* {@code throws} clause: Some such methods can in fact throw a checked exception (e.g., by
   * calling code written in Kotlin).) Typically, we want to let a {@link Throwable} from such a
   * method propagate untouched, just as we'd typically let it do for a non-reflective call.
   * However, we can't usually write {@code throw t;} when {@code t} has a static type of {@link
   * Throwable}. But we <i>can</i> write {@code sneakyThrow(t);}.

         * IllegalArgumentException is the one unchecked exception that we know is likely to happen
         * (thanks to the checkArgument calls in getAnnotatedMethodsNotCached). If it happens, we'd
         * prefer to propagate an IllegalArgumentException to the caller. However, we don't want to
         * simply rethrow an exception (e.getCause()) that may in rare cases have come from another

            assertThrows(SmbUnsupportedOperationException.class, () -> SmbEnumerationUtil.doEnum(parent, "*", 0, null, null));
        }

        @Test
        @DisplayName("list propagates SmbUnsupportedOperationException from doEnum")
        void list_propagatesUnsupportedOperationException() throws Exception {
            // Arrange: same setup as above to force doEnum -> SmbUnsupportedOperationException

    Runnable bad =
        () -> {
          throw new BadRunnableException();
        };

    future.set(1);
    future.addListener(bad, directExecutor()); // BadRunnableException must not propagate.
  }

  public void testMisbehavingListenerLaterDone() {
    class BadRunnableException extends RuntimeException {}

    CountingRunnable before = new CountingRunnable();
    Runnable bad =

  private static final LazyLogger logger = new LazyLogger(AggregateFuture.class);

  /**
   * The input futures. After {@link #init}, this field is read only by {@link #afterDone()} (to
   * propagate cancellation) and {@link #toString()}. To access the futures' <i>values</i>, {@code
   * AggregateFuture} attaches listeners that hold references to one or more inputs. And in the case

            when(mockSmbPipeHandleInternal.getSessionKey()).thenReturn(expectedKey);
            assertArrayEquals(expectedKey, handle.getSessionKey());
        }

        @Test
        @DisplayName("Should propagate CIFSException when getting session key")
        void testGetSessionKey_ThrowsCIFSException() throws Exception {
            DcerpcPipeHandle handle = createMockedDcerpcPipeHandle();

            // Then: Should call sendrecv with bind message
            verify(spyHandle).sendrecv(any(DcerpcMessage.class));
        }

        @Test
        @DisplayName("Should propagate IOException during bind")
        void testBindIOException() throws DcerpcException, IOException {
            // Given: Spy that throws IOException on sendrecv

        // Then it should be rejected because the ARCHIVE attribute is not present
        assertFalse(dosFileFilter.accept(mockFile));
    }

    /**
     * Tests that the accept method correctly propagates SmbException when
     * {@link SmbFile#getAttributes()} throws it.
     * @throws SmbException if an SMB error occurs.
     */
    @Test
    void testAccept_ThrowsSmbException() throws SmbException {

        boolean result = filter.accept(null, "anything");

        assertTrue(result, "Filter should accept when dir is null as defined");
    }

    /**
     * Exception flow: filter throws SmbException and it propagates to caller.
     */
    @Test
    @DisplayName("throws SmbException as declared by contract")
    void throwsSmbExceptionFromFilter() {
        SmbFilenameFilter filter = (dir, name) -> {

- Mask sensitive values (passwords, tokens)

## i18n / Localization
- This project supports up to 21 languages. When modifying user-facing strings, error codes, or labels, always propagate changes to ALL language files (fess_label_*.properties and frontend i18n files).

## Important Patterns for AI Assistants

### Do's
1. Use `@Resource` for field injection (not constructor injection)