npm - @equinor/fusion-framework-vite-plugin-spa - Versions diffs - 5.1.0 → 5.2.2 - Mend

@equinor/fusion-framework-vite-plugin-spa 5.1.0 → 5.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (27) hide show

package/README.md +27 -3
package/dist/TelemetryAdapter-B6JH_RXA.js +91 -0
package/dist/TelemetryAdapter-B6JH_RXA.js.map +1 -0
package/dist/create-legacy-browser-delegate-4GII-R4B.js +2762 -0
package/dist/create-legacy-browser-delegate-4GII-R4B.js.map +1 -0
package/dist/enable-dev-server-tracing-GfRoCLxu.js +8227 -0
package/dist/enable-dev-server-tracing-GfRoCLxu.js.map +1 -0
package/dist/esm/html/bootstrap.js +17 -0
package/dist/esm/html/bootstrap.js.map +1 -1
package/dist/esm/html/enable-dev-server-tracing.js +94 -0
package/dist/esm/html/enable-dev-server-tracing.js.map +1 -0
package/dist/esm/version.js +1 -1
package/dist/html/bootstrap.js +247 -104
package/dist/html/bootstrap.js.map +1 -1
package/dist/index-CiqJ1Og1.js +1570 -0
package/dist/index-CiqJ1Og1.js.map +1 -0
package/dist/{index-Df9EZ6lh.js → index-glg6-DFO.js} +2 -2
package/dist/index-glg6-DFO.js.map +1 -0
package/dist/{module-DzjJ4gjy.js → module-BR47HvRl.js} +748 -319
package/dist/module-BR47HvRl.js.map +1 -0
package/dist/tsconfig.tsbuildinfo +1 -1
package/dist/types/html/enable-dev-server-tracing.d.ts +17 -0
package/dist/types/html/html.d.ts +1 -1
package/dist/types/version.d.ts +1 -1
package/package.json +17 -6
package/dist/index-Df9EZ6lh.js.map +0 -1
package/dist/module-DzjJ4gjy.js.map +0 -1

package/dist/{module-DzjJ4gjy.js → module-BR47HvRl.js} RENAMED Viewed

@@ -11058,13 +11058,14 @@ const ZodIssueCode = {
     custom: "custom",
 };
-var isMergeableObject;
-var hasRequiredIsMergeableObject;
+var cjs;
+var hasRequiredCjs;
-function requireIsMergeableObject () {
-	if (hasRequiredIsMergeableObject) return isMergeableObject;
-	hasRequiredIsMergeableObject = 1;
-	isMergeableObject = function isMergeableObject(value) {
+function requireCjs () {
+	if (hasRequiredCjs) return cjs;
+	hasRequiredCjs = 1;
+	var isMergeableObject = function isMergeableObject(value) {
 		return isNonNullObject(value)
 			&& !isSpecial(value)
 	};
@@ -11088,16 +11089,6 @@ function requireIsMergeableObject () {
 	function isReactElement(value) {
 		return value.$$typeof === REACT_ELEMENT_TYPE
 	}
-	return isMergeableObject;
-}
-var deepmerge_1;
-var hasRequiredDeepmerge;
-function requireDeepmerge () {
-	if (hasRequiredDeepmerge) return deepmerge_1;
-	hasRequiredDeepmerge = 1;
-	var defaultIsMergeableObject = requireIsMergeableObject();
 	function emptyTarget(val) {
 		return Array.isArray(val) ? [] : {}
@@ -11174,7 +11165,7 @@ function requireDeepmerge () {
 	function deepmerge(target, source, options) {
 		options = options || {};
 		options.arrayMerge = options.arrayMerge || defaultArrayMerge;
-		options.isMergeableObject = options.isMergeableObject || defaultIsMergeableObject;
+		options.isMergeableObject = options.isMergeableObject || isMergeableObject;
 		// cloneUnlessOtherwiseSpecified is added to `options` so that custom arrayMerge()
 		// implementations can use it. The caller may not replace it.
 		options.cloneUnlessOtherwiseSpecified = cloneUnlessOtherwiseSpecified;
@@ -11202,12 +11193,14 @@ function requireDeepmerge () {
 		}, {})
 	};
-	deepmerge_1 = deepmerge;
-	return deepmerge_1;
+	var deepmerge_1 = deepmerge;
+	cjs = deepmerge_1;
+	return cjs;
 }
-var deepmergeExports = requireDeepmerge();
-var deepmerge = /*@__PURE__*/getDefaultExportFromCjs(deepmergeExports);
+var cjsExports = requireCjs();
+var deepmerge = /*@__PURE__*/getDefaultExportFromCjs(cjsExports);
 /**
  * Enum representing the severity levels of telemetry items.
@@ -11341,7 +11334,7 @@ const TelemetryCustomEventSchema = TelemetryEventSchema.extend({
     type: literal(TelemetryType.Custom),
 }).passthrough();
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -11395,7 +11388,7 @@ const RESOURCE = "resource";
 const CLI_DATA = "clidata";
 const ATTRIBUTE_TOKENS = "attribute_tokens";
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -11629,7 +11622,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -11658,7 +11651,7 @@ function createAuthError(code, correlationId, additionalMessage) {
     return new AuthError(code, correlationId, additionalMessage || getDefaultErrorMessage$1(code));
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11681,7 +11674,7 @@ function createClientAuthError(errorCode, correlationId, additionalMessage) {
     return new ClientAuthError(errorCode, correlationId, additionalMessage);
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -11719,7 +11712,7 @@ const methodNotImplemented = "method_not_implemented";
 const resourceParameterRequired = "resource_parameter_required";
 const misplacedResourceParam = "misplaced_resource_parameter";
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11757,7 +11750,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11823,7 +11816,7 @@ function getJWSPayload(authToken, correlationId) {
     return matches[2];
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11911,7 +11904,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -11925,7 +11918,7 @@ const AuthorityType = {
     Ciam: 3,
 };
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -11947,7 +11940,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -11971,7 +11964,7 @@ const ProtocolMode = {
     EAR: "EAR",
 };
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /**
  * Returns the AccountInfo interface for this account.
  * @internal
@@ -12160,7 +12153,7 @@ function isAccountEntity(entity) {
         entity.hasOwnProperty("authorityType"));
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12170,7 +12163,7 @@ function isAccountEntity(entity) {
  */
 const unexpectedError = "unexpected_error";
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -12190,7 +12183,7 @@ function createClientConfigurationError(errorCode, correlationId) {
     return new ClientConfigurationError(errorCode, correlationId);
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12221,7 +12214,7 @@ const invalidDpopHtu = "invalid_dpop_htu";
 const invalidDpopNonce = "invalid_dpop_nonce";
 const dpopMissingResourceContext = "dpop_missing_resource_context";
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12233,7 +12226,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12313,7 +12306,7 @@ class StringUtils {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -12471,7 +12464,7 @@ class UrlString {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -12625,7 +12618,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12634,7 +12627,7 @@ const AzureCloudInstance = {
     // AzureCloudInstance is not specified.
     None: "none"};
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12644,7 +12637,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12654,7 +12647,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12725,7 +12718,7 @@ const RegionDiscoveryGetCurrentVersion = "regionDiscoveryGetCurrentVersion";
 const CacheManagerGetRefreshToken = "cacheManagerGetRefreshToken";
 const SetUserData = "setUserData";
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12818,7 +12811,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -12929,7 +12922,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12994,7 +12987,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -13281,7 +13274,7 @@ function serializeAttributeTokens(attributeTokens) {
     return [...attributeTokens].sort().join(" ");
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -14249,7 +14242,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -14283,7 +14276,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -14479,7 +14472,7 @@ class ScopeSet {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -14965,7 +14958,7 @@ function addAttributeTokens(parameters, attributeTokens) {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -15087,7 +15080,7 @@ function validateUrl(url, logger, correlationId) {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -15135,7 +15128,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -15158,7 +15151,7 @@ const DEFAULT_TOKEN_BINDING_KEY_MANAGER = {
     },
 };
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -15433,12 +15426,12 @@ class Logger {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$2 = "16.14.1";
+const version$2 = "16.14.2";
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -15446,7 +15439,7 @@ const version$2 = "16.14.1";
 const cacheQuotaExceeded = "cache_quota_exceeded";
 const cacheErrorUnknown = "cache_error_unknown";
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -15484,7 +15477,7 @@ function createCacheError(e) {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -16671,7 +16664,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -16685,7 +16678,7 @@ class DefaultStorageClass extends CacheManager {
 const PerformanceEventStatus = {
     InProgress: 1};
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -16743,7 +16736,7 @@ class StubPerformanceClient {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -16841,7 +16834,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -16868,7 +16861,7 @@ function isOidcProtocolMode(config) {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -16889,7 +16882,7 @@ function createJoseHeaderError(code, correlationId) {
     return new JoseHeaderError(code, correlationId);
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -16914,7 +16907,7 @@ function isPlainObject(value) {
     return Object.getPrototypeOf(value) === proto;
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -16924,7 +16917,7 @@ const missingAlgError = "missing_alg_error";
 const missingJwkError = "missing_jwk_error";
 const invalidJwkError = "invalid_jwk_error";
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -16990,7 +16983,7 @@ class JoseHeader {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -17091,7 +17084,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -17236,7 +17229,7 @@ class DpopProofGenerator {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -17287,7 +17280,7 @@ const badToken = "bad_token";
  */
 const interruptedUser = "interrupted_user";
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -17354,7 +17347,7 @@ function createInteractionRequiredAuthError(errorCode, correlationId, errorMessa
     return new InteractionRequiredAuthError(errorCode, correlationId, errorMessage);
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -17373,7 +17366,7 @@ class ServerError extends AuthError {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -17444,7 +17437,7 @@ function parseRequestState(base64Decode, state, correlationId) {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -17872,7 +17865,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -17882,7 +17875,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -17901,7 +17894,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint, fmiP
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -17925,7 +17918,7 @@ function getRequestThumbprint(clientId, request, homeAccountId) {
     };
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -18011,7 +18004,7 @@ class ThrottlingUtils {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -18042,7 +18035,7 @@ function createNetworkError(error, httpStatus, responseHeaders, additionalError)
     return new NetworkError(error, httpStatus, responseHeaders);
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -18175,7 +18168,7 @@ async function sendPostRequest(thumbprint, tokenEndpoint, options, correlationId
     return response;
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -18439,7 +18432,7 @@ class AuthorizationCodeClient {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -18666,7 +18659,7 @@ function extractLoginHint(account) {
     return account.loginHint || account.idTokenClaims?.login_hint || null;
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -18825,6 +18818,7 @@ class RefreshTokenClient {
             addRedirectUri(parameters, request.redirectUri);
         }
         addScopes(parameters, request.scopes, request.correlationId, true, this.config.authOptions.authority.options.OIDCOptions?.defaultScopes);
+        addResource(parameters, request.resource);
         addGrantType(parameters, GrantType.REFRESH_TOKEN_GRANT);
         addClientInfo(parameters);
         addLibraryInfo(parameters, this.config.libraryInfo);
@@ -18900,7 +18894,7 @@ class RefreshTokenClient {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -19193,7 +19187,7 @@ class StubServerTelemetryManager extends ServerTelemetryManager {
     clearNativeBrokerErrorCode() { }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -19320,7 +19314,7 @@ class SilentFlowClient {
     }
 }
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -19336,7 +19330,7 @@ const StubbedNetworkModule = {
     },
 };
-/*! @azure/msal-common v16.14.1 2026-09-15 */
+/*! @azure/msal-common v16.14.2 2026-10-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -19369,7 +19363,7 @@ function containsResourceParam(params) {
     return Object.prototype.hasOwnProperty.call(params, "resource");
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -19472,6 +19466,20 @@ const AcquireTokenByCodeAsync = "acquireTokenByCodeAsync";
 const HandleRedirectPromiseMeasurement = "handleRedirectPromise";
 const HandleNativeRedirectPromiseMeasurement = "handleNativeRedirectPromise";
 const NativeMessageHandlerHandshake = "nativeMessageHandlerHandshake";
+const NativeGenerateAuthResult = "nativeGenerateAuthResult";
+const PlatformAuthProviderDiscovery = "platformAuthProviderDiscovery";
+const PlatformAuthDOMCreateProvider = "platformAuthDOMCreateProvider";
+const PlatformAuthDOMGetSupportedContracts = "platformAuthDOMGetSupportedContracts";
+const PlatformAuthDOMInitializeRequest = "platformAuthDOMInitializeRequest";
+const PlatformAuthDOMGetToken = "platformAuthDOMGetToken";
+const PlatformAuthDOMValidateResponse = "platformAuthDOMValidateResponse";
+const PlatformAuthExtensionCreateProvider = "platformAuthExtensionCreateProvider";
+const PlatformAuthExtensionGetToken = "platformAuthExtensionGetToken";
+const PlatformAuthExtensionValidateResponse = "platformAuthExtensionValidateResponse";
+const PlatformAuthInteractionClientInitializeRequest = "platformAuthInteractionClientInitializeRequest";
+const PlatformAuthHandleNativeResponse = "platformAuthHandleNativeResponse";
+const PlatformAuthCacheAccount = "platformAuthCacheAccount";
+const PlatformAuthCacheNativeTokens = "platformAuthCacheNativeTokens";
 const RemoveHiddenIframe = "removeHiddenIframe";
 const ImportExistingCache = "importExistingCache";
 /**
@@ -19496,7 +19504,7 @@ const DecryptEarResponse = "decryptEarResponse";
  */
 const WaitForBridgeLateResponse = "waitForBridgeLateResponse";
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -19519,7 +19527,7 @@ function createBrowserAuthError(errorCode, correlationId, subError) {
     return new BrowserAuthError(errorCode, correlationId, subError);
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -19577,7 +19585,7 @@ const failedToDecryptEarResponse = "failed_to_decrypt_ear_response";
 const timedOut = "timed_out";
 const emptyResponse = "empty_response";
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -19616,7 +19624,7 @@ function base64DecToArr(base64String) {
     return Uint8Array.from(binString, (m) => m.codePointAt(0) || 0);
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -19802,7 +19810,7 @@ const iFrameRenewalPolicies = [
     CacheLookupPolicy.RefreshTokenAndNetwork,
 ];
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -19847,7 +19855,7 @@ function base64EncArr(aBytes) {
     return btoa(binString);
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -20194,7 +20202,7 @@ async function computeJwkThumbprint(publicJwk, correlationId) {
     return hashString(thumbprintJson);
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -20214,7 +20222,7 @@ function createBrowserConfigurationAuthError(errorCode, correlationId) {
     return new BrowserConfigurationAuthError(errorCode, correlationId, getDefaultErrorMessage(errorCode));
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -20222,7 +20230,7 @@ function createBrowserConfigurationAuthError(errorCode, correlationId) {
 const storageNotSupported = "storage_not_supported";
 const inMemRedirectUnavailable = "in_mem_redirect_unavailable";
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -20563,7 +20571,7 @@ function createGuid() {
     return createNewGuid();
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -20766,7 +20774,7 @@ class DatabaseStorage {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -20812,7 +20820,7 @@ class MemoryStorage {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -20950,7 +20958,7 @@ class AsyncMemoryStorage {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -21098,7 +21106,7 @@ TokenBindingKeyManager.TOKEN_BINDING_KEY_USAGES = [
     "verify",
 ];
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -21234,7 +21242,7 @@ class CryptoOps {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -21281,7 +21289,7 @@ const LocalStorageUpdated = "localStorageUpdated";
  */
 const SsoCapable = "ssoCapable";
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -21310,7 +21318,7 @@ function getTokenKeysCacheKey(clientId, schema = CREDENTIAL_SCHEMA_VERSION) {
     return `${PREFIX}.${schema}.${TOKEN_KEYS}.${clientId}`;
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -21401,7 +21409,7 @@ function getCookieExpirationTime(cookieLifeDays) {
     return expr.toUTCString();
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -21443,7 +21451,7 @@ function getTokenKeys(clientId, storage, schemaVersion) {
     };
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -21454,7 +21462,7 @@ function isEncrypted(data) {
         data.hasOwnProperty("data"));
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -21513,7 +21521,9 @@ class LocalStorage {
         await invokeAsync(this.importExistingCache.bind(this), ImportExistingCache, this.logger, this.performanceClient, correlationId)(correlationId);
         // Register listener for cache updates in other tabs
         this.broadcast.addEventListener("message", (event) => {
-            this.updateCache(event, correlationId);
+            this.updateCache(event, correlationId).catch(() => {
+                this.logger.error("0ufnan", correlationId);
+            });
         });
         this.initialized = true;
     }
@@ -21575,19 +21585,20 @@ class LocalStorage {
         this.broadcast.postMessage({
             key: key,
             value: value,
-            context: this.getContext(key),
+            context: this.getBroadcastContext(key),
         });
     }
     removeItem(key) {
-        if (this.memoryStorage.containsKey(key)) {
-            this.memoryStorage.removeItem(key);
+        const itemExists = this.containsKey(key) || this.memoryStorage.containsKey(key);
+        window.localStorage.removeItem(key);
+        this.memoryStorage.removeItem(key);
+        if (itemExists) {
             this.broadcast.postMessage({
                 key: key,
                 value: null,
-                context: this.getContext(key),
+                context: this.getBroadcastContext(key),
             });
         }
-        window.localStorage.removeItem(key);
     }
     getKeys() {
         return Object.keys(window.localStorage);
@@ -21704,29 +21715,73 @@ class LocalStorage {
         await Promise.all(promiseArr);
         return importedArr;
     }
-    /**
-     * Gets encryption context for a given cache entry. This is clientId for app specific entries, empty string for shared entries
-     * @param key
-     * @returns
-     */
     getContext(key) {
-        let context = "";
-        if (key.includes(this.clientId)) {
-            context = this.clientId; // Used to bind encryption key to this appId
+        return key.includes(this.clientId) ? this.clientId : "";
+    }
+    getBroadcastContext(key) {
+        const normalizedKey = key.toLowerCase();
+        const keySegments = normalizedKey.split(CACHE_KEY_SEPARATOR);
+        if (keySegments.length > 1) {
+            return keySegments[4] === this.clientId.toLowerCase()
+                ? this.clientId
+                : "";
+        }
+        const credentialType = this.getCredentialType(normalizedKey);
+        if (credentialType) {
+            const ownerPrefix = `-${credentialType}-${this.clientId.toLowerCase()}-`;
+            return normalizedKey.includes(ownerPrefix) ? this.clientId : "";
+        }
+        return normalizedKey.includes(this.clientId.toLowerCase())
+            ? this.clientId
+            : "";
+    }
+    getCredentialType(key) {
+        const normalizedKey = key.toLowerCase();
+        const keySegments = normalizedKey.split(CACHE_KEY_SEPARATOR);
+        const structuredCredentialType = keySegments[3];
+        return Object.values(CredentialType)
+            .map((type) => type.toLowerCase())
+            .find((type) => structuredCredentialType === type ||
+            normalizedKey.includes(`-${type}-`));
+    }
+    isFamilyRefreshToken(key, credentialType) {
+        if (credentialType !==
+            CredentialType.REFRESH_TOKEN.toLowerCase()) {
+            return false;
         }
-        return context;
+        const normalizedKey = key.toLowerCase();
+        const keySegments = normalizedKey.split(CACHE_KEY_SEPARATOR);
+        return keySegments.length > 1
+            ? keySegments[4] === THE_FAMILY_ID
+            : normalizedKey.includes(`-${credentialType}-${THE_FAMILY_ID}-`);
     }
-    updateCache(event, correlationId) {
+    isContextValid(key, context) {
+        const credentialType = this.getCredentialType(key);
+        const isFamilyRefreshToken = credentialType && this.isFamilyRefreshToken(key, credentialType);
+        const isClientBoundCredential = !!credentialType && !isFamilyRefreshToken;
+        return ((!isClientBoundCredential || !!context) &&
+            context === this.getBroadcastContext(key));
+    }
+    async updateCache(event, correlationId) {
         this.logger.trace("17cxcm", correlationId);
         const perfMeasurement = this.performanceClient.startMeasurement(LocalStorageUpdated);
         perfMeasurement.add({ isBackground: true });
-        const { key, value, context } = event.data;
-        if (!key) {
+        const key = event.data?.key;
+        const context = event.data?.context;
+        if (typeof key !== "string" || !key) {
             this.logger.error("0e10qr", correlationId);
             perfMeasurement.end({ success: false, errorCode: "noKey" });
             return;
         }
-        if (context && context !== this.clientId) {
+        if (typeof context !== "string") {
+            this.logger.error("16gtk4", correlationId);
+            perfMeasurement.end({
+                success: false,
+                errorCode: "noContext",
+            });
+            return;
+        }
+        if (!this.isContextValid(key, context)) {
             this.logger.trace(`04rtdy ${context}`, correlationId);
             /*
              * Discarded rather than ended: this is expected routing, not a failure.
@@ -21744,19 +21799,40 @@ class LocalStorage {
             perfMeasurement.discard();
             return;
         }
-        if (!value) {
-            this.memoryStorage.removeItem(key);
-            this.logger.verbose("04ypih", correlationId);
+        const persistedValue = this.getItem(key);
+        try {
+            const value = await this.getItemFromEncryptedCache(key, correlationId);
+            // A newer write or removal occurred while this entry was decrypted.
+            if (this.getItem(key) !== persistedValue) {
+                perfMeasurement.discard();
+                return;
+            }
+            if (!value) {
+                this.memoryStorage.removeItem(key);
+                this.logger.verbose("04ypih", correlationId);
+            }
+            else {
+                this.memoryStorage.setItem(key, value);
+                this.logger.verbose("1vzsgt", correlationId);
+            }
+            perfMeasurement.end({ success: true });
         }
-        else {
-            this.memoryStorage.setItem(key, value);
-            this.logger.verbose("1vzsgt", correlationId);
+        catch {
+            if (this.getItem(key) !== persistedValue) {
+                perfMeasurement.discard();
+                return;
+            }
+            this.memoryStorage.removeItem(key);
+            this.logger.error("0flmza", correlationId);
+            perfMeasurement.end({
+                success: false,
+                errorCode: "cacheUpdateFailed",
+            });
         }
-        perfMeasurement.end({ success: true });
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -21798,7 +21874,7 @@ class SessionStorage {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -21826,12 +21902,12 @@ const EventType = {
     BROKER_CONNECTION_ESTABLISHED: "msal:brokerConnectionEstablished",
 };
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version$1 = "5.23.0";
+const version$1 = "5.25.0";
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -21848,7 +21924,7 @@ function removeElementFromArray(array, element) {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -23294,7 +23370,7 @@ const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger, performanceClient, even
     return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger, performanceClient, eventHandler, staticAuthorityOptions, tokenBindingKeyManager);
 };
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -23341,7 +23417,7 @@ function getActiveAccount(browserStorage, correlationId) {
     return browserStorage.getActiveAccount(correlationId);
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -23445,7 +23521,7 @@ class EventHandler {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -23588,7 +23664,7 @@ async function clearCacheOnLogout(browserStorage, browserCrypto, logger, correla
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -23726,7 +23802,7 @@ function validateRequestMethod(interactionRequest, protocolMode) {
     return httpMethod;
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -23933,7 +24009,7 @@ async function initializeAuthorizationRequest(request, interactionType, config,
     return validatedRequest;
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -23951,7 +24027,7 @@ async function initializeAuthorizationRequest(request, interactionType, config,
  */
 const POPUP_RELAY_RESPONSE_TYPE = "msal:popup-relay-response:v1";
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -24057,7 +24133,7 @@ async function waitForPopupRelayResponse(timeoutMs, logger, request, popupWindow
     });
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -24081,7 +24157,7 @@ function extractBrowserRequestState(browserCrypto, state, correlationId) {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -24120,7 +24196,7 @@ function validateInteractionType(response, browserCrypto, interactionType, corre
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -24209,7 +24285,7 @@ class InteractionHandler {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -24254,7 +24330,7 @@ function createPlatformAuthExtraParametersNoCache(extraParametersNoCache, isProo
     };
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -24263,7 +24339,7 @@ const contentError = "ContentError";
 const pageException = "PageException";
 const userSwitch = "user_switch";
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -24276,7 +24352,7 @@ const DISABLED = "DISABLED";
 const ACCOUNT_UNAVAILABLE = "ACCOUNT_UNAVAILABLE";
 const UI_NOT_ALLOWED = "UI_NOT_ALLOWED";
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -24348,7 +24424,7 @@ function createNativeAuthError(code, correlationId, description, ext) {
     return error;
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -24397,7 +24473,7 @@ class SilentCacheClient extends StandardInteractionClient {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -24443,7 +24519,7 @@ class PlatformAuthInteractionClient extends BaseInteractionClient {
         // initialize native request (statically builds the request; does not contact the broker)
         let nativeRequest;
         try {
-            nativeRequest = await this.initializePlatformRequest(request);
+            nativeRequest = await invokeAsync(this.initializePlatformRequest.bind(this), PlatformAuthInteractionClientInitializeRequest, this.logger, this.performanceClient, this.correlationId)(request);
         }
         catch (e) {
             /*
@@ -24490,7 +24566,7 @@ class PlatformAuthInteractionClient extends BaseInteractionClient {
         // dispatch the request to the broker
         try {
             const validatedResponse = await this.platformAuthProvider.sendMessage(nativeRequest);
-            const result = await this.handleNativeResponse(validatedResponse, nativeRequest, reqTimestamp, request.storeInCache);
+            const result = await invokeAsync(this.handleNativeResponse.bind(this), PlatformAuthHandleNativeResponse, this.logger, this.performanceClient, this.correlationId)(validatedResponse, nativeRequest, reqTimestamp, request.storeInCache);
             nativeATMeasurement.end({
                 success: true,
                 requestId: result.requestId,
@@ -24593,7 +24669,7 @@ class PlatformAuthInteractionClient extends BaseInteractionClient {
      */
     async acquireTokenRedirect(request, rootMeasurement, options) {
         this.logger.trace("0luikq", this.correlationId);
-        const nativeRequest = await this.initializePlatformRequest(request);
+        const nativeRequest = await invokeAsync(this.initializePlatformRequest.bind(this), PlatformAuthInteractionClientInitializeRequest, this.logger, this.performanceClient, this.correlationId)(request);
         const navigateToLoginRequestUrl = options?.navigateToLoginRequestUrl ?? true;
         try {
             await this.platformAuthProvider.sendMessage(nativeRequest);
@@ -24645,7 +24721,9 @@ class PlatformAuthInteractionClient extends BaseInteractionClient {
         const cachedRequest = this.browserStorage.getCachedNativeRequest();
         if (!cachedRequest) {
             this.logger.verbose("0a6zjb", this.correlationId);
-            this.performanceClient?.addFields({ errorCode: "no_cached_request" }, this.correlationId);
+            this.performanceClient?.addFields({
+                errorCode: "no_cached_request",
+            }, this.correlationId);
             return null;
         }
         /*
@@ -24661,7 +24739,7 @@ class PlatformAuthInteractionClient extends BaseInteractionClient {
         try {
             this.logger.verbose("003x5a", this.correlationId);
             const response = await this.platformAuthProvider.sendMessage(request);
-            const authResult = await this.handleNativeResponse(response, request, reqTimestamp, storeInCache);
+            const authResult = await invokeAsync(this.handleNativeResponse.bind(this), PlatformAuthHandleNativeResponse, this.logger, this.performanceClient, this.correlationId)(response, request, reqTimestamp, storeInCache);
             const serverTelemetryManager = initializeServerTelemetryManager(this.apiId, this.config.auth.clientId, this.correlationId, this.browserStorage, this.logger, undefined, this.config.system.serverTelemetryEnabled);
             serverTelemetryManager.clearNativeBrokerErrorCode();
             return authResult;
@@ -24711,10 +24789,10 @@ class PlatformAuthInteractionClient extends BaseInteractionClient {
         // Ensure expires_in is in number format
         response.expires_in = Number(response.expires_in);
         // generate authenticationResult
-        const result = await this.generateAuthenticationResult(response, request, idTokenClaims, baseAccount, authority.canonicalAuthority, reqTimestamp);
+        const result = await invokeAsync(this.generateAuthenticationResult.bind(this), NativeGenerateAuthResult, this.logger, this.performanceClient, this.correlationId)(response, request, idTokenClaims, baseAccount, authority.canonicalAuthority, reqTimestamp);
         // cache accounts and tokens in the appropriate storage
-        await this.cacheAccount(baseAccount, isKmsi(idTokenClaims));
-        await this.cacheNativeTokens(response, request, homeAccountIdentifier, idTokenClaims, result.tenantId, reqTimestamp, authority.getPreferredCache(), // environment
+        await invokeAsync(this.cacheAccount.bind(this), PlatformAuthCacheAccount, this.logger, this.performanceClient, this.correlationId)(baseAccount, isKmsi(idTokenClaims));
+        await invokeAsync(this.cacheNativeTokens.bind(this), PlatformAuthCacheNativeTokens, this.logger, this.performanceClient, this.correlationId)(response, request, homeAccountIdentifier, idTokenClaims, result.tenantId, reqTimestamp, authority.getPreferredCache(), // environment
         storeInCache);
         return result;
     }
@@ -24966,8 +25044,7 @@ class PlatformAuthInteractionClient extends BaseInteractionClient {
          * attributeTokens is destructured out because PlatformAuthRequest represents it as a pre-serialized string, not the caller-provided Array<string>.
          */
         const { scopes, claims, extraParametersNoCache, dpopNonce } = request;
-        const scopeSet = new ScopeSet(scopes || [], this.correlationId);
-        scopeSet.appendScopes(OIDC_DEFAULT_SCOPES);
+        const scopeSet = new ScopeSet([...(scopes || []), ...OIDC_DEFAULT_SCOPES], this.correlationId);
         const mergedClaims = buildMergedClaims(claims, configClaims?.length ? configClaims : undefined);
         const hasAttributeTokens = !!request.attributeTokens?.length;
         this.performanceClient?.addFields({
@@ -25122,7 +25199,7 @@ class PlatformAuthInteractionClient extends BaseInteractionClient {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -25435,7 +25512,7 @@ async function handleResponseEAR(request, response, apiId, config, authority, br
     return (await invokeAsync(responseHandler.handleServerTokenResponse.bind(responseHandler), HandleServerTokenResponse, logger, performanceClient, request.correlationId)(decryptedData, authority, nowSeconds(), request, apiId, additionalData, undefined, undefined, undefined, undefined));
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -25490,7 +25567,7 @@ async function generateCodeChallengeFromVerifier(pkceCodeVerifier, performanceCl
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -25533,7 +25610,7 @@ class NavigationClient {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -25680,7 +25757,7 @@ function getHeaderDict(headers) {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -25811,14 +25888,14 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
     return overlayedConfig;
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
 class PlatformAuthExtensionHandler {
-    constructor(logger, handshakeTimeoutMs, performanceClient, extensionId) {
+    constructor(logger, handshakeTimeoutMs, performanceClient, extensionId, correlationId) {
         this.logger = logger;
         this.handshakeTimeoutMs = handshakeTimeoutMs;
         this.extensionId = extensionId;
@@ -25827,7 +25904,8 @@ class PlatformAuthExtensionHandler {
         this.messageChannel = new MessageChannel();
         this.windowListener = this.onWindowMessage.bind(this); // Window event callback doesn't have access to 'this' unless it's bound
         this.performanceClient = performanceClient;
-        this.handshakeEvent = this.performanceClient.startMeasurement(NativeMessageHandlerHandshake);
+        this.correlationId = correlationId || createNewGuid();
+        this.handshakeEvent = this.performanceClient.startMeasurement(NativeMessageHandlerHandshake, this.correlationId);
         this.platformAuthType =
             PlatformAuthConstants.PLATFORM_EXTENSION_PROVIDER;
     }
@@ -25836,29 +25914,51 @@ class PlatformAuthExtensionHandler {
      * @param request
      */
     async sendMessage(request) {
-        this.logger.trace(`0on4p2 ${this.platformAuthType}`, request.correlationId);
-        // fall back to native calls
-        const extensionRequest = { ...request };
-        delete extensionRequest.resourceRequestMethod;
-        delete extensionRequest.resourceRequestUri;
-        const messageBody = {
-            method: NativeExtensionMethod.GetToken,
-            request: extensionRequest,
-        };
-        const req = {
-            channel: PlatformAuthConstants.CHANNEL_ID,
-            extensionId: this.extensionId,
-            responseId: createNewGuid(),
-            body: messageBody,
-        };
-        this.logger.trace(`1qadfi ${this.platformAuthType}`, request.correlationId);
-        this.logger.tracePii(`1xm533 ${this.platformAuthType} ${JSON.stringify(req)}`, request.correlationId);
-        this.messageChannel.port1.postMessage(req);
-        const response = await new Promise((resolve, reject) => {
-            this.resolvers.set(req.responseId, { resolve, reject });
+        const correlationId = this.getCorrelationId(request.correlationId);
+        const sendMessageMeasurement = this.performanceClient.startMeasurement(PlatformAuthExtensionGetToken, correlationId);
+        sendMessageMeasurement.add({
+            platformAuthProviderType: this.platformAuthType,
         });
-        const validatedResponse = this.validatePlatformBrokerResponse(response);
-        return validatedResponse;
+        this.logger.trace(`0on4p2 ${this.platformAuthType}`, correlationId);
+        try {
+            // fall back to native calls
+            const extensionRequest = { ...request };
+            delete extensionRequest.resourceRequestMethod;
+            delete extensionRequest.resourceRequestUri;
+            const messageBody = {
+                method: NativeExtensionMethod.GetToken,
+                request: extensionRequest,
+            };
+            const req = {
+                channel: PlatformAuthConstants.CHANNEL_ID,
+                extensionId: this.extensionId,
+                responseId: createNewGuid(),
+                body: messageBody,
+            };
+            this.logger.trace(`1qadfi ${this.platformAuthType}`, correlationId);
+            this.logger.tracePii(`1xm533 ${this.platformAuthType} ${JSON.stringify(req)}`, correlationId);
+            this.messageChannel.port1.postMessage(req);
+            const response = await new Promise((resolve, reject) => {
+                this.resolvers.set(req.responseId, {
+                    resolve,
+                    reject,
+                    correlationId,
+                });
+            });
+            const validatedResponse = this.validatePlatformBrokerResponse(response, correlationId);
+            sendMessageMeasurement.end({
+                success: true,
+                platformAuthProviderType: this.platformAuthType,
+            });
+            return validatedResponse;
+        }
+        catch (e) {
+            sendMessageMeasurement.end({
+                success: false,
+                platformAuthProviderType: this.platformAuthType,
+            }, e);
+            throw e;
+        }
     }
     /**
      * Returns an instance of the MessageHandler that has successfully established a connection with an extension
@@ -25869,23 +25969,51 @@ class PlatformAuthExtensionHandler {
      */
     static async createProvider(logger, handshakeTimeoutMs, performanceClient, correlationId) {
         logger.trace("15zfnw", correlationId);
+        const createProviderMeasurement = performanceClient.startMeasurement(PlatformAuthExtensionCreateProvider, correlationId);
         try {
-            const preferredProvider = new PlatformAuthExtensionHandler(logger, handshakeTimeoutMs, performanceClient, PlatformAuthConstants.PREFERRED_EXTENSION_ID);
-            await preferredProvider.sendHandshakeRequest(correlationId);
+            const preferredProvider = new PlatformAuthExtensionHandler(logger, handshakeTimeoutMs, performanceClient, PlatformAuthConstants.PREFERRED_EXTENSION_ID, correlationId);
+            await preferredProvider.sendHandshakeRequest();
+            createProviderMeasurement.add({
+                platformAuthProviderAvailable: true,
+                platformAuthProviderType: PlatformAuthConstants.PLATFORM_EXTENSION_PROVIDER,
+            });
+            createProviderMeasurement.end({
+                platformAuthProviderAvailable: true,
+                platformAuthProviderType: PlatformAuthConstants.PLATFORM_EXTENSION_PROVIDER,
+            });
             return preferredProvider;
         }
         catch (e) {
             // If preferred extension fails for whatever reason, fallback to using any installed extension
-            const backupProvider = new PlatformAuthExtensionHandler(logger, handshakeTimeoutMs, performanceClient);
-            await backupProvider.sendHandshakeRequest(correlationId);
-            return backupProvider;
+            try {
+                const backupProvider = new PlatformAuthExtensionHandler(logger, handshakeTimeoutMs, performanceClient, undefined, correlationId);
+                await backupProvider.sendHandshakeRequest();
+                createProviderMeasurement.add({
+                    platformAuthProviderAvailable: true,
+                    platformAuthProviderType: PlatformAuthConstants.PLATFORM_EXTENSION_PROVIDER,
+                });
+                createProviderMeasurement.end({
+                    platformAuthProviderAvailable: true,
+                    platformAuthProviderType: PlatformAuthConstants.PLATFORM_EXTENSION_PROVIDER,
+                });
+                return backupProvider;
+            }
+            catch (backupError) {
+                createProviderMeasurement.add({
+                    platformAuthProviderAvailable: false,
+                });
+                createProviderMeasurement.end({
+                    platformAuthProviderAvailable: false,
+                }, backupError);
+                throw backupError;
+            }
         }
     }
     /**
      * Send handshake request helper.
      */
-    async sendHandshakeRequest(correlationId) {
-        this.logger.trace(`1dpg9o ${this.platformAuthType}`, correlationId);
+    async sendHandshakeRequest() {
+        this.logger.trace(`1dpg9o ${this.platformAuthType}`, this.correlationId);
         // Register this event listener before sending handshake
         window.addEventListener("message", this.windowListener, false); // false is important, because content script message processing should work first
         const req = {
@@ -25899,13 +26027,18 @@ class PlatformAuthExtensionHandler {
         this.handshakeEvent.add({
             extensionId: this.extensionId,
             extensionHandshakeTimeoutMs: this.handshakeTimeoutMs,
+            platformAuthRequestCorrelationId: this.correlationId,
         });
         this.messageChannel.port1.onmessage = (event) => {
             this.onChannelMessage(event);
         };
         window.postMessage(req, window.origin, [this.messageChannel.port2]);
         return new Promise((resolve, reject) => {
-            this.handshakeResolvers.set(req.responseId, { resolve, reject });
+            this.handshakeResolvers.set(req.responseId, {
+                resolve,
+                reject,
+                correlationId: this.correlationId,
+            });
             this.timeoutId = window.setTimeout(() => {
                 /*
                  * Throw an error if neither HandshakeResponse nor original Handshake request are received in a reasonable timeframe.
@@ -25914,11 +26047,14 @@ class PlatformAuthExtensionHandler {
                 window.removeEventListener("message", this.windowListener, false);
                 this.messageChannel.port1.close();
                 this.messageChannel.port2.close();
+                this.handshakeEvent.add({
+                    extensionHandshakeTimedOut: true,
+                });
                 this.handshakeEvent.end({
                     extensionHandshakeTimedOut: true,
                     success: false,
                 });
-                reject(createBrowserAuthError(nativeHandshakeTimeout, ""));
+                reject(createBrowserAuthError(nativeHandshakeTimeout, this.correlationId));
                 this.handshakeResolvers.delete(req.responseId);
             }, this.handshakeTimeoutMs); // Use a reasonable timeout in milliseconds here
         });
@@ -25928,7 +26064,7 @@ class PlatformAuthExtensionHandler {
      * @param event
      */
     onWindowMessage(event) {
-        const correlationId = createGuid();
+        let correlationId = createGuid();
         this.logger.trace(`0jpn5u ${this.platformAuthType}`, correlationId);
         // We only accept messages from ourselves
         if (event.source !== window) {
@@ -25952,6 +26088,7 @@ class PlatformAuthExtensionHandler {
                 this.logger.trace(`07buhm ${this.platformAuthType} ${request.responseId}`, correlationId);
                 return;
             }
+            correlationId = handshakeResolver.correlationId;
             // If we receive this message back it means no extension intercepted the request, meaning no extension supporting handshake protocol is installed
             this.logger.verbose(request.extensionId
                 ? `0xrkug ${request.extensionId}`
@@ -25960,11 +26097,15 @@ class PlatformAuthExtensionHandler {
             this.messageChannel.port1.close();
             this.messageChannel.port2.close();
             window.removeEventListener("message", this.windowListener, false);
+            this.handshakeEvent.add({
+                extensionInstalled: false,
+            });
             this.handshakeEvent.end({
                 success: false,
                 extensionInstalled: false,
             });
-            handshakeResolver.reject(createBrowserAuthError(nativeExtensionNotInstalled, ""));
+            handshakeResolver.reject(createBrowserAuthError(nativeExtensionNotInstalled, correlationId));
+            this.handshakeResolvers.delete(request.responseId);
         }
     }
     /**
@@ -25972,36 +26113,47 @@ class PlatformAuthExtensionHandler {
      * @param event
      */
     onChannelMessage(event) {
-        const correlationId = createGuid();
-        this.logger.trace(`1py8yf ${this.platformAuthType}`, correlationId);
         const request = event.data;
-        const resolver = this.resolvers.get(request.responseId);
-        const handshakeResolver = this.handshakeResolvers.get(request.responseId);
+        const responseId = request?.responseId;
+        const resolver = responseId
+            ? this.resolvers.get(responseId)
+            : undefined;
+        const handshakeResolver = responseId
+            ? this.handshakeResolvers.get(responseId)
+            : undefined;
+        const correlationId = resolver?.correlationId ||
+            handshakeResolver?.correlationId ||
+            createGuid();
+        this.logger.trace(`1py8yf ${this.platformAuthType}`, correlationId);
         try {
             const method = request.body.method;
             if (method === NativeExtensionMethod.Response) {
                 if (!resolver) {
                     return;
                 }
-                const response = request.body.response;
-                this.logger.trace(`19hpgm ${this.platformAuthType}`, correlationId);
-                this.logger.tracePii(`179a24 ${this.platformAuthType} ${JSON.stringify(response)}`, correlationId);
-                if (response.status !== "Success") {
-                    resolver.reject(createNativeAuthError(response.code, correlationId, response.description, response.ext));
-                }
-                else if (response.result) {
-                    if (response.result["code"] &&
-                        response.result["description"]) {
-                        resolver.reject(createNativeAuthError(response.result["code"], correlationId, response.result["description"], response.result["ext"]));
+                try {
+                    const response = request.body.response;
+                    this.logger.trace(`19hpgm ${this.platformAuthType}`, correlationId);
+                    this.logger.tracePii(`179a24 ${this.platformAuthType} ${JSON.stringify(response)}`, correlationId);
+                    if (response.status !== "Success") {
+                        resolver.reject(createNativeAuthError(response.code, correlationId, response.description, response.ext));
+                    }
+                    else if (response.result) {
+                        if (response.result["code"] &&
+                            response.result["description"]) {
+                            resolver.reject(createNativeAuthError(response.result["code"], correlationId, response.result["description"], response.result["ext"]));
+                        }
+                        else {
+                            resolver.resolve(response.result);
+                        }
                     }
                     else {
-                        resolver.resolve(response.result);
+                        throw createAuthError(unexpectedError, correlationId, "Event does not contain result.");
                     }
                 }
-                else {
-                    throw createAuthError(unexpectedError, correlationId, "Event does not contain result.");
+                finally {
+                    this.resolvers.delete(request.responseId);
                 }
-                this.resolvers.delete(request.responseId);
             }
             else if (method === NativeExtensionMethod.HandshakeResponse) {
                 if (!handshakeResolver) {
@@ -26011,25 +26163,46 @@ class PlatformAuthExtensionHandler {
                 clearTimeout(this.timeoutId); // Clear setTimeout
                 window.removeEventListener("message", this.windowListener, false); // Remove 'No extension' listener
                 this.extensionId = request.extensionId;
-                this.extensionVersion = request.body.version;
+                this.extensionVersion = request.body.version?.toString();
                 this.logger.verbose(`0yf5ib ${this.platformAuthType} ${this.extensionId}`, correlationId);
+                this.handshakeEvent.add({
+                    extensionId: this.extensionId,
+                    extensionVersion: this.extensionVersion,
+                    extensionInstalled: true,
+                });
                 this.handshakeEvent.end({
+                    extensionId: this.extensionId,
+                    extensionVersion: this.extensionVersion,
                     extensionInstalled: true,
                     success: true,
                 });
                 handshakeResolver.resolve();
                 this.handshakeResolvers.delete(request.responseId);
             }
-            // Do nothing if method is not Response or HandshakeResponse
+            else if (resolver) {
+                this.resolvers.delete(request.responseId);
+                resolver.reject(createAuthError(unexpectedError, correlationId, "Extension response contains an unexpected method."));
+            }
         }
         catch (err) {
             this.logger.error("0xf978", correlationId);
             this.logger.errorPii(`04i99o ${err}`, correlationId);
             this.logger.errorPii(`0xdvsy ${event}`, correlationId);
             if (resolver) {
-                resolver.reject(err);
+                this.resolvers.delete(responseId);
+                resolver.reject(err instanceof AuthError
+                    ? err
+                    : createAuthError(unexpectedError, correlationId, "Unable to parse extension response."));
             }
             else if (handshakeResolver) {
+                clearTimeout(this.timeoutId);
+                window.removeEventListener("message", this.windowListener, false);
+                this.messageChannel.port1.close();
+                this.messageChannel.port2.close();
+                this.handshakeEvent.end({
+                    success: false,
+                });
+                this.handshakeResolvers.delete(responseId);
                 handshakeResolver.reject(err);
             }
         }
@@ -26038,19 +26211,34 @@ class PlatformAuthExtensionHandler {
      * Validates native platform response before processing
      * @param response
      */
-    validatePlatformBrokerResponse(response) {
-        if (response.hasOwnProperty("access_token") &&
-            response.hasOwnProperty("id_token") &&
-            response.hasOwnProperty("client_info") &&
-            response.hasOwnProperty("account") &&
-            response.hasOwnProperty("scope") &&
-            response.hasOwnProperty("expires_in")) {
+    validatePlatformBrokerResponse(response, correlationId) {
+        const responseCorrelationId = this.getCorrelationId(correlationId);
+        const validationMeasurement = this.performanceClient.startMeasurement(PlatformAuthExtensionValidateResponse, responseCorrelationId);
+        if (response &&
+            Object.prototype.hasOwnProperty.call(response, "access_token") &&
+            Object.prototype.hasOwnProperty.call(response, "id_token") &&
+            Object.prototype.hasOwnProperty.call(response, "client_info") &&
+            Object.prototype.hasOwnProperty.call(response, "account") &&
+            Object.prototype.hasOwnProperty.call(response, "scope") &&
+            Object.prototype.hasOwnProperty.call(response, "expires_in")) {
+            validationMeasurement.end({
+                success: true,
+                platformAuthProviderType: this.platformAuthType,
+            });
             return response;
         }
         else {
-            throw createAuthError(unexpectedError, "", "Response missing expected properties.");
+            const error = createAuthError(unexpectedError, responseCorrelationId, "Response missing expected properties.");
+            validationMeasurement.end({
+                success: false,
+                platformAuthProviderType: this.platformAuthType,
+            }, error);
+            throw error;
         }
     }
+    getCorrelationId(correlationId) {
+        return correlationId || this.correlationId;
+    }
     /**
      * Returns the Id for the browser extension this handler is communicating with
      * @returns
@@ -26075,7 +26263,7 @@ class PlatformAuthExtensionHandler {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -26090,17 +26278,49 @@ class PlatformAuthDOMHandler {
     }
     static async createProvider(logger, performanceClient, correlationId) {
         logger.trace("12mj4a", correlationId);
-        // @ts-ignore
-        if (window.navigator?.platformAuthentication) {
-            const supportedContracts =
-            // @ts-ignore
-            await window.navigator.platformAuthentication.getSupportedContracts(PlatformAuthConstants.MICROSOFT_ENTRA_BROKERID);
-            if (supportedContracts?.includes(PlatformAuthConstants.PLATFORM_DOM_APIS)) {
+        const createProviderMeasurement = performanceClient.startMeasurement(PlatformAuthDOMCreateProvider, correlationId);
+        try {
+            const platformAuthentication = window.navigator.platformAuthentication;
+            if (!platformAuthentication) {
+                createProviderMeasurement.add({
+                    platformAuthProviderAvailable: false,
+                });
+                createProviderMeasurement.end({
+                    platformAuthProviderAvailable: false,
+                });
+                return undefined;
+            }
+            const supportedContracts = (await invokeAsync(platformAuthentication.getSupportedContracts.bind(platformAuthentication), PlatformAuthDOMGetSupportedContracts, logger, performanceClient, correlationId)(PlatformAuthConstants.MICROSOFT_ENTRA_BROKERID));
+            const contractSupported = supportedContracts?.includes(PlatformAuthConstants.PLATFORM_DOM_APIS);
+            if (contractSupported) {
                 logger.trace("1h5q1r", correlationId);
+                createProviderMeasurement.add({
+                    platformAuthProviderAvailable: true,
+                    platformAuthProviderType: PlatformAuthConstants.PLATFORM_DOM_PROVIDER,
+                });
+                createProviderMeasurement.end({
+                    platformAuthProviderAvailable: true,
+                    platformAuthProviderType: PlatformAuthConstants.PLATFORM_DOM_PROVIDER,
+                });
                 return new PlatformAuthDOMHandler(logger, performanceClient, correlationId);
             }
+            createProviderMeasurement.add({
+                platformAuthProviderAvailable: false,
+            });
+            createProviderMeasurement.end({
+                platformAuthProviderAvailable: false,
+            });
+            return undefined;
+        }
+        catch (e) {
+            createProviderMeasurement.add({
+                platformAuthProviderAvailable: false,
+            });
+            createProviderMeasurement.end({
+                platformAuthProviderAvailable: false,
+            }, e);
+            throw e;
         }
-        return undefined;
     }
     /**
      * Returns the Id for the broker extension this handler is communicating with
@@ -26121,31 +26341,46 @@ class PlatformAuthDOMHandler {
      * @returns
      */
     async sendMessage(request) {
-        this.logger.trace(`02bcil ${this.platformAuthType}`, request.correlationId);
+        const correlationId = this.getCorrelationId(request.correlationId);
+        const sendMessageMeasurement = this.performanceClient.startMeasurement(PlatformAuthDOMGetToken, correlationId);
+        sendMessageMeasurement.add({
+            platformAuthProviderType: this.platformAuthType,
+        });
+        this.logger.trace(`02bcil ${this.platformAuthType}`, correlationId);
         try {
-            const platformDOMRequest = this.initializePlatformDOMRequest(request);
+            const platformDOMRequest = invoke(this.initializePlatformDOMRequest.bind(this), PlatformAuthDOMInitializeRequest, this.logger, this.performanceClient, correlationId)(request);
             const response =
             // @ts-ignore
             await window.navigator.platformAuthentication.executeGetToken(platformDOMRequest);
-            return this.validatePlatformBrokerResponse(response, request.correlationId);
+            const validatedResponse = this.validatePlatformBrokerResponse(response, correlationId);
+            sendMessageMeasurement.end({
+                success: true,
+                platformAuthProviderType: this.platformAuthType,
+            });
+            return validatedResponse;
         }
         catch (e) {
-            this.logger.error(`11im7g ${this.platformAuthType}`, request.correlationId);
+            this.logger.error(`11im7g ${this.platformAuthType}`, correlationId);
+            sendMessageMeasurement.end({
+                success: false,
+                platformAuthProviderType: this.platformAuthType,
+            }, e);
             throw e;
         }
     }
     initializePlatformDOMRequest(request) {
-        this.logger.trace(`15d6yv ${this.platformAuthType}`, request.correlationId);
         const { accountId, clientId, authority, scope, redirectUri, correlationId, state, preferBinding, enclave, reqCnf, extraParametersNoCache, extraParameters, ...remainingProperties } = request;
+        const requestCorrelationId = this.getCorrelationId(correlationId);
+        this.logger.trace(`15d6yv ${this.platformAuthType}`, requestCorrelationId);
         delete remainingProperties.resourceRequestMethod;
         delete remainingProperties.resourceRequestUri;
-        const validExtraParameters = this.getDOMExtraParams(remainingProperties, correlationId);
+        const validExtraParameters = this.getDOMExtraParams(remainingProperties, requestCorrelationId);
         const platformDOMRequest = {
             accountId: accountId,
             brokerId: this.getExtensionId(),
             authority: authority,
             clientId: clientId,
-            correlationId: correlationId || this.correlationId,
+            correlationId: requestCorrelationId,
             extraParameters: {
                 ...extraParameters,
                 ...validExtraParameters,
@@ -26162,32 +26397,68 @@ class PlatformAuthDOMHandler {
         return platformDOMRequest;
     }
     validatePlatformBrokerResponse(response, correlationId) {
-        if (response.hasOwnProperty("isSuccess")) {
-            if (response.hasOwnProperty("accessToken") &&
-                response.hasOwnProperty("idToken") &&
-                response.hasOwnProperty("clientInfo") &&
-                response.hasOwnProperty("account") &&
-                response.hasOwnProperty("scopes") &&
-                response.hasOwnProperty("expiresIn")) {
+        const validationMeasurement = this.performanceClient.startMeasurement(PlatformAuthDOMValidateResponse, correlationId);
+        const requiredKeys = [
+            "accessToken",
+            "idToken",
+            "clientInfo",
+            "account",
+            "scopes",
+            "expiresIn",
+        ];
+        const isValid = response &&
+            requiredKeys.every((key) => Object.prototype.hasOwnProperty.call(response, key));
+        if (response &&
+            Object.prototype.hasOwnProperty.call(response, "isSuccess")) {
+            if (isValid) {
                 this.logger.trace(`0h4vei ${this.platformAuthType}`, correlationId);
-                return this.convertToPlatformBrokerResponse(response, correlationId);
+                try {
+                    const validatedResponse = this.convertToPlatformBrokerResponse(response, correlationId);
+                    validationMeasurement.end({
+                        success: true,
+                        platformAuthProviderType: this.platformAuthType,
+                    });
+                    return validatedResponse;
+                }
+                catch (e) {
+                    validationMeasurement.end({
+                        success: false,
+                        platformAuthProviderType: this.platformAuthType,
+                    }, e);
+                    throw e;
+                }
             }
-            else if (response.hasOwnProperty("error")) {
+            else if (Object.prototype.hasOwnProperty.call(response, "error")) {
                 const errorResponse = response;
                 if (errorResponse.isSuccess === false &&
                     errorResponse.error &&
                     errorResponse.error.code) {
                     this.logger.trace(`0g92vm ${this.platformAuthType}`, correlationId);
-                    throw createNativeAuthError(errorResponse.error.code, correlationId, errorResponse.error.description, {
+                    const nativeAuthError = createNativeAuthError(errorResponse.error.code, correlationId, errorResponse.error.description, {
                         error: parseInt(errorResponse.error.errorCode),
                         protocol_error: errorResponse.error.protocolError,
                         status: errorResponse.error.status,
                         properties: errorResponse.error.properties,
                     });
+                    validationMeasurement.end({
+                        success: false,
+                        platformAuthProviderType: this.platformAuthType,
+                        brokerErrorName: errorResponse.error.code,
+                        brokerErrorCode: errorResponse.error.errorCode,
+                    }, nativeAuthError);
+                    throw nativeAuthError;
                 }
             }
         }
-        throw createAuthError(unexpectedError, correlationId, "Response missing expected properties.");
+        const error = createAuthError(unexpectedError, correlationId, "Response missing expected properties.");
+        validationMeasurement.end({
+            success: false,
+            platformAuthProviderType: this.platformAuthType,
+        }, error);
+        throw error;
+    }
+    getCorrelationId(correlationId) {
+        return correlationId || this.correlationId;
     }
     convertToPlatformBrokerResponse(response, correlationId) {
         this.logger.trace(`14913t ${this.platformAuthType}`, correlationId);
@@ -26243,29 +26514,58 @@ class PlatformAuthDOMHandler {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 async function getPlatformAuthProvider(logger, performanceClient, correlationId, nativeBrokerHandshakeTimeout, enablePlatformBrokerDOMSupport) {
     logger.trace("134j0v", correlationId);
+    const discoveryMeasurement = performanceClient.startMeasurement(PlatformAuthProviderDiscovery, correlationId);
     logger.trace(`04c81g ${enablePlatformBrokerDOMSupport}`, correlationId);
     let platformAuthProvider;
     try {
         if (enablePlatformBrokerDOMSupport) {
             // Check if DOM platform API is supported first
-            platformAuthProvider = await PlatformAuthDOMHandler.createProvider(logger, performanceClient, correlationId);
+            try {
+                platformAuthProvider =
+                    await PlatformAuthDOMHandler.createProvider(logger, performanceClient, correlationId);
+            }
+            catch (e) {
+                logger.trace("1ij09j", correlationId);
+            }
+            if (platformAuthProvider) {
+                discoveryMeasurement.add({
+                    platformAuthProviderType: PlatformAuthConstants.PLATFORM_DOM_PROVIDER,
+                });
+                discoveryMeasurement.end({
+                    success: true,
+                    platformAuthProviderType: PlatformAuthConstants.PLATFORM_DOM_PROVIDER,
+                });
+                return platformAuthProvider;
+            }
         }
-        if (!platformAuthProvider) {
-            logger.trace("0l3na8", correlationId);
-            /*
-             * If DOM APIs are not available, check if browser extension is available.
-             * Platform authentication via DOM APIs is preferred over extension APIs.
-             */
-            platformAuthProvider =
-                await PlatformAuthExtensionHandler.createProvider(logger, nativeBrokerHandshakeTimeout ||
-                    DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS, performanceClient, correlationId);
+        logger.trace("0l3na8", correlationId);
+        /*
+         * If DOM APIs are not available, check if browser extension is available.
+         * Platform authentication via DOM APIs is preferred over extension APIs.
+         */
+        platformAuthProvider =
+            await PlatformAuthExtensionHandler.createProvider(logger, nativeBrokerHandshakeTimeout ||
+                DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS, performanceClient, correlationId);
+        if (platformAuthProvider) {
+            discoveryMeasurement.add({
+                platformAuthProviderType: PlatformAuthConstants.PLATFORM_EXTENSION_PROVIDER,
+            });
         }
+        discoveryMeasurement.end({
+            success: !!platformAuthProvider,
+            platformAuthProviderType: platformAuthProvider
+                ? PlatformAuthConstants.PLATFORM_EXTENSION_PROVIDER
+                : undefined,
+        });
     }
     catch (e) {
         logger.trace("0icbd7", e);
+        discoveryMeasurement.end({
+            success: false,
+        }, e);
     }
     return platformAuthProvider;
 }
@@ -26277,8 +26577,22 @@ async function getPlatformAuthProvider(logger, performanceClient, correlationId,
  * @param platformAuthProvider
  * @param authenticationScheme
  */
-function isPlatformAuthAllowed(config, logger, correlationId, platformAuthProvider, authenticationScheme) {
+function isPlatformAuthAllowed(config, logger, correlationId, platformAuthProvider, authenticationScheme, performanceClient) {
     logger.trace("0uko3r", correlationId);
+    const schemeSupported = !authenticationScheme ||
+        authenticationScheme === AuthenticationScheme.BEARER ||
+        authenticationScheme === AuthenticationScheme.POP;
+    const fields = {
+        allowPlatformBroker: config.system.allowPlatformBroker,
+        ...(config.system.allowPlatformBroker && {
+            platformAuthProviderType: platformAuthProvider instanceof PlatformAuthDOMHandler
+                ? PlatformAuthConstants.PLATFORM_DOM_PROVIDER
+                : platformAuthProvider
+                    ? PlatformAuthConstants.PLATFORM_EXTENSION_PROVIDER
+                    : undefined,
+        }),
+    };
+    performanceClient?.addFields(fields, correlationId);
     // throw an error if allowPlatformBroker is not enabled and allowPlatformBrokerWithDOM is enabled
     if (!config.system.allowPlatformBroker &&
         config.experimental.allowPlatformBrokerWithDOM) {
@@ -26294,21 +26608,15 @@ function isPlatformAuthAllowed(config, logger, correlationId, platformAuthProvid
         // Platform broker auth providers are not available
         return false;
     }
-    if (authenticationScheme) {
-        switch (authenticationScheme) {
-            case AuthenticationScheme.BEARER:
-            case AuthenticationScheme.POP:
-                logger.trace("18tev1", correlationId);
-                return true;
-            default:
-                logger.trace("1dd2nh", correlationId);
-                return false;
-        }
+    if (!schemeSupported) {
+        logger.trace("1dd2nh", correlationId);
+        return false;
     }
+    logger.trace("18tev1", correlationId);
     return true;
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -26817,7 +27125,7 @@ class PopupClient extends StandardInteractionClient {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -27267,7 +27575,7 @@ class RedirectClient extends StandardInteractionClient {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -27333,7 +27641,7 @@ function removeHiddenIframe(iframe) {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -27571,7 +27879,7 @@ class SilentIframeClient extends StandardInteractionClient {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -27638,7 +27946,7 @@ class SilentRefreshClient extends StandardInteractionClient {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -27651,7 +27959,7 @@ class HybridSpaAuthorizationCodeClient extends AuthorizationCodeClient {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -27724,7 +28032,7 @@ class SilentAuthCodeClient extends StandardInteractionClient {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 function collectInstanceStats(currentClientId, performanceEvent, logger, correlationId) {
     const frameInstances =
     // @ts-ignore
@@ -27740,7 +28048,126 @@ function collectInstanceStats(currentClientId, performanceEvent, logger, correla
     });
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Selects request preparation using the current account and broker availability.
+ */
+function resolveSilentRequestPreparation(input, platformAuthProvider, logger, performanceClient) {
+    const { request, account, correlationId, config } = input;
+    const prepareRequest = account.nativeAccountId &&
+        isPlatformAuthAllowed(config, logger, correlationId, platformAuthProvider, request.authenticationScheme, performanceClient)
+        ? preparePlatformSilentRequest
+        : prepareWebSilentRequest;
+    return prepareRequest(input);
+}
+/**
+ * Preserves the standard web thumbprint and caller-owned request references.
+ */
+function prepareWebSilentRequest({ request, account, correlationId, config, }) {
+    const thumbprint = getRequestThumbprint(config.auth.clientId, {
+        ...request,
+        authority: request.authority || config.auth.authority}, account.homeAccountId);
+    return {
+        key: JSON.stringify(thumbprint),
+        request,
+        account,
+    };
+}
+/**
+ * Snapshots broker inputs and creates the extended key before acquisition begins.
+ */
+function preparePlatformSilentRequest({ request, account, config, }) {
+    const platformRequest = snapshotPlatformSilentRequest({
+        ...request,
+        account,
+    });
+    return {
+        key: `platform:${getPlatformSilentRequestKey(platformRequest, config)}`,
+        request: platformRequest,
+        account: platformRequest.account,
+    };
+}
+/**
+ * Extends the common thumbprint with broker and client-side silent-flow inputs.
+ * Scopes are normalized like the broker request, without folding their casing.
+ */
+function getPlatformSilentRequestKey(request, config) {
+    const thumbprint = getRequestThumbprint(config.auth.clientId, {
+        ...request,
+        authority: request.authority || config.auth.authority,
+        correlationId: request.correlationId || "",
+        scopes: new ScopeSet([...(request.scopes || []), ...OIDC_DEFAULT_SCOPES], request.correlationId || "")
+            .asArray()
+            .sort(),
+    }, request.account.homeAccountId);
+    return JSON.stringify({
+        ...thumbprint,
+        accountId: request.account.nativeAccountId,
+        accountTenantId: request.account.tenantId,
+        accountEnvironment: request.account.environment,
+        azureCloudInstance: request.azureCloudOptions?.azureCloudInstance,
+        cloudTenantId: request.azureCloudOptions?.tenant,
+        redirectUri: request.redirectUri || config.auth.redirectUri,
+        nonce: request.nonce,
+        prompt: request.prompt,
+        state: request.state,
+        loginHint: request.loginHint,
+        popKid: request.popKid,
+        shrNonce: request.shrNonce,
+        dpopNonce: request.dpopNonce,
+        skipBrokerClaims: request.embeddedClientId
+            ? !!request.skipBrokerClaims
+            : undefined,
+        extraParameters: canonicalizeStringDict(request.extraParameters),
+        extraQueryParameters: canonicalizeStringDict(request.extraQueryParameters),
+        extraParametersNoCache: canonicalizeStringDict(request.extraParametersNoCache),
+        forceRefresh: !!request.forceRefresh,
+        cacheLookupPolicy: request.cacheLookupPolicy ?? CacheLookupPolicy.Default,
+    });
+}
+/**
+ * Copies caller-owned mutable inputs before asynchronous broker initialization.
+ */
+function snapshotPlatformSilentRequest(request) {
+    return {
+        ...request,
+        scopes: [...(request.scopes || [])],
+        account: { ...request.account },
+        azureCloudOptions: request.azureCloudOptions
+            ? { ...request.azureCloudOptions }
+            : undefined,
+        extraParameters: request.extraParameters
+            ? { ...request.extraParameters }
+            : undefined,
+        extraQueryParameters: request.extraQueryParameters
+            ? { ...request.extraQueryParameters }
+            : undefined,
+        extraParametersNoCache: request.extraParametersNoCache
+            ? { ...request.extraParametersNoCache }
+            : undefined,
+        attributeTokens: request.attributeTokens
+            ? [...request.attributeTokens]
+            : undefined,
+        storeInCache: request.storeInCache
+            ? { ...request.storeInCache }
+            : undefined,
+    };
+}
+/**
+ * Canonicalizes dictionary ordering while preserving exact parameter values.
+ */
+function canonicalizeStringDict(values = {}) {
+    return Object.keys(values)
+        .sort()
+        .map((key) => [key, values[key]]);
+}
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -27797,6 +28224,9 @@ class StandardController {
         this.hybridAuthCodeResponses = new Map();
         // Initialize performance client
         this.performanceClient = this.config.telemetry.client;
+        this.performanceClient.addGlobalFields({
+            allowPlatformBroker: this.config.system.allowPlatformBroker,
+        });
         // Initialize environment-specific crypto and token-binding services.
         if (this.isBrowserEnvironment) {
             this.browserCrypto = new CryptoOps(this.logger, this.performanceClient);
@@ -28057,9 +28487,9 @@ class StandardController {
             enforceResourceParameter(this.config.auth.isMcp, request);
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, correlationId, InteractionType.Redirect, request);
             let result;
-            if (this.platformAuthProvider &&
-                this.canUsePlatformBroker(request)) {
-                const nativeClient = new PlatformAuthInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenRedirect, this.performanceClient, this.platformAuthProvider, this.getNativeAccountId(request), this.nativeInternalStorage, correlationId, this.tokenBindingKeyManager);
+            const platformAuthProvider = this.platformAuthProvider;
+            if (this.canUsePlatformBroker(request) && platformAuthProvider) {
+                const nativeClient = new PlatformAuthInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenRedirect, this.performanceClient, platformAuthProvider, this.getNativeAccountId(request), this.nativeInternalStorage, correlationId, this.tokenBindingKeyManager);
                 result = invokeAsync(nativeClient.acquireTokenRedirect.bind(nativeClient), NativeInteractionClientAcquireTokenRedirect, this.logger, this.performanceClient, correlationId)(request, atrMeasurement).catch((e) => {
                     if (e instanceof NativeAuthError &&
                         isFatalNativeAuthError(e)) {
@@ -28744,11 +29174,8 @@ class StandardController {
     canUsePlatformBroker(request, accountId) {
         const correlationId = this.getRequestCorrelationId(request);
         this.logger.trace("1n9lbl", correlationId);
-        if (!this.platformAuthProvider) {
-            this.logger.trace("0vnu11", correlationId);
-            return false;
-        }
-        if (!isPlatformAuthAllowed(this.config, this.logger, correlationId, this.platformAuthProvider, request.authenticationScheme)) {
+        const platformAuthAllowed = isPlatformAuthAllowed(this.config, this.logger, correlationId, this.platformAuthProvider, request.authenticationScheme, this.performanceClient);
+        if (!platformAuthAllowed) {
             this.logger.trace("0yoy1g", correlationId);
             return false;
         }
@@ -29012,21 +29439,23 @@ class StandardController {
      * @returns
      */
     async acquireTokenSilentDeduped(request, account, correlationId) {
-        const thumbprint = getRequestThumbprint(this.config.auth.clientId, {
-            ...request,
-            authority: request.authority || this.config.auth.authority}, account.homeAccountId);
-        const silentRequestKey = JSON.stringify(thumbprint);
-        const inProgressRequest = this.activeSilentTokenRequests.get(silentRequestKey);
+        const preparedRequest = resolveSilentRequestPreparation({
+            request,
+            account,
+            correlationId,
+            config: this.config,
+        }, this.platformAuthProvider, this.logger, this.performanceClient);
+        const inProgressRequest = this.activeSilentTokenRequests.get(preparedRequest.key);
         if (typeof inProgressRequest === "undefined") {
             this.logger.verbose("0fcjbk", correlationId);
             this.performanceClient.addFields({ deduped: false }, correlationId);
             const activeRequest = invokeAsync(this.acquireTokenSilentAsync.bind(this), AcquireTokenSilentAsync, this.logger, this.performanceClient, correlationId)({
-                ...request,
+                ...preparedRequest.request,
                 correlationId,
-            }, account);
-            this.activeSilentTokenRequests.set(silentRequestKey, activeRequest);
+            }, preparedRequest.account);
+            this.activeSilentTokenRequests.set(preparedRequest.key, activeRequest);
             return activeRequest.finally(() => {
-                this.activeSilentTokenRequests.delete(silentRequestKey);
+                this.activeSilentTokenRequests.delete(preparedRequest.key);
             });
         }
         else {
@@ -29140,7 +29569,7 @@ class StandardController {
      */
     async acquireTokenSilentNoIframe(silentRequest, cacheLookupPolicy) {
         // if the cache policy is set to access_token only, we should not be hitting the native layer yet
-        if (isPlatformAuthAllowed(this.config, this.logger, silentRequest.correlationId, this.platformAuthProvider, silentRequest.authenticationScheme) &&
+        if (isPlatformAuthAllowed(this.config, this.logger, silentRequest.correlationId, this.platformAuthProvider, silentRequest.authenticationScheme, this.performanceClient) &&
             silentRequest.account.nativeAccountId) {
             this.logger.verbose("0sczo4", silentRequest.correlationId);
             this.performanceClient.addFields({ isPlatformBrokerRequest: true }, silentRequest.correlationId);
@@ -29240,7 +29669,7 @@ function checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, cacheL
     return isSilentlyResolvable && tryIframeRenewal;
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -29345,7 +29774,7 @@ class BaseOperatingContext {
     }
 }
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -29392,7 +29821,7 @@ StandardOperatingContext.MODULE_NAME = "";
  */
 StandardOperatingContext.ID = "StandardOperatingContext";
-/*! @azure/msal-browser v5.23.0 2026-09-23 */
+/*! @azure/msal-browser v5.25.0 2026-10-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -30024,7 +30453,7 @@ const createClientLogCallback = (provider, metadata, scope) => {
 };
 // Generated by genversion.
-const version = '12.0.0';
+const version = '12.0.1';
 /**
  * Zod schema for telemetry configuration validation.
@@ -32014,5 +32443,5 @@ const configureMsal = (configure) => ({
     configure,
 });
-export { TelemetryEventSchema as $, reduce as A, lastValueFrom as B, filter as C, BaseModuleProvider as D, EMPTY_SUBSCRIPTION as E, catchError as F, of as G, object as H, _instanceof as I, _enum as J, string as K, boolean as L, ModuleEventLevel as M, record as N, Observable as O, union as P, __rest as Q, __assign as R, Subscription as S, switchMap as T, observeOn as U, deepmerge as V, BaseConfigBuilder as W, TelemetryExceptionSchema as X, TelemetryItemNames as Y, TelemetryType as Z, __extends as _, arrRemove as a, TelemetryMetricSchema as a0, TelemetryCustomEventSchema as a1, array as a2, TelemetryLevel as a3, enableMSAL as a4, MsalConfigurator as a5, module$1 as a6, __values as b, createErrorClass as c, __spreadArray as d, errorContext as e, __read as f, SafeSubscriber as g, EmptyError as h, isFunction as i, executeSchedule as j, innerFrom as k, createOperatorSubscriber as l, map as m, mergeMap as n, operate as o, identity as p, isArrayLike as q, isScheduler as r, popScheduler as s, popNumber as t, EMPTY as u, from as v, mergeInternals as w, scanInternals as x, noop as y, popResultSelector as z };
-//# sourceMappingURL=module-DzjJ4gjy.js.map
+export { TelemetryEventSchema as $, reduce as A, lastValueFrom as B, filter as C, BaseModuleProvider as D, EMPTY_SUBSCRIPTION as E, catchError as F, of as G, object as H, _instanceof as I, _enum as J, string as K, boolean as L, ModuleEventLevel as M, record as N, Observable as O, union as P, __rest as Q, __assign as R, Subscription as S, switchMap as T, observeOn as U, deepmerge as V, BaseConfigBuilder as W, TelemetryExceptionSchema as X, TelemetryItemNames as Y, TelemetryType as Z, __extends as _, __values as a, TelemetryMetricSchema as a0, TelemetryCustomEventSchema as a1, array as a2, TelemetryLevel as a3, enableMSAL as a4, MsalConfigurator as a5, module$1 as a6, arrRemove as b, createErrorClass as c, __spreadArray as d, errorContext as e, __read as f, SafeSubscriber as g, EmptyError as h, isFunction as i, executeSchedule as j, innerFrom as k, createOperatorSubscriber as l, map as m, mergeMap as n, operate as o, identity as p, isArrayLike as q, isScheduler as r, popScheduler as s, popNumber as t, EMPTY as u, from as v, mergeInternals as w, scanInternals as x, noop as y, popResultSelector as z };
+//# sourceMappingURL=module-BR47HvRl.js.map