dist/ inclusion. Production
         # tags use the package.json version verbatim — no override needed.
         run: |
@@ -94,6 +98,7 @@ jobs:
           echo "TARBALL=plugins/lua-agent-builder/${TARBALL}" >> "$GITHUB_ENV"
 
       - name: Create GitHub release
+        if: steps.tag_check.outputs.skip != 'true'
         uses: softprops/action-gh-release@v2
         with:
           tag_name: ${{ steps.version.outputs.tag }}

plugins/lua-agent-builder/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-code-lua-plugin",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Plugin assets for the lua-agent-builder Claude Code plugin",
   "private": true,
   "type": "module",

plugins/lua-agent-builder/scripts/lint-paths.mjs

@@ -15,7 +15,7 @@
 // the developer is expected to know what they're doing.
 
 import { readdir, readFile, stat } from 'node:fs/promises';
-import { join, extname } from 'node:path';
+import { join, extname, basename } from 'node:path';
 
 const ROOT = '.';
 const SCAN_DIRS = ['lib', 'hooks', 'scripts'];
@@ -30,8 +30,10 @@ const PATH_HELPER_RE = /(?<![.\w])(join|resolve|relative)\(\s*['"][^'"]*\/[^'"]*
 let failed = false;
 
 // Self-exclude: lint-paths.mjs inherently contains the patterns it warns
-// against (in error messages and examples). Listed here, not detected.
-const SELF_EXCLUDE = new Set(['scripts/lint-paths.mjs']);
+// against (in error messages and examples). Compare by basename so the
+// check is cross-platform (Windows yields 'scripts\\lint-paths.mjs' from
+// walk(), POSIX yields 'scripts/lint-paths.mjs' — basename normalises both).
+const SELF_EXCLUDE = new Set(['lint-paths.mjs']);
 
 async function* walk(dir) {
   for (const entry of await readdir(dir)) {
@@ -45,8 +47,7 @@ async function* walk(dir) {
 for (const dir of SCAN_DIRS) {
   try {
     for await (const file of walk(join(ROOT, dir))) {
-      const relative = file.replace(/^\.\//, '');
-      if (SELF_EXCLUDE.has(relative)) continue;
+      if (SELF_EXCLUDE.has(basename(file))) continue;
       const content = await readFile(file, 'utf8');
       const matches = content.match(PATH_HELPER_RE);
       if (matches) {