// Happy path delegates; invalid case propagates SmbException
        when(treeConnection.hasCapability(123)).thenReturn(true);
        assertTrue(handle.hasCapability(123));
        verify(treeConnection).hasCapability(123);

        // Exception path
        when(treeConnection.hasCapability(999)).thenThrow(new SmbException("Not connected"));
        SmbException ex = assertThrows(SmbException.class, () -> handle.hasCapability(999));

            rpc.retval = errorCode; // Simulate error
            return null;
        }).when(mockDcerpcHandle).sendrecv(any(MsrpcSamrOpenDomain.class));

        // Act & Assert
        SmbException thrown = assertThrows(SmbException.class, () -> {
            new SamrDomainHandle(mockDcerpcHandle, mockPolicyHandle, access, mockSid);
        });
        assertEquals(errorCode, thrown.getNtStatus());

        when(config.getTransactionBufferSize()).thenReturn(65535);
        when(tree.send(any(Smb2IoctlRequest.class), eq(RequestParam.NO_RETRY))).thenThrow(new SmbException("boom"));

        IOException ex = assertThrows(IOException.class, stream::available, "Should convert SmbException to IOException");
        assertTrue(ex.getMessage().contains("boom"));
    }

    @Test
    @DisplayName("ensureTreeConnected delegates to handle")

 *
 * @author mbechler
 */
public class SmbPipeInputStream extends SmbFileInputStream {

    private final SmbPipeHandleImpl handle;

    /**
     * @param handle
     * @param th
     * @throws SmbException
     */
    SmbPipeInputStream(final SmbPipeHandleImpl handle, final SmbTreeHandleImpl th) throws CIFSException {
        super(handle.getPipe(), th, null);
        this.handle = handle;
    }

    /**

            rpc.retval = errorCode; // Simulate RPC error
            return null;
        }).when(mockDcerpcHandle).sendrecv(any(MsrpcLsarOpenPolicy2.class));

        // Act & Assert
        SmbException thrown = assertThrows(SmbException.class, () -> {
            new LsaPolicyHandle(mockDcerpcHandle, server, access);
        });

        // The error code gets mapped to NT_STATUS_UNSUCCESSFUL because it's not a valid NT status code

                "Default message should match the class contract");
        assertNull(ex.getCause(), "No cause expected from default constructor");
        assertTrue(ex instanceof SmbException, "Should be an SmbException");

        // toString should include the class name and the message
        String ts = ex.toString();
        assertTrue(ts.contains("SmbUnsupportedOperationException"), "toString should contain class name");

        }

        @Test
        @DisplayName("dispose wraps GSSException into SmbException")
        void dispose_failure_wraps() throws Exception {
            doThrow(new GSSException(GSSException.FAILURE)).when(gssContext).dispose();
            SmbException ex = assertThrows(SmbException.class, () -> ctx.dispose());
            assertTrue(ex.getMessage().contains("Context disposal failed"));
        }

    }

    @Override
    public synchronized SmbFileHandleImpl ensureOpen() throws CIFSException {
        if (!this.open) {
            throw new SmbException("Pipe handle already closed");
        }

        if (!isOpen()) {
            try (SmbTreeHandleImpl th = ensureTreeConnected()) {

                if (th.isSMB2()) {

        when(handle.isValid()).thenReturn(false);
        SmbWatchHandleImpl sut = new SmbWatchHandleImpl(handle, 0, false);

        SmbException ex = assertThrows(SmbException.class, sut::watch, "Expected SmbException when handle invalid");
        assertTrue(ex.getMessage().contains("Watch was broken by tree disconnect"));
    }

     * @param auth
     *            The NTLM password authenticator containing user credentials
     * @throws SmbException
     *             If there is an error setting up the signing digest
     */
    public SMB1SigningDigest(final SmbTransportInternal transport, final NtlmPasswordAuthenticator auth) throws SmbException {
        this.digest = Crypto.getMD5();
        try {