@azure/msal-node-extensions 1.5.26 → 5.0.0-beta.0

package/lib/msal-node-extensions.cjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-node-extensions v1.5.26 2025-12-04 */
+/*! @azure/msal-node-extensions v5.0.0-beta.0 2025-12-05 */
 'use strict';
 'use strict';
 
@@ -14,7 +14,7 @@ var _documentCurrentScript = typeof document !== 'undefined' ? document.currentS
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-const Constants$1 = {
+const Constants = {
     /**
      * An existing file was the target of an operation that required that the target not exist
      */
@@ -188,21 +188,21 @@ class CrossPlatformLock {
     async lock() {
         for (let tryCount = 0; tryCount < this.retryNumber; tryCount++) {
             try {
-                this.logger.info(`Pid ${process$1.pid} trying to acquire lock`);
+                this.logger.info(`Pid ${process$1.pid} trying to acquire lock`, "");
                 this.lockFileHandle = await fs.promises.open(this.lockFilePath, "wx+");
-                this.logger.info(`Pid ${process$1.pid} acquired lock`);
+                this.logger.info(`Pid ${process$1.pid} acquired lock`, "");
                 await this.lockFileHandle.write(process$1.pid.toString());
                 return;
             }
             catch (err) {
                 if (isNodeError(err)) {
-                    if (err.code === Constants$1.EEXIST_ERROR ||
-                        err.code === Constants$1.EPERM_ERROR) {
-                        this.logger.info(err.message);
+                    if (err.code === Constants.EEXIST_ERROR ||
+                        err.code === Constants.EPERM_ERROR) {
+                        this.logger.info(err.message, "");
                         await this.sleep(this.retryDelay);
                     }
                     else {
-                        this.logger.error(`${process$1.pid} was not able to acquire lock. Ran into error: ${err.message}`);
+                        this.logger.error(`${process$1.pid} was not able to acquire lock. Ran into error: ${err.message}`, "");
                         throw PersistenceError.createCrossPlatformLockError(err.message);
                     }
                 }
@@ -211,7 +211,7 @@ class CrossPlatformLock {
                 }
             }
         }
-        this.logger.error(`${process$1.pid} was not able to acquire lock. Exceeded amount of retries set in the options`);
+        this.logger.error(`${process$1.pid} was not able to acquire lock. Exceeded amount of retries set in the options`, "");
         throw PersistenceError.createCrossPlatformLockError("Not able to acquire lock. Exceeded amount of retries set in options");
     }
     /**
@@ -223,19 +223,19 @@ class CrossPlatformLock {
                 // if we have a file handle to the .lockfile, delete lock file
                 await fs.promises.unlink(this.lockFilePath);
                 await this.lockFileHandle.close();
-                this.logger.info("lockfile deleted");
+                this.logger.info("lockfile deleted", "");
             }
             else {
-                this.logger.warning("lockfile handle does not exist, so lockfile could not be deleted");
+                this.logger.warning("lockfile handle does not exist, so lockfile could not be deleted", "");
             }
         }
         catch (err) {
             if (isNodeError(err)) {
-                if (err.code === Constants$1.ENOENT_ERROR) {
-                    this.logger.info("Tried to unlock but lockfile does not exist");
+                if (err.code === Constants.ENOENT_ERROR) {
+                    this.logger.info("Tried to unlock but lockfile does not exist", "");
                 }
                 else {
-                    this.logger.error(`${process$1.pid} was not able to release lock. Ran into error: ${err.message}`);
+                    this.logger.error(`${process$1.pid} was not able to release lock. Ran into error: ${err.message}`, "");
                     throw PersistenceError.createCrossPlatformLockError(err.message);
                 }
             }
@@ -289,17 +289,17 @@ class PersistenceCachePlugin {
      * beforeCacheAccess() and afterCacheAccess().
      */
     async beforeCacheAccess(cacheContext) {
-        this.logger.info("Executing before cache access");
+        this.logger.info("Executing before cache access", "");
         const reloadNecessary = await this.persistence.reloadNecessary(this.lastSync);
         if (!reloadNecessary && this.currentCache !== null) {
             if (cacheContext.cacheHasChanged) {
-                this.logger.verbose("Cache context has changed");
+                this.logger.verbose("Cache context has changed", "");
                 await this.crossPlatformLock.lock();
             }
             return;
         }
         try {
-            this.logger.info(`Reload necessary. Last sync time: ${this.lastSync}`);
+            this.logger.info(`Reload necessary. Last sync time: ${this.lastSync}`, "");
             await this.crossPlatformLock.lock();
             this.currentCache = await this.persistence.load();
             this.lastSync = new Date().getTime();
@@ -307,17 +307,17 @@ class PersistenceCachePlugin {
                 cacheContext.tokenCache.deserialize(this.currentCache);
             }
             else {
-                this.logger.info("Cache empty.");
+                this.logger.info("Cache empty.", "");
             }
-            this.logger.info(`Last sync time updated to: ${this.lastSync}`);
+            this.logger.info(`Last sync time updated to: ${this.lastSync}`, "");
         }
         finally {
             if (!cacheContext.cacheHasChanged) {
                 await this.crossPlatformLock.unlock();
-                this.logger.info(`Pid ${process$1.pid} released lock`);
+                this.logger.info(`Pid ${process$1.pid} released lock`, "");
             }
             else {
-                this.logger.info(`Pid ${process$1.pid} beforeCacheAccess did not release lock`);
+                this.logger.info(`Pid ${process$1.pid} beforeCacheAccess did not release lock`, "");
             }
         }
     }
@@ -325,81 +325,25 @@ class PersistenceCachePlugin {
      * Writes to storage if MSAL in memory copy of cache has been changed.
      */
     async afterCacheAccess(cacheContext) {
-        this.logger.info("Executing after cache access");
+        this.logger.info("Executing after cache access", "");
         try {
             if (cacheContext.cacheHasChanged) {
-                this.logger.info("Msal in-memory cache has changed. Writing changes to persistence");
+                this.logger.info("Msal in-memory cache has changed. Writing changes to persistence", "");
                 this.currentCache = cacheContext.tokenCache.serialize();
                 await this.persistence.save(this.currentCache);
             }
             else {
-                this.logger.info("Msal in-memory cache has not changed. Did not write to persistence");
+                this.logger.info("Msal in-memory cache has not changed. Did not write to persistence", "");
             }
         }
         finally {
             await this.crossPlatformLock.unlock();
-            this.logger.info(`Pid ${process$1.pid} afterCacheAccess released lock`);
+            this.logger.info(`Pid ${process$1.pid} afterCacheAccess released lock`, "");
         }
     }
 }
 
-/*! @azure/msal-common v15.13.3 2025-12-04 */
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-const Constants = {
-    LIBRARY_NAME: "MSAL.JS",
-    SKU: "msal.js.common",
-    // default authority
-    DEFAULT_AUTHORITY: "https://login.microsoftonline.com/common/",
-    DEFAULT_AUTHORITY_HOST: "login.microsoftonline.com",
-    DEFAULT_COMMON_TENANT: "common",
-    // ADFS String
-    ADFS: "adfs",
-    DSTS: "dstsv2",
-    // Default AAD Instance Discovery Endpoint
-    AAD_INSTANCE_DISCOVERY_ENDPT: "https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=",
-    // CIAM URL
-    CIAM_AUTH_URL: ".ciamlogin.com",
-    AAD_TENANT_DOMAIN_SUFFIX: ".onmicrosoft.com",
-    // Resource delimiter - used for certain cache entries
-    RESOURCE_DELIM: "|",
-    // Placeholder for non-existent account ids/objects
-    NO_ACCOUNT: "NO_ACCOUNT",
-    // Claims
-    CLAIMS: "claims",
-    // Consumer UTID
-    CONSUMER_UTID: "9188040d-6c67-4c5b-b112-36a304b66dad",
-    // Default scopes
-    OPENID_SCOPE: "openid",
-    PROFILE_SCOPE: "profile",
-    OFFLINE_ACCESS_SCOPE: "offline_access",
-    EMAIL_SCOPE: "email",
-    CODE_GRANT_TYPE: "authorization_code",
-    RT_GRANT_TYPE: "refresh_token",
-    S256_CODE_CHALLENGE_METHOD: "S256",
-    URL_FORM_CONTENT_TYPE: "application/x-www-form-urlencoded;charset=utf-8",
-    AUTHORIZATION_PENDING: "authorization_pending",
-    NOT_DEFINED: "not_defined",
-    EMPTY_STRING: "",
-    NOT_APPLICABLE: "N/A",
-    NOT_AVAILABLE: "Not Available",
-    FORWARD_SLASH: "/",
-    IMDS_ENDPOINT: "http://169.254.169.254/metadata/instance/compute/location",
-    IMDS_VERSION: "2020-06-01",
-    IMDS_TIMEOUT: 2000,
-    AZURE_REGION_AUTO_DISCOVER_FLAG: "TryAutoDetect",
-    REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX: "login.microsoft.com",
-    KNOWN_PUBLIC_CLOUDS: [
-        "login.microsoftonline.com",
-        "login.windows.net",
-        "login.microsoft.com",
-        "sts.windows.net",
-    ],
-    SHR_NONCE_VALIDITY: 240,
-    INVALID_INSTANCE: "invalid_instance",
-};
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
 /**
  * we considered making this "enum" in the request instead of string, however it looks like the allowed list of
  * prompt values kept changing over past couple of years. There are some undocumented prompt values for some
@@ -408,35 +352,27 @@ const Constants = {
 const PromptValue = {
     LOGIN: "login",
     SELECT_ACCOUNT: "select_account",
-    CONSENT: "consent",
     NONE: "none",
-    CREATE: "create",
-    NO_SESSION: "no_session",
-};
+    CREATE: "create"};
 /**
  * Separators used in cache
  */
-const Separators = {
-    CACHE_KEY_SEPARATOR: "-"};
-const SERVER_TELEM_CONSTANTS = {
-    SCHEMA_VERSION: 5,
-    MAX_LAST_HEADER_BYTES: 330,
-    MAX_CACHED_ERRORS: 50,
-    CACHE_KEY: "server-telemetry",
-    CATEGORY_SEPARATOR: "|",
-    VALUE_SEPARATOR: ",",
-    OVERFLOW_TRUE: "1",
-    OVERFLOW_FALSE: "0",
-    UNKNOWN_ERROR: "unknown_error",
-};
+const CACHE_KEY_SEPARATOR = "-";
+const SERVER_TELEM_SCHEMA_VERSION = 5;
+const SERVER_TELEM_MAX_LAST_HEADER_BYTES = 330; // ESTS limit is 350B, set to 330 to provide a 20B buffer,
+const SERVER_TELEM_MAX_CACHED_ERRORS = 50; // Limit the number of errors that can be stored to prevent uncontrolled size gains
+const SERVER_TELEM_CACHE_KEY = "server-telemetry";
+const SERVER_TELEM_CATEGORY_SEPARATOR = "|";
+const SERVER_TELEM_VALUE_SEPARATOR = ",";
+const SERVER_TELEM_OVERFLOW_TRUE = "1";
+const SERVER_TELEM_OVERFLOW_FALSE = "0";
+const SERVER_TELEM_UNKNOWN_ERROR = "unknown_error";
 /**
  * Type of the authentication request
  */
 const AuthenticationScheme = {
     BEARER: "Bearer",
-    POP: "pop",
-    SSH: "ssh-cert",
-};
+    POP: "pop"};
 /**
  * Specifies the reason for fetching the access token from the identity provider
  */
@@ -444,20 +380,30 @@ const CacheOutcome = {
     // When a token is found in the cache or the cache is not supposed to be hit when making the request
     NOT_APPLICABLE: "0"};
 
-/*! @azure/msal-common v15.13.3 2025-12-04 */
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
+const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
+
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+function getDefaultErrorMessage(code) {
+    return `See https://aka.ms/msal.js.errors#${code} for details`;
+}
 /**
  * General error class thrown by the MSAL.js library.
  */
 class AuthError extends Error {
     constructor(errorCode, errorMessage, suberror) {
-        const errorString = errorMessage
-            ? `${errorCode}: ${errorMessage}`
-            : errorCode;
+        const message = errorMessage ||
+            (errorCode ? getDefaultErrorMessage(errorCode) : "");
+        const errorString = message ? `${errorCode}: ${message}` : errorCode;
         super(errorString);
         Object.setPrototypeOf(this, AuthError.prototype);
-        this.errorCode = errorCode || Constants.EMPTY_STRING;
-        this.errorMessage = errorMessage || Constants.EMPTY_STRING;
-        this.subError = suberror || Constants.EMPTY_STRING;
+        this.errorCode = errorCode || "";
+        this.errorMessage = message || "";
+        this.subError = suberror || "";
         this.name = "AuthError";
     }
     setCorrelationId(correlationId) {
@@ -465,58 +411,27 @@ class AuthError extends Error {
     }
 }
 
-/*! @azure/msal-common v15.13.3 2025-12-04 */
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-const clientInfoDecodingError = "client_info_decoding_error";
-const clientInfoEmptyError = "client_info_empty_error";
-const tokenParsingError = "token_parsing_error";
-const nullOrEmptyToken = "null_or_empty_token";
-const endpointResolutionError = "endpoints_resolution_error";
-const networkError = "network_error";
-const openIdConfigError = "openid_config_error";
-const hashNotDeserialized = "hash_not_deserialized";
-const invalidState = "invalid_state";
-const stateMismatch = "state_mismatch";
-const stateNotFound = "state_not_found";
-const nonceMismatch = "nonce_mismatch";
-const authTimeNotFound = "auth_time_not_found";
-const maxAgeTranspired = "max_age_transpired";
-const multipleMatchingTokens = "multiple_matching_tokens";
-const multipleMatchingAccounts = "multiple_matching_accounts";
-const multipleMatchingAppMetadata = "multiple_matching_appMetadata";
-const requestCannotBeMade = "request_cannot_be_made";
-const cannotRemoveEmptyScope = "cannot_remove_empty_scope";
-const cannotAppendScopeSet = "cannot_append_scopeset";
-const emptyInputScopeSet = "empty_input_scopeset";
-const deviceCodePollingCancelled = "device_code_polling_cancelled";
-const deviceCodeExpired = "device_code_expired";
-const deviceCodeUnknownError = "device_code_unknown_error";
-const noAccountInSilentRequest = "no_account_in_silent_request";
-const invalidCacheRecord = "invalid_cache_record";
-const invalidCacheEnvironment = "invalid_cache_environment";
-const noAccountFound = "no_account_found";
-const noCryptoObject = "no_crypto_object";
-const unexpectedCredentialType = "unexpected_credential_type";
-const invalidAssertion = "invalid_assertion";
-const invalidClientCredential = "invalid_client_credential";
-const tokenRefreshRequired = "token_refresh_required";
-const userTimeoutReached = "user_timeout_reached";
-const tokenClaimsCnfRequiredForSignedJwt = "token_claims_cnf_required_for_signedjwt";
-const authorizationCodeMissingFromServerResponse = "authorization_code_missing_from_server_response";
-const bindingKeyNotRemoved = "binding_key_not_removed";
-const endSessionEndpointNotSupported = "end_session_endpoint_not_supported";
-const keyIdMissing = "key_id_missing";
-const noNetworkConnectivity = "no_network_connectivity";
-const userCanceled = "user_canceled";
-const missingTenantIdError = "missing_tenant_id_error";
-const methodNotImplemented = "method_not_implemented";
-const nestedAppAuthBridgeDisabled = "nested_app_auth_bridge_disabled";
-const platformBrokerError = "platform_broker_error";
+/**
+ * Error thrown when there is an error in configuration of the MSAL.js library.
+ */
+class ClientConfigurationError extends AuthError {
+    constructor(errorCode) {
+        super(errorCode);
+        this.name = "ClientConfigurationError";
+        Object.setPrototypeOf(this, ClientConfigurationError.prototype);
+    }
+}
+function createClientConfigurationError(errorCode) {
+    return new ClientConfigurationError(errorCode);
+}
 
-/*! @azure/msal-common v15.13.3 2025-12-04 */
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -525,64 +440,12 @@ const platformBrokerError = "platform_broker_error";
 /**
  * ClientAuthErrorMessage class containing string constants used by error codes and messages.
  */
-const ClientAuthErrorMessages = {
-    [clientInfoDecodingError]: "The client info could not be parsed/decoded correctly",
-    [clientInfoEmptyError]: "The client info was empty",
-    [tokenParsingError]: "Token cannot be parsed",
-    [nullOrEmptyToken]: "The token is null or empty",
-    [endpointResolutionError]: "Endpoints cannot be resolved",
-    [networkError]: "Network request failed",
-    [openIdConfigError]: "Could not retrieve endpoints. Check your authority and verify the .well-known/openid-configuration endpoint returns the required endpoints.",
-    [hashNotDeserialized]: "The hash parameters could not be deserialized",
-    [invalidState]: "State was not the expected format",
-    [stateMismatch]: "State mismatch error",
-    [stateNotFound]: "State not found",
-    [nonceMismatch]: "Nonce mismatch error",
-    [authTimeNotFound]: "Max Age was requested and the ID token is missing the auth_time variable." +
-        " auth_time is an optional claim and is not enabled by default - it must be enabled." +
-        " See https://aka.ms/msaljs/optional-claims for more information.",
-    [maxAgeTranspired]: "Max Age is set to 0, or too much time has elapsed since the last end-user authentication.",
-    [multipleMatchingTokens]: "The cache contains multiple tokens satisfying the requirements. " +
-        "Call AcquireToken again providing more requirements such as authority or account.",
-    [multipleMatchingAccounts]: "The cache contains multiple accounts satisfying the given parameters. Please pass more info to obtain the correct account",
-    [multipleMatchingAppMetadata]: "The cache contains multiple appMetadata satisfying the given parameters. Please pass more info to obtain the correct appMetadata",
-    [requestCannotBeMade]: "Token request cannot be made without authorization code or refresh token.",
-    [cannotRemoveEmptyScope]: "Cannot remove null or empty scope from ScopeSet",
-    [cannotAppendScopeSet]: "Cannot append ScopeSet",
-    [emptyInputScopeSet]: "Empty input ScopeSet cannot be processed",
-    [deviceCodePollingCancelled]: "Caller has cancelled token endpoint polling during device code flow by setting DeviceCodeRequest.cancel = true.",
-    [deviceCodeExpired]: "Device code is expired.",
-    [deviceCodeUnknownError]: "Device code stopped polling for unknown reasons.",
-    [noAccountInSilentRequest]: "Please pass an account object, silent flow is not supported without account information",
-    [invalidCacheRecord]: "Cache record object was null or undefined.",
-    [invalidCacheEnvironment]: "Invalid environment when attempting to create cache entry",
-    [noAccountFound]: "No account found in cache for given key.",
-    [noCryptoObject]: "No crypto object detected.",
-    [unexpectedCredentialType]: "Unexpected credential type.",
-    [invalidAssertion]: "Client assertion must meet requirements described in https://tools.ietf.org/html/rfc7515",
-    [invalidClientCredential]: "Client credential (secret, certificate, or assertion) must not be empty when creating a confidential client. An application should at most have one credential",
-    [tokenRefreshRequired]: "Cannot return token from cache because it must be refreshed. This may be due to one of the following reasons: forceRefresh parameter is set to true, claims have been requested, there is no cached access token or it is expired.",
-    [userTimeoutReached]: "User defined timeout for device code polling reached",
-    [tokenClaimsCnfRequiredForSignedJwt]: "Cannot generate a POP jwt if the token_claims are not populated",
-    [authorizationCodeMissingFromServerResponse]: "Server response does not contain an authorization code to proceed",
-    [bindingKeyNotRemoved]: "Could not remove the credential's binding key from storage.",
-    [endSessionEndpointNotSupported]: "The provided authority does not support logout",
-    [keyIdMissing]: "A keyId value is missing from the requested bound token's cache record and is required to match the token to it's stored binding key.",
-    [noNetworkConnectivity]: "No network connectivity. Check your internet connection.",
-    [userCanceled]: "User cancelled the flow.",
-    [missingTenantIdError]: "A tenant id - not common, organizations, or consumers - must be specified when using the client_credentials flow.",
-    [methodNotImplemented]: "This method has not been implemented",
-    [nestedAppAuthBridgeDisabled]: "The nested app auth bridge is disabled",
-    [platformBrokerError]: "An error occurred in the native broker. See the platformBrokerError property for details.",
-};
 /**
  * Error thrown when there is an error in the client code running on the browser.
  */
 class ClientAuthError extends AuthError {
     constructor(errorCode, additionalMessage) {
-        super(errorCode, additionalMessage
-            ? `${ClientAuthErrorMessages[errorCode]}: ${additionalMessage}`
-            : ClientAuthErrorMessages[errorCode]);
+        super(errorCode, additionalMessage);
         this.name = "ClientAuthError";
         Object.setPrototypeOf(this, ClientAuthError.prototype);
     }
@@ -591,8 +454,16 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v15.13.3 2025-12-04 */
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
+const untrustedAuthority = "untrusted_authority";
+
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
+const noAccountFound = "no_account_found";
+const noNetworkConnectivity = "no_network_connectivity";
+const userCanceled = "user_canceled";
+const platformBrokerError = "platform_broker_error";
 
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -608,6 +479,70 @@ var LogLevel;
     LogLevel[LogLevel["Verbose"] = 3] = "Verbose";
     LogLevel[LogLevel["Trace"] = 4] = "Trace";
 })(LogLevel || (LogLevel = {}));
+// Shared cache state for better minification - using Map's insertion order for LRU
+const CACHE_CAPACITY = 50;
+const MAX_LOGS_PER_CORRELATION = 500;
+const correlationCache = new Map();
+/**
+ * Mark correlation ID as recently used by moving it to end of Map
+ * @param correlationId
+ * @param {CorrelationLogData} data
+ */
+function markAsRecentlyUsed(correlationId, data) {
+    correlationCache.delete(correlationId);
+    correlationCache.set(correlationId, data);
+}
+/**
+ * Add log message to cache for specific correlation ID
+ * @param correlationId
+ * @param {LoggedMessage} loggedMessage
+ */
+function addLogToCache(correlationId, loggedMessage) {
+    const currentTime = Date.now();
+    let data = correlationCache.get(correlationId);
+    if (data) {
+        // Mark as recently used
+        markAsRecentlyUsed(correlationId, data);
+    }
+    else {
+        // Create new entry
+        data = { logs: [], firstEventTime: currentTime };
+        correlationCache.set(correlationId, data);
+        // Remove LRU (first entry) if capacity exceeded
+        if (correlationCache.size > CACHE_CAPACITY) {
+            const firstKey = correlationCache.keys().next().value;
+            if (firstKey) {
+                correlationCache.delete(firstKey);
+            }
+        }
+    }
+    // Add log to the data, maintaining max logs per correlation
+    data.logs.push({
+        ...loggedMessage,
+        milliseconds: currentTime - data.firstEventTime,
+    });
+    if (data.logs.length > MAX_LOGS_PER_CORRELATION) {
+        data.logs.shift(); // Remove oldest log
+    }
+}
+/**
+ * Checks if a string is already a hashed logging string (6 alphanumeric characters)
+ */
+function isHashedString(str) {
+    if (str.length !== 6) {
+        return false;
+    }
+    for (let i = 0; i < str.length; i++) {
+        const char = str[i];
+        const isAlphaNumeric = (char >= "a" && char <= "z") ||
+            (char >= "A" && char <= "Z") ||
+            (char >= "0" && char <= "9");
+        if (!isAlphaNumeric) {
+            return false;
+        }
+    }
+    return true;
+}
 /**
  * Class which facilitates logging of messages to a specific place.
  */
@@ -626,10 +561,8 @@ class Logger {
             typeof setLoggerOptions.logLevel === "number"
                 ? setLoggerOptions.logLevel
                 : LogLevel.Info;
-        this.correlationId =
-            setLoggerOptions.correlationId || Constants.EMPTY_STRING;
-        this.packageName = packageName || Constants.EMPTY_STRING;
-        this.packageVersion = packageVersion || Constants.EMPTY_STRING;
+        this.packageName = packageName || "";
+        this.packageVersion = packageVersion || "";
     }
     static createDefaultLoggerOptions() {
         return {
@@ -643,27 +576,36 @@ class Logger {
     /**
      * Create new Logger with existing configurations.
      */
-    clone(packageName, packageVersion, correlationId) {
+    clone(packageName, packageVersion) {
         return new Logger({
             loggerCallback: this.localCallback,
             piiLoggingEnabled: this.piiLoggingEnabled,
             logLevel: this.level,
-            correlationId: correlationId || this.correlationId,
         }, packageName, packageVersion);
     }
     /**
      * Log message with required options.
      */
     logMessage(logMessage, options) {
+        const correlationId = options.correlationId;
+        const isHashedInput = isHashedString(logMessage);
+        if (isHashedInput) {
+            const loggedMessage = {
+                hash: logMessage,
+                level: options.logLevel,
+                containsPii: options.containsPii || false,
+                milliseconds: 0, // Will be calculated in addLogToCache
+            };
+            addLogToCache(correlationId, loggedMessage);
+        }
         if (options.logLevel > this.level ||
             (!this.piiLoggingEnabled && options.containsPii)) {
             return;
         }
         const timestamp = new Date().toUTCString();
         // Add correlationId to logs if set, correlationId provided on log messages take precedence
-        const logHeader = `[${timestamp}] : [${options.correlationId || this.correlationId || ""}]`;
+        const logHeader = `[${timestamp}] : [${correlationId}]`;
         const log = `${logHeader} : ${this.packageName}@${this.packageVersion} : ${LogLevel[options.logLevel]} - ${logMessage}`;
-        // debug(`msal:${LogLevel[options.logLevel]}${options.containsPii ? "-Pii": Constants.EMPTY_STRING}${options.context ? `:${options.context}` : Constants.EMPTY_STRING}`)(logMessage);
         this.executeCallback(options.logLevel, log, options.containsPii || false);
     }
     /**
@@ -681,7 +623,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Error,
             containsPii: false,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -691,7 +633,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Error,
             containsPii: true,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -701,7 +643,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Warning,
             containsPii: false,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -711,7 +653,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Warning,
             containsPii: true,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -721,7 +663,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Info,
             containsPii: false,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -731,7 +673,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Info,
             containsPii: true,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -741,7 +683,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Verbose,
             containsPii: false,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -751,7 +693,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Verbose,
             containsPii: true,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -761,7 +703,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Trace,
             containsPii: false,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -771,7 +713,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Trace,
             containsPii: true,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -782,98 +724,7 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v15.13.3 2025-12-04 */
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-const redirectUriEmpty = "redirect_uri_empty";
-const claimsRequestParsingError = "claims_request_parsing_error";
-const authorityUriInsecure = "authority_uri_insecure";
-const urlParseError = "url_parse_error";
-const urlEmptyError = "empty_url_error";
-const emptyInputScopesError = "empty_input_scopes_error";
-const invalidClaims = "invalid_claims";
-const tokenRequestEmpty = "token_request_empty";
-const logoutRequestEmpty = "logout_request_empty";
-const invalidCodeChallengeMethod = "invalid_code_challenge_method";
-const pkceParamsMissing = "pkce_params_missing";
-const invalidCloudDiscoveryMetadata = "invalid_cloud_discovery_metadata";
-const invalidAuthorityMetadata = "invalid_authority_metadata";
-const untrustedAuthority = "untrusted_authority";
-const missingSshJwk = "missing_ssh_jwk";
-const missingSshKid = "missing_ssh_kid";
-const missingNonceAuthenticationHeader = "missing_nonce_authentication_header";
-const invalidAuthenticationHeader = "invalid_authentication_header";
-const cannotSetOIDCOptions = "cannot_set_OIDCOptions";
-const cannotAllowPlatformBroker = "cannot_allow_platform_broker";
-const authorityMismatch = "authority_mismatch";
-const invalidRequestMethodForEAR = "invalid_request_method_for_EAR";
-const invalidAuthorizePostBodyParameters = "invalid_authorize_post_body_parameters";
-const invalidPlatformBrokerConfiguration = "invalid_platform_broker_configuration";
-
-/*! @azure/msal-common v15.13.3 2025-12-04 */
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-const ClientConfigurationErrorMessages = {
-    [redirectUriEmpty]: "A redirect URI is required for all calls, and none has been set.",
-    [claimsRequestParsingError]: "Could not parse the given claims request object.",
-    [authorityUriInsecure]: "Authority URIs must use https.  Please see here for valid authority configuration options: https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-js-initializing-client-applications#configuration-options",
-    [urlParseError]: "URL could not be parsed into appropriate segments.",
-    [urlEmptyError]: "URL was empty or null.",
-    [emptyInputScopesError]: "Scopes cannot be passed as null, undefined or empty array because they are required to obtain an access token.",
-    [invalidClaims]: "Given claims parameter must be a stringified JSON object.",
-    [tokenRequestEmpty]: "Token request was empty and not found in cache.",
-    [logoutRequestEmpty]: "The logout request was null or undefined.",
-    [invalidCodeChallengeMethod]: 'code_challenge_method passed is invalid. Valid values are "plain" and "S256".',
-    [pkceParamsMissing]: "Both params: code_challenge and code_challenge_method are to be passed if to be sent in the request",
-    [invalidCloudDiscoveryMetadata]: "Invalid cloudDiscoveryMetadata provided. Must be a stringified JSON object containing tenant_discovery_endpoint and metadata fields",
-    [invalidAuthorityMetadata]: "Invalid authorityMetadata provided. Must by a stringified JSON object containing authorization_endpoint, token_endpoint, issuer fields.",
-    [untrustedAuthority]: "The provided authority is not a trusted authority. Please include this authority in the knownAuthorities config parameter.",
-    [missingSshJwk]: "Missing sshJwk in SSH certificate request. A stringified JSON Web Key is required when using the SSH authentication scheme.",
-    [missingSshKid]: "Missing sshKid in SSH certificate request. A string that uniquely identifies the public SSH key is required when using the SSH authentication scheme.",
-    [missingNonceAuthenticationHeader]: "Unable to find an authentication header containing server nonce. Either the Authentication-Info or WWW-Authenticate headers must be present in order to obtain a server nonce.",
-    [invalidAuthenticationHeader]: "Invalid authentication header provided",
-    [cannotSetOIDCOptions]: "Cannot set OIDCOptions parameter. Please change the protocol mode to OIDC or use a non-Microsoft authority.",
-    [cannotAllowPlatformBroker]: "Cannot set allowPlatformBroker parameter to true when not in AAD protocol mode.",
-    [authorityMismatch]: "Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority.",
-    [invalidAuthorizePostBodyParameters]: "Invalid authorize post body parameters provided. If you are using authorizePostBodyParameters, the request method must be POST. Please check the request method and parameters.",
-    [invalidRequestMethodForEAR]: "Invalid request method for EAR protocol mode. The request method cannot be GET when using EAR protocol mode. Please change the request method to POST.",
-    [invalidPlatformBrokerConfiguration]: "Invalid platform broker configuration. `allowPlatformBrokerWithDOM` can only be enabled when `allowPlatformBroker` is enabled.",
-};
-/**
- * Error thrown when there is an error in configuration of the MSAL.js library.
- */
-class ClientConfigurationError extends AuthError {
-    constructor(errorCode) {
-        super(errorCode, ClientConfigurationErrorMessages[errorCode]);
-        this.name = "ClientConfigurationError";
-        Object.setPrototypeOf(this, ClientConfigurationError.prototype);
-    }
-}
-function createClientConfigurationError(errorCode) {
-    return new ClientConfigurationError(errorCode);
-}
-
-/*! @azure/msal-common v15.13.3 2025-12-04 */
-const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
-
-/*! @azure/msal-common v15.13.3 2025-12-04 */
-/**
- * Convert seconds to JS Date object. Seconds can be in a number or string format or undefined (will still return a date).
- * @param seconds
- */
-function toDateFromSeconds(seconds) {
-    if (seconds) {
-        return new Date(Number(seconds) * 1000);
-    }
-    return new Date();
-}
-
-/*! @azure/msal-common v15.13.3 2025-12-04 */
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -892,7 +743,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v15.13.3 2025-12-04 */
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
 /**
  * Error thrown when user interaction is required.
  */
@@ -900,23 +751,36 @@ class InteractionRequiredAuthError extends AuthError {
     constructor(errorCode, errorMessage, subError, timestamp, traceId, correlationId, claims, errorNo) {
         super(errorCode, errorMessage, subError);
         Object.setPrototypeOf(this, InteractionRequiredAuthError.prototype);
-        this.timestamp = timestamp || Constants.EMPTY_STRING;
-        this.traceId = traceId || Constants.EMPTY_STRING;
-        this.correlationId = correlationId || Constants.EMPTY_STRING;
-        this.claims = claims || Constants.EMPTY_STRING;
+        this.timestamp = timestamp || "";
+        this.traceId = traceId || "";
+        this.correlationId = correlationId || "";
+        this.claims = claims || "";
         this.name = "InteractionRequiredAuthError";
         this.errorNo = errorNo;
     }
 }
 
-/*! @azure/msal-common v15.13.3 2025-12-04 */
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
+/**
+ * Convert seconds to JS Date object. Seconds can be in a number or string format or undefined (will still return a date).
+ * @param seconds
+ */
+function toDateFromSeconds(seconds) {
+    if (seconds) {
+        return new Date(Number(seconds) * 1000);
+    }
+    return new Date();
+}
+
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
 /**
- * Converts a numeric tag to a string representation
+ * Converts a numeric tag from MSAL Runtime to a 5-character string representation.
+ * Tags are encoded as 30-bit values (6 bits per character) using a custom symbol space.
  * @param tag - The numeric tag to convert
  * @returns The string representation of the tag
  */
@@ -953,7 +817,7 @@ class PlatformBrokerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v15.13.3 2025-12-04 */
+/*! @azure/msal-common v16.0.0-beta.0 2025-12-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1004,34 +868,34 @@ class ServerTelemetryManager {
         this.cacheManager = cacheManager;
         this.apiId = telemetryRequest.apiId;
         this.correlationId = telemetryRequest.correlationId;
-        this.wrapperSKU = telemetryRequest.wrapperSKU || Constants.EMPTY_STRING;
-        this.wrapperVer = telemetryRequest.wrapperVer || Constants.EMPTY_STRING;
+        this.wrapperSKU = telemetryRequest.wrapperSKU || "";
+        this.wrapperVer = telemetryRequest.wrapperVer || "";
         this.telemetryCacheKey =
-            SERVER_TELEM_CONSTANTS.CACHE_KEY +
-                Separators.CACHE_KEY_SEPARATOR +
+            SERVER_TELEM_CACHE_KEY +
+                CACHE_KEY_SEPARATOR +
                 telemetryRequest.clientId;
     }
     /**
      * API to add MSER Telemetry to request
      */
     generateCurrentRequestHeaderValue() {
-        const request = `${this.apiId}${SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR}${this.cacheOutcome}`;
+        const request = `${this.apiId}${SERVER_TELEM_VALUE_SEPARATOR}${this.cacheOutcome}`;
         const platformFieldsArr = [this.wrapperSKU, this.wrapperVer];
         const nativeBrokerErrorCode = this.getNativeBrokerErrorCode();
         if (nativeBrokerErrorCode?.length) {
             platformFieldsArr.push(`broker_error=${nativeBrokerErrorCode}`);
         }
-        const platformFields = platformFieldsArr.join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
+        const platformFields = platformFieldsArr.join(SERVER_TELEM_VALUE_SEPARATOR);
         const regionDiscoveryFields = this.getRegionDiscoveryFields();
         const requestWithRegionDiscoveryFields = [
             request,
             regionDiscoveryFields,
-        ].join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
+        ].join(SERVER_TELEM_VALUE_SEPARATOR);
         return [
-            SERVER_TELEM_CONSTANTS.SCHEMA_VERSION,
+            SERVER_TELEM_SCHEMA_VERSION,
             requestWithRegionDiscoveryFields,
             platformFields,
-        ].join(SERVER_TELEM_CONSTANTS.CATEGORY_SEPARATOR);
+        ].join(SERVER_TELEM_CATEGORY_SEPARATOR);
     }
     /**
      * API to add MSER Telemetry for the last failed request
@@ -1041,23 +905,23 @@ class ServerTelemetryManager {
         const maxErrors = ServerTelemetryManager.maxErrorsToSend(lastRequests);
         const failedRequests = lastRequests.failedRequests
             .slice(0, 2 * maxErrors)
-            .join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
+            .join(SERVER_TELEM_VALUE_SEPARATOR);
         const errors = lastRequests.errors
             .slice(0, maxErrors)
-            .join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
+            .join(SERVER_TELEM_VALUE_SEPARATOR);
         const errorCount = lastRequests.errors.length;
         // Indicate whether this header contains all data or partial data
         const overflow = maxErrors < errorCount
-            ? SERVER_TELEM_CONSTANTS.OVERFLOW_TRUE
-            : SERVER_TELEM_CONSTANTS.OVERFLOW_FALSE;
-        const platformFields = [errorCount, overflow].join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
+            ? SERVER_TELEM_OVERFLOW_TRUE
+            : SERVER_TELEM_OVERFLOW_FALSE;
+        const platformFields = [errorCount, overflow].join(SERVER_TELEM_VALUE_SEPARATOR);
         return [
-            SERVER_TELEM_CONSTANTS.SCHEMA_VERSION,
+            SERVER_TELEM_SCHEMA_VERSION,
             lastRequests.cacheHits,
             failedRequests,
             errors,
             platformFields,
-        ].join(SERVER_TELEM_CONSTANTS.CATEGORY_SEPARATOR);
+        ].join(SERVER_TELEM_CATEGORY_SEPARATOR);
     }
     /**
      * API to cache token failures for MSER data capture
@@ -1066,7 +930,7 @@ class ServerTelemetryManager {
     cacheFailedRequest(error) {
         const lastRequests = this.getLastRequests();
         if (lastRequests.errors.length >=
-            SERVER_TELEM_CONSTANTS.MAX_CACHED_ERRORS) {
+            SERVER_TELEM_MAX_CACHED_ERRORS) {
             // Remove a cached error to make room, first in first out
             lastRequests.failedRequests.shift(); // apiId
             lastRequests.failedRequests.shift(); // correlationId
@@ -1090,7 +954,7 @@ class ServerTelemetryManager {
             }
         }
         else {
-            lastRequests.errors.push(SERVER_TELEM_CONSTANTS.UNKNOWN_ERROR);
+            lastRequests.errors.push(SERVER_TELEM_UNKNOWN_ERROR);
         }
         this.cacheManager.setServerTelemetry(this.telemetryCacheKey, lastRequests, this.correlationId);
         return;
@@ -1113,7 +977,7 @@ class ServerTelemetryManager {
             errors: [],
             cacheHits: 0,
         };
-        const lastRequests = this.cacheManager.getServerTelemetry(this.telemetryCacheKey);
+        const lastRequests = this.cacheManager.getServerTelemetry(this.telemetryCacheKey, this.correlationId);
         return lastRequests || initialValue;
     }
     /**
@@ -1148,18 +1012,16 @@ class ServerTelemetryManager {
         const errorCount = serverTelemetryEntity.errors.length;
         for (i = 0; i < errorCount; i++) {
             // failedRequests parameter contains pairs of apiId and correlationId, multiply index by 2 to preserve pairs
-            const apiId = serverTelemetryEntity.failedRequests[2 * i] ||
-                Constants.EMPTY_STRING;
-            const correlationId = serverTelemetryEntity.failedRequests[2 * i + 1] ||
-                Constants.EMPTY_STRING;
-            const errorCode = serverTelemetryEntity.errors[i] || Constants.EMPTY_STRING;
+            const apiId = serverTelemetryEntity.failedRequests[2 * i] || "";
+            const correlationId = serverTelemetryEntity.failedRequests[2 * i + 1] || "";
+            const errorCode = serverTelemetryEntity.errors[i] || "";
             // Count number of characters that would be added to header, each character is 1 byte. Add 3 at the end to account for separators
             dataSize +=
                 apiId.toString().length +
                     correlationId.toString().length +
                     errorCode.length +
                     3;
-            if (dataSize < SERVER_TELEM_CONSTANTS.MAX_LAST_HEADER_BYTES) {
+            if (dataSize < SERVER_TELEM_MAX_LAST_HEADER_BYTES) {
                 // Adding this entry to the header would still keep header size below the limit
                 maxErrors += 1;
             }
@@ -1176,9 +1038,9 @@ class ServerTelemetryManager {
      */
     getRegionDiscoveryFields() {
         const regionDiscoveryFields = [];
-        regionDiscoveryFields.push(this.regionUsed || Constants.EMPTY_STRING);
-        regionDiscoveryFields.push(this.regionSource || Constants.EMPTY_STRING);
-        regionDiscoveryFields.push(this.regionOutcome || Constants.EMPTY_STRING);
+        regionDiscoveryFields.push(this.regionUsed || "");
+        regionDiscoveryFields.push(this.regionSource || "");
+        regionDiscoveryFields.push(this.regionOutcome || "");
         return regionDiscoveryFields.join(",");
     }
     /**
@@ -1225,15 +1087,15 @@ class BasePersistence {
         // We are using a different location for the test to avoid overriding the functional cache
         const persistenceValidator = await this.createForPersistenceValidation();
         try {
-            await persistenceValidator.save(Constants$1.PERSISTENCE_TEST_DATA);
+            await persistenceValidator.save(Constants.PERSISTENCE_TEST_DATA);
             const retrievedDummyData = await persistenceValidator.load();
             if (!retrievedDummyData) {
                 throw PersistenceError.createCachePersistenceError("Persistence check failed. Data was written but it could not be read. " +
                     "Possible cause: on Linux, LibSecret is installed but D-Bus isn't running \
                     because it cannot be started over SSH.");
             }
-            if (retrievedDummyData !== Constants$1.PERSISTENCE_TEST_DATA) {
-                throw PersistenceError.createCachePersistenceError(`Persistence check failed. Data written ${Constants$1.PERSISTENCE_TEST_DATA} is different \
+            if (retrievedDummyData !== Constants.PERSISTENCE_TEST_DATA) {
+                throw PersistenceError.createCachePersistenceError(`Persistence check failed. Data written ${Constants.PERSISTENCE_TEST_DATA} is different \
                     from data read ${retrievedDummyData}`);
             }
             await persistenceValidator.delete();
@@ -1326,9 +1188,9 @@ class FilePersistence extends BasePersistence {
         }
         catch (err) {
             if (isNodeError(err)) {
-                if (err.code === Constants$1.ENOENT_ERROR) {
+                if (err.code === Constants.ENOENT_ERROR) {
                     // file does not exist, so it was not deleted
-                    this.logger.warning("Cache file does not exist, so it could not be deleted");
+                    this.logger.warning("Cache file does not exist, so it could not be deleted", "");
                     return false;
                 }
                 throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
@@ -1367,9 +1229,9 @@ class FilePersistence extends BasePersistence {
         }
         catch (err) {
             if (isNodeError(err)) {
-                if (err.code === Constants$1.ENOENT_ERROR) {
+                if (err.code === Constants.ENOENT_ERROR) {
                     // file does not exist, so it's never been modified
-                    this.logger.verbose("Cache file does not exist");
+                    this.logger.verbose("Cache file does not exist", "");
                     return 0;
                 }
                 throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
@@ -1384,7 +1246,7 @@ class FilePersistence extends BasePersistence {
         // File is created only if it does not exist
         const fileHandle = await fs.promises.open(this.filePath, "a");
         await fileHandle.close();
-        this.logger.info(`File created at ${this.filePath}`);
+        this.logger.info(`File created at ${this.filePath}`, "");
     }
     async createFileDirectory() {
         try {
@@ -1392,8 +1254,8 @@ class FilePersistence extends BasePersistence {
         }
         catch (err) {
             if (isNodeError(err)) {
-                if (err.code === Constants$1.EEXIST_ERROR) {
-                    this.logger.info(`Directory ${path.dirname(this.filePath)}  already exists`);
+                if (err.code === Constants.EEXIST_ERROR) {
+                    this.logger.info(`Directory ${path.dirname(this.filePath)}  already exists`, "");
                 }
                 else {
                     throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
@@ -1504,7 +1366,7 @@ class FilePersistenceWithDataProtection extends BasePersistence {
                 0 === encryptedContents.length) {
                 this.filePersistence
                     .getLogger()
-                    .info("Encrypted contents loaded from file were null or empty");
+                    .info("Encrypted contents loaded from file were null or empty", "");
                 return null;
             }
             return Dpapi.unprotectData(encryptedContents, this.optionalEntropy, this.scope.toString()).toString();
@@ -1701,19 +1563,19 @@ class LibSecretPersistence extends BasePersistence {
  */
 class Environment {
     static get homeEnvVar() {
-        return this.getEnvironmentVariable(Constants$1.ENVIRONMENT.HOME);
+        return this.getEnvironmentVariable(Constants.ENVIRONMENT.HOME);
     }
     static get lognameEnvVar() {
-        return this.getEnvironmentVariable(Constants$1.ENVIRONMENT.LOGNAME);
+        return this.getEnvironmentVariable(Constants.ENVIRONMENT.LOGNAME);
     }
     static get userEnvVar() {
-        return this.getEnvironmentVariable(Constants$1.ENVIRONMENT.USER);
+        return this.getEnvironmentVariable(Constants.ENVIRONMENT.USER);
     }
     static get lnameEnvVar() {
-        return this.getEnvironmentVariable(Constants$1.ENVIRONMENT.LNAME);
+        return this.getEnvironmentVariable(Constants.ENVIRONMENT.LNAME);
     }
     static get usernameEnvVar() {
-        return this.getEnvironmentVariable(Constants$1.ENVIRONMENT.USERNAME);
+        return this.getEnvironmentVariable(Constants.ENVIRONMENT.USERNAME);
     }
     static getEnvironmentVariable(name) {
         return process.env[name] || "";
@@ -1734,7 +1596,7 @@ class Environment {
         if (typeof process.getuid !== "function") {
             return false;
         }
-        return process.getuid() === Constants$1.LINUX_ROOT_USER_GUID;
+        return process.getuid() === Constants.LINUX_ROOT_USER_GUID;
     }
     static getUserRootDirectory() {
         return !this.isWindowsPlatform()
@@ -1742,7 +1604,7 @@ class Environment {
             : this.getUserHomeDirOnWindows();
     }
     static getUserHomeDirOnWindows() {
-        return this.getEnvironmentVariable(Constants$1.ENVIRONMENT.LOCAL_APPLICATION_DATA);
+        return this.getEnvironmentVariable(Constants.ENVIRONMENT.LOCAL_APPLICATION_DATA);
     }
     static getUserHomeDirOnUnix() {
         if (this.isWindowsPlatform()) {
@@ -1839,7 +1701,7 @@ class PersistenceCreator {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-node-extensions";
-const version = "1.5.26";
+const version = "5.0.0-beta.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1858,62 +1720,62 @@ class NativeBrokerPlugin {
     }
     setLogger(loggerOptions) {
         this.logger = new Logger(loggerOptions, name, version);
-        const logCallback = (message, logLevel, containsPii) => {
+        const logCallback = (message, logLevel, containsPii, correlationId = "") => {
             switch (logLevel) {
                 case msalNodeRuntime.LogLevel.Trace:
                     if (containsPii) {
-                        this.logger.tracePii(message);
+                        this.logger.tracePii(message, correlationId);
                     }
                     else {
-                        this.logger.trace(message);
+                        this.logger.trace(message, correlationId);
                     }
                     break;
                 case msalNodeRuntime.LogLevel.Debug:
                     if (containsPii) {
-                        this.logger.tracePii(message);
+                        this.logger.tracePii(message, correlationId);
                     }
                     else {
-                        this.logger.trace(message);
+                        this.logger.trace(message, correlationId);
                     }
                     break;
                 case msalNodeRuntime.LogLevel.Info:
                     if (containsPii) {
-                        this.logger.infoPii(message);
+                        this.logger.infoPii(message, correlationId);
                     }
                     else {
-                        this.logger.info(message);
+                        this.logger.info(message, correlationId);
                     }
                     break;
                 case msalNodeRuntime.LogLevel.Warning:
                     if (containsPii) {
-                        this.logger.warningPii(message);
+                        this.logger.warningPii(message, correlationId);
                     }
                     else {
-                        this.logger.warning(message);
+                        this.logger.warning(message, correlationId);
                     }
                     break;
                 case msalNodeRuntime.LogLevel.Error:
                     if (containsPii) {
-                        this.logger.errorPii(message);
+                        this.logger.errorPii(message, correlationId);
                     }
                     else {
-                        this.logger.error(message);
+                        this.logger.error(message, correlationId);
                     }
                     break;
                 case msalNodeRuntime.LogLevel.Fatal:
                     if (containsPii) {
-                        this.logger.errorPii(message);
+                        this.logger.errorPii(message, correlationId);
                     }
                     else {
-                        this.logger.error(message);
+                        this.logger.error(message, correlationId);
                     }
                     break;
                 default:
                     if (containsPii) {
-                        this.logger.infoPii(message);
+                        this.logger.infoPii(message, correlationId);
                     }
                     else {
-                        this.logger.info(message);
+                        this.logger.info(message, correlationId);
                     }
                     break;
             }
@@ -2037,8 +1899,7 @@ class NativeBrokerPlugin {
                     case PromptValue.SELECT_ACCOUNT:
                     case PromptValue.CREATE:
                         this.logger.info("Calling native interop SignInInteractively API", platformRequest.correlationId);
-                        const loginHint = platformRequest.loginHint ||
-                            Constants.EMPTY_STRING;
+                        const loginHint = platformRequest.loginHint || "";
                         msalNodeRuntime.msalNodeRuntime.SignInInteractivelyAsync(windowHandle, authParams, platformRequest.correlationId, loginHint, resultCallback);
                         break;
                     case PromptValue.NONE:
@@ -2058,8 +1919,7 @@ class NativeBrokerPlugin {
                         }
                         else {
                             this.logger.info("Calling native interop SignIn API", platformRequest.correlationId);
-                            const loginHint = platformRequest.loginHint ||
-                                Constants.EMPTY_STRING;
+                            const loginHint = platformRequest.loginHint || "";
                             msalNodeRuntime.msalNodeRuntime.SignInAsync(windowHandle, authParams, platformRequest.correlationId, loginHint, resultCallback);
                         }
                         break;
@@ -2148,7 +2008,8 @@ class NativeBrokerPlugin {
             if (request.claims) {
                 authParams.SetDecodedClaims(request.claims);
             }
-            if (request.authenticationScheme === AuthenticationScheme.POP) {
+            if (request.authenticationScheme ===
+                AuthenticationScheme.POP) {
                 if (!request.resourceRequestMethod ||
                     !request.resourceRequestUri) {
                     throw new Error("Authentication Scheme set to POP but one or more of the following parameters are missing: resourceRequestMethod, resourceRequestUri");
@@ -2239,12 +2100,12 @@ class NativeBrokerPlugin {
             expiresOn: toDateFromSeconds(authResult.expiresOn),
             tokenType: tokenType,
             correlationId: request.correlationId,
-            fromNativeBroker: true,
+            fromPlatformBroker: true,
         };
         return result;
     }
     generateAccountInfo(account, idTokenClaims) {
-        this.logger.trace("NativeBrokerPlugin - generateAccountInfo called");
+        this.logger.trace("NativeBrokerPlugin - generateAccountInfo called", "");
         const accountInfo = {
             homeAccountId: account.homeAccountId,
             environment: account.environment,
@@ -2280,7 +2141,7 @@ class NativeBrokerPlugin {
                     wrappedError = createClientAuthError(noNetworkConnectivity);
                     break;
                 case msalNodeRuntime.ErrorStatus.ServerTemporarilyUnavailable:
-                    wrappedError = new ServerError(ErrorCodes.SERVER_UNAVAILABLE, errorContext);
+                    wrappedError = new ServerError(ErrorCodes.SERVER_UNAVAILABLE, msalNodeRuntimeError.message);
                     break;
                 case msalNodeRuntime.ErrorStatus.UserCanceled:
                     wrappedError = createClientAuthError(userCanceled);