/**
     * Checks if a specific context flag is set
     * @param flag the context flag to check
     * @return true if the flag is set, false otherwise
     */
    public boolean getContextFlag(final int flag) {
        return (getContextFlags() & flag) == flag;
    }

    /**
     * Sets or clears a specific context flag
     * @param flag the context flag to set or clear

    /** Lock and read write and unlock flag */
    int FLAGS_LOCK_AND_READ_WRITE_AND_UNLOCK = 0x01;
    /** Receive buffer posted flag */
    int FLAGS_RECEIVE_BUFFER_POSTED = 0x02;
    /** Path names are caseless flag */
    int FLAGS_PATH_NAMES_CASELESS = 0x08;
    /** Path names canonicalized flag */
    int FLAGS_PATH_NAMES_CANONICALIZED = 0x10;
    /** Oplock requested or granted flag */
    int FLAGS_OPLOCK_REQUESTED_OR_GRANTED = 0x20;

        message.setFlag(0b0100, false);
        assertEquals(0, message.getFlags(), "Flag 0b0100 should be cleared.");

        // Test setting a flag that is already set
        message.setFlags(0b1000);
        message.setFlag(0b1000, true);
        assertEquals(0b1000, message.getFlags(), "Setting an already set flag should not change other flags.");

        // Test clearing a flag that is not set

    void testIsShareDfsWithFlags() throws SMBProtocolDecodingException {
        // Test with DFS flag only
        byte[] buffer = createValidResponseBuffer(0, 0x1, 0, 0);
        response.readBytesWireFormat(buffer, 0);
        assertTrue(response.isShareDfs());

        // Test with DFS_ROOT flag only
        response = new Smb2TreeConnectResponse(mockConfig);
        buffer = createValidResponseBuffer(0, 0x2, 0, 0);

        @DisplayName("Individual flag values are correctly set and retrieved")
        void testIndividualFlagValues(int flag) {
            NegTokenInit init = new NegTokenInit();

            // Initially false
            assertFalse(init.getContextFlag(flag));

            // Set to true
            init.setContextFlag(flag, true);
            assertTrue(init.getContextFlag(flag));

    @DisplayName("Should handle various NTLM flags")
    void testVariousNTLMFlags(int flag) {
        // When
        Type1Message type1 = new Type1Message(mockContext, flag, null, null);

        // Then
        assertTrue((type1.getFlags() & flag) != 0);
    }

    @Test
    @DisplayName("Should include NTLMSSP signature")
    void testNTLMSSPSignature() throws IOException {

    data.write("ca00".decodeHex()) // Empty pong, flag 1 set.
    assertFailsWith<ProtocolException> {
      clientReader.processNextFrame()
    }.also { expected ->
      assertThat(expected.message).isEqualTo("Unexpected rsv1 flag")
    }
  }

  @Test fun reservedFlag1IsUnsupportedForControlFrames() {
    data.write("ca00".decodeHex()) // Empty pong, flag 1 set.
    assertFailsWith<ProtocolException> {

                ACE.FLAGS_INHERITED })
        @DisplayName("Flag constants should be powers of 2")
        void shouldBeValidFlagPowersOfTwo(int flag) {
            assertTrue(flag > 0, "Flag should be positive");
            assertEquals(0, flag & (flag - 1), "Flag should be power of 2: " + Integer.toHexString(flag));
        }

        @Test
        @DisplayName("Should validate all constants are unique")

    }

    @Nested
    @DisplayName("Flag Constants Tests")
    class FlagConstantsTests {

        @Test
        @DisplayName("Should have correct shared lock flag value")
        void testSharedLockFlag() {
            assertEquals(0x1, Smb2Lock.SMB2_LOCKFLAG_SHARED_LOCK);
        }

        @Test
        @DisplayName("Should have correct exclusive lock flag value")
        void testExclusiveLockFlag() {

        void testIsShareDfsWithShareFlags() throws Exception {
            // Test with DFS flag
            setPrivateField(response, "shareFlags", Smb2TreeConnectResponse.SMB2_SHAREFLAG_DFS);
            assertTrue(response.isShareDfs(), "Should detect DFS from DFS flag");

            // Test with DFS_ROOT flag
            setPrivateField(response, "shareFlags", Smb2TreeConnectResponse.SMB2_SHAREFLAG_DFS_ROOT);