chore(release): bump version to 2.10.1

Author: jdalton

CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.10.1](https://github.com/SocketDev/socket-lib/releases/tag/v2.10.1) - 2025-10-31
+
+### Fixed
+
+- **Process lock directory creation**: Use recursive mkdir to ensure parent directories exist when creating lock directory
+- **Node.js debug flags**: Remove buggy `getNodeDebugFlags()` function that returned debug flags without required argument values
+
 ## [2.10.0](https://github.com/SocketDev/socket-lib/releases/tag/v2.10.0) - 2025-10-30
 
 ### Added

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "2.10.0",
+  "version": "2.10.1",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [

src/constants/node.ts

@@ -121,19 +121,6 @@ export function supportsProcessSend(): boolean {
 }
 
 // Node.js flags.
-let _nodeDebugFlags: string[]
-export function getNodeDebugFlags(): string[] {
-  if (_nodeDebugFlags === undefined) {
-    _nodeDebugFlags = [
-      '--inspect',
-      '--inspect-brk',
-      '--inspect-port',
-      '--inspect-publish-uid',
-    ]
-  }
-  return _nodeDebugFlags
-}
-
 let _nodeHardenFlags: string[]
 export function getNodeHardenFlags(): string[] {
   if (_nodeHardenFlags === undefined) {

src/process-lock.ts

@@ -256,8 +256,13 @@ class ProcessLockManager {
             }
           }
 
-          // Atomic lock acquisition via mkdir.
-          mkdirSync(lockPath, { recursive: false })
+          // Check if lock already exists before creating.
+          if (existsSync(lockPath)) {
+            throw new Error(`Lock already exists: ${lockPath}`)
+          }
+
+          // Atomic lock acquisition via mkdir with recursive to create parent dirs.
+          mkdirSync(lockPath, { recursive: true })
 
           // Track lock for cleanup.
           this.activeLocks.add(lockPath)

test/constants/node.test.ts

@@ -7,7 +7,6 @@ import {
   NODE_SEA_FUSE,
   getExecPath,
   getMaintainedNodeVersions,
-  getNodeDebugFlags,
   getNodeDisableSigusr1Flags,
   getNodeHardenFlags,
   getNodeMajorVersion,
@@ -245,28 +244,6 @@ describe('node constants', () => {
     })
   })
 
-  describe('getNodeDebugFlags', () => {
-    it('should return array of debug flags', () => {
-      const flags = getNodeDebugFlags()
-      expect(Array.isArray(flags)).toBe(true)
-      expect(flags.length).toBeGreaterThan(0)
-    })
-
-    it('should include inspect flags', () => {
-      const flags = getNodeDebugFlags()
-      expect(flags).toContain('--inspect')
-      expect(flags).toContain('--inspect-brk')
-      expect(flags).toContain('--inspect-port')
-      expect(flags).toContain('--inspect-publish-uid')
-    })
-
-    it('should return same instance on multiple calls', () => {
-      const first = getNodeDebugFlags()
-      const second = getNodeDebugFlags()
-      expect(first).toBe(second)
-    })
-  })
-
   describe('getNodeHardenFlags', () => {
     it('should return array of hardening flags', () => {
       const flags = getNodeHardenFlags()
@@ -436,7 +413,6 @@ describe('node constants', () => {
     it('should handle all flag getters being called multiple times', () => {
       // Call each getter multiple times to ensure caching works
       for (let i = 0; i < 3; i++) {
-        getNodeDebugFlags()
         getNodeHardenFlags()
         getNodePermissionFlags()
         getNodeNoWarningsFlags()
@@ -445,12 +421,10 @@ describe('node constants', () => {
     })
 
     it('should verify all flag arrays are non-empty or conditionally empty', () => {
-      const debugFlags = getNodeDebugFlags()
       const hardenFlags = getNodeHardenFlags()
       const noWarningsFlags = getNodeNoWarningsFlags()
       const sigusr1Flags = getNodeDisableSigusr1Flags()
 
-      expect(debugFlags.length).toBeGreaterThan(0)
       expect(hardenFlags.length).toBeGreaterThan(0)
       expect(noWarningsFlags.length).toBeGreaterThan(0)
       expect(sigusr1Flags.length).toBeGreaterThan(0)
@@ -505,7 +479,6 @@ describe('node constants', () => {
 
     it('should verify flag contents are strings starting with --', () => {
       const allFlags = [
-        ...getNodeDebugFlags(),
         ...getNodeHardenFlags(),
         ...getNodePermissionFlags(),
         ...getNodeNoWarningsFlags(),

test/process-lock.test.ts

@@ -49,7 +49,7 @@ describe.sequential('process-lock', () => {
       // Second acquire should fail
       await expect(
         processLock.acquire(testLockPath, { retries: 1, baseDelayMs: 10 }),
-      ).rejects.toThrow(/Lock already exists/)
+      ).rejects.toThrow(/Lock already exists|Failed to acquire lock/)
 
       release1()
     })
@@ -246,7 +246,7 @@ describe.sequential('process-lock', () => {
           baseDelayMs: 10,
           staleMs: 10_000,
         }),
-      ).rejects.toThrow(/Lock already exists/)
+      ).rejects.toThrow(/Lock already exists|Failed to acquire lock/)
 
       release()
     })
@@ -308,13 +308,11 @@ describe.sequential('process-lock', () => {
         'path',
       )
 
-      // Should work even with nested path
-      await expect(
-        processLock.acquire(deepPath, { retries: 1 }),
-      ).rejects.toThrow()
-
-      // mkdir with recursive: false should fail for non-existent parent
-      // This is expected behavior
+      // Should work with nested path (recursive: true creates parent dirs)
+      const release = await processLock.acquire(deepPath, { retries: 1 })
+      expect(existsSync(deepPath)).toBe(true)
+      release()
+      expect(existsSync(deepPath)).toBe(false)
     })
   })
 })