path:   kmsKeyListPath,
			query:  map[string]string{"pattern": "*"},
			asRoot: false,

			// It looks like this should allow listing any key that isn't "default-test-key", however
			// the policy engine matches all Deny statements first, without regard to Resources (for KMS).
			// This is for backwards compatibility where historically KMS statements ignored Resources.
			policy: `{
						"Effect": "Allow",

import org.codelibs.fess.util.ComponentUtil;

/**
 * Manager class for coordinating LLM (Large Language Model) client operations.
 *
 * This class serves as the central coordinator for LLM operations in Fess.
 * It manages registered LLM clients and provides access to the configured
 * LLM provider based on the current configuration.
 */
public class LlmClientManager {

 * governing permissions and limitations under the License.
 */
package org.codelibs.fess.util;

import static org.hamcrest.MatcherAssert.assertThat;
import static org.hamcrest.Matchers.is;

import java.lang.reflect.Constructor;
import java.lang.reflect.InvocationTargetException;
import java.lang.reflect.Method;
import java.util.Arrays;
import java.util.List;

import java.util.concurrent.locks.ReentrantReadWriteLock;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import jcifs.CIFSContext;
import jcifs.smb.SmbFile;

/**
 * SMB2/SMB3 Lease Manager
 *
 * Manages lease state for SMB2/SMB3 connections
 */
public class LeaseManager {

    private static final Logger log = LoggerFactory.getLogger(LeaseManager.class);

        assertEquals(expectedString, packet.toString());

        // Test other opCode, resultCode, questionType, recordType branches
        packet.opCode = NameServicePacket.WACK;
        packet.resultCode = NameServicePacket.SRV_ERR;
        packet.questionType = NameServicePacket.NBSTAT;
        packet.recordType = NameServicePacket.NBSTAT;

  inner class FramingSink(
    /** True if either side has cleanly shut down this stream. We shall send no more bytes. */
    var finished: Boolean = false,
  ) : Sink {
    /**
     * Buffer of outgoing data. This batches writes of small writes into this sink as larges frames
     * written to the outgoing connection. Batching saves the (small) framing overhead.
     */
    private val sendBuffer = Buffer()

    if (network) {
      builder.addNetworkInterceptor(interceptor)
    } else {
      builder.addInterceptor(interceptor)
    }
    client = builder.build()
  }

  /** Catches exceptions that are otherwise headed for the uncaught exception handler.  */
  private class ExceptionCatchingExecutor : ThreadPoolExecutor(1, 1, 0, TimeUnit.SECONDS, SynchronousQueue()) {

  }

  /**
   * Creates an empty {@code Set} that uses identity to determine equality. It compares object
   * references, instead of calling {@code equals}, to determine whether a provided object matches
   * an element in the set. For example, {@code contains} returns {@code false} when passed an
   * object that equals a set member, but isn't the same instance. This behavior is similar to the

            <li>{@code contains(string, substring)}: Checks if the string contains the substring.</li>
            <li>{@code matches(string, regex)}: Checks if the string matches the given regular expression.</li>
            <li>{@code not(condition)}: Negates the given condition.</li>

            // parse the line
            String[] property = parseProperty(line);
            boolean typed = false;
            if (maybeTyped && property[1].length() >= 2) {
                typed = property[1].matches(
                        "\\s*[TILFDXSCBilfdxscb]?(\\[[\\S\\s]*\\]|\\([\\S\\s]*\\)|\\{[\\S\\s]*\\}|\"[\\S\\s]*\")\\s*");
            }
            if (this.typed == null) {
                this.typed = typed;