private final ScheduledExecutorService cleanupExecutor;
    private static final long DEFAULT_LEASE_CLEANUP_INTERVAL = 60000; // 60 seconds
    private static final int DEFAULT_LEASE_BREAK_TIMEOUT = 60; // 60 seconds per MS-SMB2

    /**
     * Create a new lease manager
     *
     * @param context CIFS context
     */
    public LeaseManager(CIFSContext context) {
        this.context = context;

    /** The key of the message: MS Word */
    public static final String LABELS_facet_filetype_word = "{labels.facet_filetype_word}";

    /** The key of the message: MS Excel */
    public static final String LABELS_facet_filetype_excel = "{labels.facet_filetype_excel}";

    /** The key of the message: MS PowerPoint */

		fh.Flags |= 0x800
	}

	fh.CreatorVersion = fh.CreatorVersion&0xff00 | zipVersion20 // preserve compatibility byte
	fh.ReaderVersion = zipVersion20

	// If Modified is set, this takes precedence over MS-DOS timestamp fields.
	if !fh.Modified.IsZero() {
		// Contrary to the FileHeader.SetModTime method, we intentionally
		// do not convert to UTC, because we assume the user intends to encode

                    java.util.concurrent.TimeUnit.MILLISECONDS);
            log.info("Key rotation configured with interval: {} ms", intervalMillis);
        }
    }

    /**
     * Rotate a specific session key
     *
     * @param sessionId the session ID
     * @return the new key version number

                    ((SmbComTransactionResponse) resp).nextElement();
                }
            }

            /* Verification fails (w/ W2K3 server at least) if status is not 0. This
             * suggests MS doesn't compute the signature (correctly) for error responses
             * (perhaps for DOS reasons).
             */
            if (digest != null && resp.errorCode == 0) {
                digest.verify(BUF, 4, resp);

     * @param failureThreshold number of failures before opening
     * @param successThreshold number of successes in half-open before closing
     * @param resetTimeoutMillis time to wait before attempting reset (ms)
     * @param halfOpenMaxAttempts max attempts in half-open state
     */
    public SmbCircuitBreaker(String name, int failureThreshold, int successThreshold, long resetTimeoutMillis, long halfOpenMaxAttempts) {

            len += pad8(bufferIndex);
        } else if (compound && this.nextCommand == 0 && this.readSize > 0) {
            // Apply compound response handling as per MS-SMB2 3.2.5.1.9 - correct for both compound and single responses
            // 3.2.5.1.9 Handling Compounded Responses
            // The final response in the compounded response chain will have NextCommand equal to 0,

                if (logger.isDebugEnabled()) {
                    logger.debug(
                            "[scheduleParentGroupLookup] Async task completed for user: {}. Final groups: {}, Final roles: {}, Elapsed time: {}ms",
                            user.getName(), finalGroups.length, finalRoles.length, elapsedTime);

    }

    if (failedPing != -1) {
      failWebSocket(
        e =
          SocketTimeoutException(
            "sent ping but didn't receive pong within " +
              "${pingIntervalMillis}ms (after ${failedPing - 1} successful ping/pongs)",
          ),
        isWriter = true,
      )
      return
    }

    try {
      writer.writePing(ByteString.EMPTY)
    } catch (e: IOException) {

        // Check if key rotation is needed (including the current message)
        if (needsKeyRotation(message.length)) {
            log.warn("Encryption keys need rotation - will exceed usage limits (bytes: {} + {}, time: {} ms)", bytesEncrypted.get(),
                    message.length, System.currentTimeMillis() - encryptionStartTime);

            // Perform automatic key rotation if session key is available
            if (sessionKey != null) {