mockedStaticAuthData.when(() -> KerberosAuthData.parse(eq(1), eq(new byte[] { 0x01 }), any(Map.class)))
                .thenReturn(Collections.singletonList(mockAuthData1));
        mockedStaticAuthData.when(() -> KerberosAuthData.parse(eq(2), eq(new byte[] { 0x02 }), any(Map.class)))
                .thenReturn(Collections.singletonList(mockAuthData2));

        // Construct a token with two authorization entries

    void nameFilterAccepts(String acceptedName) throws Exception {
        // Arrange
        stubAcquireReturnsSelf();
        when(nameFilter.accept(any(), any())).thenReturn(false);
        when(nameFilter.accept(parent, acceptedName)).thenReturn(true);

        FileEntry initial = entry("first");
        FileEntry[] page1 = new FileEntry[] { entry("."), entry(".."), entry("rejected"), entry(acceptedName) };

        lenient().when(mockContext.getConfig()).thenReturn(mockConfig);
        lenient().when(mockContext.getNameServiceClient()).thenReturn(mockNameServiceClient);
        lenient().when(mockNameServiceClient.getLocalHost()).thenReturn(mockLocalHost);
        lenient().when(mockLocalHost.getHostName()).thenReturn("localhost");
        lenient().when(mockConfig.getDefaultDomain()).thenReturn("WORKGROUP");

        lenient().when(mockContext.getConfig()).thenReturn(mockConfig);
        lenient().when(mockConfig.isUseWitness()).thenReturn(true);
        lenient().when(mockConfig.getWitnessHeartbeatTimeout()).thenReturn(120000L);
        lenient().when(mockConfig.getWitnessRegistrationTimeout()).thenReturn(300000L);
        lenient().when(mockConfig.getWitnessReconnectDelay()).thenReturn(1000L);

    @ValueSource(booleans = { true, false })
    @DisplayName("shouldForceSigning returns stubbed boolean value")
    void shouldForceSigningReturns(boolean expected) {
        when(locator.shouldForceSigning()).thenReturn(expected);

        boolean result = locator.shouldForceSigning();

        assertEquals(expected, result);
        verify(locator, times(1)).shouldForceSigning();
        verifyNoMoreInteractions(locator);
    }

    @DisplayName("should return Unicode icons when terminal supports UTF-8")
    void shouldReturnUnicodeWhenTerminalSupportsUtf8() {
        Terminal mockTerminal = mock(Terminal.class);
        when(mockTerminal.encoding()).thenReturn(StandardCharsets.UTF_8);

        assertEquals("✓", ConsoleIcon.SUCCESS.getIcon(mockTerminal));
        assertEquals("✗", ConsoleIcon.ERROR.getIcon(mockTerminal));

                // Update context to use the temp directory
                when(context.invokerRequest.cwd()).thenReturn(tempDir);

                // Mock successful strategy execution
                when(mockOrchestrator.executeStrategies(Mockito.any(), Mockito.any()))
                        .thenReturn(UpgradeResult.empty());

                checkGoal.execute(context);

        packet.questionType = NameServicePacket.NB;
        packet.questionClass = NameServicePacket.IN;

        when(mockQuestionName.writeWireFormat(any(byte[].class), anyInt())).thenReturn(10); // Mock name length

        int written = packet.writeQuestionSectionWireFormat(dst, 0);
        assertEquals(14, written); // 10 (name) + 2 (type) + 2 (class)
        verify(mockQuestionName).writeWireFormat(dst, 0);

        mockExcludePatterns.add(Pattern.compile("https://example.com/secret/.*"));

        when(dataHelper.getIncludeUrlPatternList(sessionId)).thenReturn(mockIncludePatterns);
        when(dataHelper.getExcludeUrlPatternList(sessionId)).thenReturn(mockExcludePatterns);

        // Execute retrieval
        List<Pattern> includePatterns = service.getIncludeUrlPatternList(sessionId);

    void createContext_forceFallback_triggersNtlmAndFailsOnNonNtlmToken() throws CIFSException {
        when(tc.getConfig()).thenReturn(config);
        when(config.isAllowNTLMFallback()).thenReturn(true);
        when(config.isUseRawNTLM()).thenReturn(false);

        // Enable NTLM fallback by providing NTLM creds in constructor