@ms-cloudpack/remote-cache 0.7.9 → 0.8.1

package/dist/{getCredential-QZKOLRT5.js → getCredential-W6MRP3D2.js}

@@ -6,14 +6,14 @@ const __filename = topLevelUrl.fileURLToPath(import.meta.url);
 const __dirname = topLevelPath.dirname(__filename);
 import {
   require_package
-} from "./chunk-FUGMINXQ.js";
+} from "./chunk-DSANWO7J.js";
 import {
   require_commonjs as require_commonjs2,
   require_commonjs2 as require_commonjs3,
   require_commonjs3 as require_commonjs4,
   require_commonjs4 as require_commonjs5,
   require_dist
-} from "./chunk-TXSHKS6T.js";
+} from "./chunk-D7DHZQ7L.js";
 import {
   __commonJS,
   __esm,
@@ -22,10 +22,8 @@ import {
   __require,
   __toCommonJS,
   __toESM,
-  init_tslib_es6,
-  require_commonjs,
-  tslib_es6_exports
-} from "./chunk-B4GP6UPK.js";
+  require_commonjs
+} from "./chunk-LRFMBF43.js";
 
 // ../../node_modules/.store/@azure-msal-node-npm-2.9.2-ad4f2bdff1/package/dist/cache/serializer/Serializer.mjs
 var _Serializer, Serializer;
@@ -47,7 +45,7 @@ var init_Serializer = __esm({
       static serializeAccounts(accCache) {
         const accounts = {};
         Object.keys(accCache).map(function(key) {
-          var _a;
+          var _a2;
           const accountEntity = accCache[key];
           accounts[key] = {
             home_account_id: accountEntity.homeAccountId,
@@ -60,7 +58,7 @@ var init_Serializer = __esm({
             client_info: accountEntity.clientInfo,
             last_modification_time: accountEntity.lastModificationTime,
             last_modification_app: accountEntity.lastModificationApp,
-            tenantProfiles: (_a = accountEntity.tenantProfiles) == null ? void 0 : _a.map((tenantProfile) => {
+            tenantProfiles: (_a2 = accountEntity.tenantProfiles) == null ? void 0 : _a2.map((tenantProfile) => {
               return JSON.stringify(tenantProfile);
             })
           };
@@ -1343,12 +1341,12 @@ var init_UrlString = __esm({
 
 // ../../node_modules/.store/@azure-msal-common-npm-14.12.0-b3576c04b2/package/dist/authority/AuthorityMetadata.mjs
 function getAliasesFromStaticSources(staticAuthorityOptions, logger) {
-  var _a;
+  var _a2;
   let staticAliases;
   const canonicalAuthority = staticAuthorityOptions.canonicalAuthority;
   if (canonicalAuthority) {
     const authorityHost = new UrlString(canonicalAuthority).getUrlComponents().HostNameAndPort;
-    staticAliases = getAliasesFromMetadata(authorityHost, (_a = staticAuthorityOptions.cloudDiscoveryMetadata) == null ? void 0 : _a.metadata, AuthorityMetadataSource.CONFIG, logger) || getAliasesFromMetadata(authorityHost, InstanceDiscoveryMetadata.metadata, AuthorityMetadataSource.HARDCODED_VALUES, logger) || staticAuthorityOptions.knownAuthorities;
+    staticAliases = getAliasesFromMetadata(authorityHost, (_a2 = staticAuthorityOptions.cloudDiscoveryMetadata) == null ? void 0 : _a2.metadata, AuthorityMetadataSource.CONFIG, logger) || getAliasesFromMetadata(authorityHost, InstanceDiscoveryMetadata.metadata, AuthorityMetadataSource.HARDCODED_VALUES, logger) || staticAuthorityOptions.knownAuthorities;
   }
   return staticAliases || [];
 }
@@ -2061,8 +2059,8 @@ var init_RegionDiscovery = __esm({
        * @returns Promise<string | null>
        */
       async detectRegion(environmentRegion, regionDiscoveryMetadata) {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RegionDiscoveryDetectRegion, this.correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.RegionDiscoveryDetectRegion, this.correlationId);
         let autodetectedRegionName = environmentRegion;
         if (!autodetectedRegionName) {
           const options = _RegionDiscovery.IMDS_OPTIONS;
@@ -2103,8 +2101,8 @@ var init_RegionDiscovery = __esm({
        * @returns Promise<NetworkResponse<string>>
        */
       async getRegionFromIMDS(version3, options) {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.correlationId);
         return this.networkInterface.sendGetRequestAsync(`${Constants.IMDS_ENDPOINT}?api-version=${version3}&format=text`, options, Constants.IMDS_TIMEOUT);
       }
       /**
@@ -2113,8 +2111,8 @@ var init_RegionDiscovery = __esm({
        * @returns Promise<string | null>
        */
       async getCurrentVersion(options) {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RegionDiscoveryGetCurrentVersion, this.correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.RegionDiscoveryGetCurrentVersion, this.correlationId);
         try {
           const response = await this.networkInterface.sendGetRequestAsync(`${Constants.IMDS_ENDPOINT}?format=json`, options);
           if (response.status === ResponseCodes.httpBadRequest && response.body && response.body["newest-versions"] && response.body["newest-versions"].length > 0) {
@@ -2212,7 +2210,7 @@ function createIdTokenEntity(homeAccountId, environment, idToken, clientId, tena
   return idTokenEntity;
 }
 function createAccessTokenEntity(homeAccountId, environment, accessToken, clientId, tenantId, scopes, expiresOn, extExpiresOn, base64Decode, refreshOn, tokenType, userAssertionHash, keyId, requestedClaims, requestedClaimsHash) {
-  var _a, _b;
+  var _a2, _b2;
   const atEntity = {
     homeAccountId,
     credentialType: CredentialType.ACCESS_TOKEN,
@@ -2236,12 +2234,12 @@ function createAccessTokenEntity(homeAccountId, environment, accessToken, client
     atEntity.requestedClaims = requestedClaims;
     atEntity.requestedClaimsHash = requestedClaimsHash;
   }
-  if (((_a = atEntity.tokenType) == null ? void 0 : _a.toLowerCase()) !== AuthenticationScheme.BEARER.toLowerCase()) {
+  if (((_a2 = atEntity.tokenType) == null ? void 0 : _a2.toLowerCase()) !== AuthenticationScheme.BEARER.toLowerCase()) {
     atEntity.credentialType = CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME;
     switch (atEntity.tokenType) {
       case AuthenticationScheme.POP:
         const tokenClaims = extractTokenClaims(accessToken, base64Decode);
-        if (!((_b = tokenClaims == null ? void 0 : tokenClaims.cnf) == null ? void 0 : _b.kid)) {
+        if (!((_b2 = tokenClaims == null ? void 0 : tokenClaims.cnf) == null ? void 0 : _b2.kid)) {
           throw createClientAuthError(tokenClaimsCnfRequiredForSignedJwt);
         }
         atEntity.keyId = tokenClaims.cnf.kid;
@@ -2411,10 +2409,10 @@ var init_CacheHelpers = __esm({
 
 // ../../node_modules/.store/@azure-msal-common-npm-14.12.0-b3576c04b2/package/dist/authority/Authority.mjs
 function getTenantFromAuthorityString(authority) {
-  var _a;
+  var _a2;
   const authorityUrl = new UrlString(authority);
   const authorityUrlComponents = authorityUrl.getUrlComponents();
-  const tenantId = (_a = authorityUrlComponents.PathSegments.slice(-1)[0]) == null ? void 0 : _a.toLowerCase();
+  const tenantId = (_a2 = authorityUrlComponents.PathSegments.slice(-1)[0]) == null ? void 0 : _a2.toLowerCase();
   switch (tenantId) {
     case AADAuthorityConstants.COMMON:
     case AADAuthorityConstants.ORGANIZATIONS:
@@ -2675,8 +2673,8 @@ var init_Authority = __esm({
        * and the /authorize, /token and logout endpoints.
        */
       async resolveEndpointsAsync() {
-        var _a, _b;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthorityResolveEndpointsAsync, this.correlationId);
+        var _a2, _b2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.AuthorityResolveEndpointsAsync, this.correlationId);
         const metadataEntity = this.getCurrentMetadataEntity();
         const cloudDiscoverySource = await invokeAsync(this.updateCloudDiscoveryMetadata.bind(this), PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.logger, this.performanceClient, this.correlationId)(metadataEntity);
         this.canonicalAuthority = this.canonicalAuthority.replace(this.hostnameAndPort, metadataEntity.preferred_network);
@@ -2684,7 +2682,7 @@ var init_Authority = __esm({
         this.updateCachedMetadata(metadataEntity, cloudDiscoverySource, {
           source: endpointSource
         });
-        (_b = this.performanceClient) == null ? void 0 : _b.addFields({
+        (_b2 = this.performanceClient) == null ? void 0 : _b2.addFields({
           cloudDiscoverySource,
           authorityEndpointSource: endpointSource
         }, this.correlationId);
@@ -2735,12 +2733,12 @@ var init_Authority = __esm({
        * @param metadataEntity
        */
       async updateEndpointMetadata(metadataEntity) {
-        var _a, _b, _c;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthorityUpdateEndpointMetadata, this.correlationId);
+        var _a2, _b2, _c;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.AuthorityUpdateEndpointMetadata, this.correlationId);
         const localMetadata = this.updateEndpointMetadataFromLocalSources(metadataEntity);
         if (localMetadata) {
           if (localMetadata.source === AuthorityMetadataSource.HARDCODED_VALUES) {
-            if ((_b = this.authorityOptions.azureRegionConfiguration) == null ? void 0 : _b.azureRegion) {
+            if ((_b2 = this.authorityOptions.azureRegionConfiguration) == null ? void 0 : _b2.azureRegion) {
               if (localMetadata.metadata) {
                 const hardcodedMetadata = await invokeAsync(this.updateMetadataWithRegionalInformation.bind(this), PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.logger, this.performanceClient, this.correlationId)(localMetadata.metadata);
                 updateAuthorityEndpointMetadata(metadataEntity, hardcodedMetadata, false);
@@ -2831,8 +2829,8 @@ var init_Authority = __esm({
        * @param hasHardcodedMetadata boolean
        */
       async getEndpointMetadataFromNetwork() {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);
         const options = {};
         const openIdConfigurationEndpoint = this.defaultOpenIdConfigurationEndpoint;
         this.logger.verbose(`Authority.getEndpointMetadataFromNetwork: attempting to retrieve OAuth endpoints from ${openIdConfigurationEndpoint}`);
@@ -2864,9 +2862,9 @@ var init_Authority = __esm({
        * User selected Azure region will be used if configured.
        */
       async updateMetadataWithRegionalInformation(metadata) {
-        var _a, _b, _c;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
-        const userConfiguredAzureRegion = (_b = this.authorityOptions.azureRegionConfiguration) == null ? void 0 : _b.azureRegion;
+        var _a2, _b2, _c;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
+        const userConfiguredAzureRegion = (_b2 = this.authorityOptions.azureRegionConfiguration) == null ? void 0 : _b2.azureRegion;
         if (userConfiguredAzureRegion) {
           if (userConfiguredAzureRegion !== Constants.AZURE_REGION_AUTO_DISCOVER_FLAG) {
             this.regionDiscoveryMetadata.region_outcome = RegionDiscoveryOutcomes.CONFIGURED_NO_AUTO_DETECTION;
@@ -2890,8 +2888,8 @@ var init_Authority = __esm({
        * @returns AuthorityMetadataSource
        */
       async updateCloudDiscoveryMetadata(metadataEntity) {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.correlationId);
         const localMetadataSource = this.updateCloudDiscoveryMetadataFromLocalSources(metadataEntity);
         if (localMetadataSource) {
           return localMetadataSource;
@@ -2973,8 +2971,8 @@ var init_Authority = __esm({
        * @param hasHardcodedMetadata boolean
        */
       async getCloudDiscoveryMetadataFromNetwork() {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthorityGetCloudDiscoveryMetadataFromNetwork, this.correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.AuthorityGetCloudDiscoveryMetadataFromNetwork, this.correlationId);
         const instanceDiscoveryEndpoint = `${Constants.AAD_INSTANCE_DISCOVERY_ENDPT}${this.canonicalAuthority}oauth2/v2.0/authorize`;
         const options = {};
         let match = null;
@@ -3333,21 +3331,21 @@ var init_ICrypto = __esm({
     init_ClientAuthError();
     init_ClientAuthErrorCodes();
     DEFAULT_CRYPTO_IMPLEMENTATION = {
-      createNewGuid: () => {
+      createNewGuid: /* @__PURE__ */ __name(() => {
         throw createClientAuthError(methodNotImplemented);
-      },
-      base64Decode: () => {
+      }, "createNewGuid"),
+      base64Decode: /* @__PURE__ */ __name(() => {
         throw createClientAuthError(methodNotImplemented);
-      },
-      base64Encode: () => {
+      }, "base64Decode"),
+      base64Encode: /* @__PURE__ */ __name(() => {
         throw createClientAuthError(methodNotImplemented);
-      },
-      base64UrlEncode: () => {
+      }, "base64Encode"),
+      base64UrlEncode: /* @__PURE__ */ __name(() => {
         throw createClientAuthError(methodNotImplemented);
-      },
-      encodeKid: () => {
+      }, "base64UrlEncode"),
+      encodeKid: /* @__PURE__ */ __name(() => {
         throw createClientAuthError(methodNotImplemented);
-      },
+      }, "encodeKid"),
       async getPublicKeyThumbprint() {
         throw createClientAuthError(methodNotImplemented);
       },
@@ -3396,8 +3394,8 @@ var init_Logger = __esm({
       }
       static createDefaultLoggerOptions() {
         return {
-          loggerCallback: () => {
-          },
+          loggerCallback: /* @__PURE__ */ __name(() => {
+          }, "loggerCallback"),
           piiLoggingEnabled: false,
           logLevel: LogLevel.Info
         };
@@ -3958,7 +3956,7 @@ var init_AccountEntity = __esm({
        * @returns
        */
       static createFromAccountInfo(accountInfo, cloudGraphHostName, msGraphHost) {
-        var _a;
+        var _a2;
         const account = new _AccountEntity();
         account.authorityType = accountInfo.authorityType || CacheAccountType.GENERIC_ACCOUNT_TYPE;
         account.homeAccountId = accountInfo.homeAccountId;
@@ -3970,7 +3968,7 @@ var init_AccountEntity = __esm({
         account.name = accountInfo.name;
         account.cloudGraphHostName = cloudGraphHostName;
         account.msGraphHost = msGraphHost;
-        account.tenantProfiles = Array.from(((_a = accountInfo.tenantProfiles) == null ? void 0 : _a.values()) || []);
+        account.tenantProfiles = Array.from(((_a2 = accountInfo.tenantProfiles) == null ? void 0 : _a2.values()) || []);
         return account;
       }
       /**
@@ -4218,7 +4216,7 @@ var init_CacheManager = __esm({
        * @param correlationId {?string} correlation id
        */
       async saveCacheRecord(cacheRecord, storeInCache, correlationId) {
-        var _a, _b, _c, _d;
+        var _a2, _b2, _c, _d;
         if (!cacheRecord) {
           throw createClientAuthError(invalidCacheRecord);
         }
@@ -4239,9 +4237,9 @@ var init_CacheManager = __esm({
             this.setAppMetadata(cacheRecord.appMetadata);
           }
         } catch (e) {
-          (_a = this.commonLogger) == null ? void 0 : _a.error(`CacheManager.saveCacheRecord: failed`);
+          (_a2 = this.commonLogger) == null ? void 0 : _a2.error(`CacheManager.saveCacheRecord: failed`);
           if (e instanceof Error) {
-            (_b = this.commonLogger) == null ? void 0 : _b.errorPii(`CacheManager.saveCacheRecord: ${e.message}`, correlationId);
+            (_b2 = this.commonLogger) == null ? void 0 : _b2.errorPii(`CacheManager.saveCacheRecord: ${e.message}`, correlationId);
             if (e.name === "QuotaExceededError" || e.name === "NS_ERROR_DOM_QUOTA_REACHED" || e.message.includes("exceeded the quota")) {
               (_c = this.commonLogger) == null ? void 0 : _c.error(`CacheManager.saveCacheRecord: exceeded storage quota`, correlationId);
               throw new CacheError(cacheQuotaExceededErrorCode);
@@ -4295,7 +4293,7 @@ var init_CacheManager = __esm({
         const allAccountKeys = this.getAccountKeys();
         const matchingAccounts = [];
         allAccountKeys.forEach((cacheKey) => {
-          var _a;
+          var _a2;
           if (!this.isAccountKey(cacheKey, accountFilter.homeAccountId)) {
             return;
           }
@@ -4325,7 +4323,7 @@ var init_CacheManager = __esm({
             localAccountId: accountFilter == null ? void 0 : accountFilter.localAccountId,
             name: accountFilter == null ? void 0 : accountFilter.name
           };
-          const matchingTenantProfiles = (_a = entity.tenantProfiles) == null ? void 0 : _a.filter((tenantProfile) => {
+          const matchingTenantProfiles = (_a2 = entity.tenantProfiles) == null ? void 0 : _a2.filter((tenantProfile) => {
             return this.tenantProfileMatchesFilter(tenantProfile, tenantProfileFilter);
           });
           if (matchingTenantProfiles && matchingTenantProfiles.length === 0) {
@@ -4529,9 +4527,9 @@ var init_CacheManager = __esm({
        * @returns
        */
       updateOutdatedCachedAccount(accountKey, accountEntity, logger) {
-        var _a;
+        var _a2;
         if (accountEntity && accountEntity.isSingleTenant()) {
-          (_a = this.commonLogger) == null ? void 0 : _a.verbose("updateOutdatedCachedAccount: Found a single-tenant (outdated) account entity in the cache, migrating to multi-tenant account entity");
+          (_a2 = this.commonLogger) == null ? void 0 : _a2.verbose("updateOutdatedCachedAccount: Found a single-tenant (outdated) account entity in the cache, migrating to multi-tenant account entity");
           const matchingAccountKeys = this.getAccountKeys().filter((key) => {
             return key.startsWith(accountEntity.homeAccountId);
           });
@@ -4933,8 +4931,8 @@ var init_CacheManager = __esm({
        * @returns true if the downcased name properties are present and match in the filter and the entity
        */
       matchName(claims, name3) {
-        var _a;
-        return !!(name3.toLowerCase() === ((_a = claims.name) == null ? void 0 : _a.toLowerCase()));
+        var _a2;
+        return !!(name3.toLowerCase() === ((_a2 = claims.name) == null ? void 0 : _a2.toLowerCase()));
       }
       /**
        * helper to match usernames
@@ -5001,8 +4999,8 @@ var init_CacheManager = __esm({
        * @param realm
        */
       matchRealm(entity, realm) {
-        var _a;
-        return !!(((_a = entity.realm) == null ? void 0 : _a.toLowerCase()) === realm.toLowerCase());
+        var _a2;
+        return !!(((_a2 = entity.realm) == null ? void 0 : _a2.toLowerCase()) === realm.toLowerCase());
       }
       /**
        * helper to match nativeAccountId
@@ -5242,8 +5240,8 @@ var init_ClientConfiguration = __esm({
       preventCorsPreflight: false
     };
     DEFAULT_LOGGER_IMPLEMENTATION = {
-      loggerCallback: () => {
-      },
+      loggerCallback: /* @__PURE__ */ __name(() => {
+      }, "loggerCallback"),
       piiLoggingEnabled: false,
       logLevel: LogLevel.Info,
       correlationId: Constants.EMPTY_STRING
@@ -5325,7 +5323,7 @@ var init_ThrottlingUtils = __esm({
        * @param thumbprint
        */
       static preProcess(cacheManager, thumbprint) {
-        var _a;
+        var _a2;
         const key = _ThrottlingUtils.generateThrottlingStorageKey(thumbprint);
         const value = cacheManager.getThrottlingCache(key);
         if (value) {
@@ -5333,7 +5331,7 @@ var init_ThrottlingUtils = __esm({
             cacheManager.removeItem(key);
             return;
           }
-          throw new ServerError(((_a = value.errorCodes) == null ? void 0 : _a.join(" ")) || Constants.EMPTY_STRING, value.errorMessage, value.subError);
+          throw new ServerError(((_a2 = value.errorCodes) == null ? void 0 : _a2.join(" ")) || Constants.EMPTY_STRING, value.errorMessage, value.subError);
         }
       }
       /**
@@ -5976,13 +5974,13 @@ var init_BaseClient = __esm({
        * @param thumbprint
        */
       async executePostToTokenEndpoint(tokenEndpoint, queryString, headers, thumbprint, correlationId, queuedEvent) {
-        var _a, _b, _c, _d;
+        var _a2, _b2, _c, _d;
         if (queuedEvent) {
-          (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(queuedEvent, correlationId);
+          (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(queuedEvent, correlationId);
         }
         const response = await this.networkManager.sendPostRequest(thumbprint, tokenEndpoint, { body: queryString, headers });
         (_d = this.performanceClient) == null ? void 0 : _d.addFields({
-          refreshTokenSize: ((_b = response.body.refresh_token) == null ? void 0 : _b.length) || 0,
+          refreshTokenSize: ((_b2 = response.body.refresh_token) == null ? void 0 : _b2.length) || 0,
           httpVerToken: ((_c = response.headers) == null ? void 0 : _c[HeaderNames.X_MS_HTTP_VERSION]) || ""
         }, correlationId);
         if (this.config.serverTelemetryManager && response.status < 500 && response.status !== 429) {
@@ -5995,8 +5993,8 @@ var init_BaseClient = __esm({
        * @param updatedAuthority
        */
       async updateAuthority(cloudInstanceHostname, correlationId) {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.UpdateTokenEndpointAuthority, correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.UpdateTokenEndpointAuthority, correlationId);
         const cloudInstanceAuthorityUri = `https://${cloudInstanceHostname}/${this.authority.tenant}/`;
         const cloudInstanceAuthority = await createDiscoveredInstance(cloudInstanceAuthorityUri, this.networkClient, this.cacheManager, this.authority.options, this.logger, correlationId, this.performanceClient);
         this.authority = cloudInstanceAuthority;
@@ -6227,8 +6225,8 @@ var init_PopTokenGenerator = __esm({
        * @returns
        */
       async generateCnf(request, logger) {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.PopTokenGenerateCnf, request.correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.PopTokenGenerateCnf, request.correlationId);
         const reqCnf = await invokeAsync(this.generateKid.bind(this), PerformanceEvents.PopTokenGenerateCnf, logger, this.performanceClient, request.correlationId)(request);
         const reqCnfString = this.cryptoUtils.base64UrlEncode(JSON.stringify(reqCnf));
         return {
@@ -6242,8 +6240,8 @@ var init_PopTokenGenerator = __esm({
        * @returns
        */
       async generateKid(request) {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.PopTokenGenerateKid, request.correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.PopTokenGenerateKid, request.correlationId);
         const kidThumbprint = await this.cryptoUtils.getPublicKeyThumbprint(request);
         return {
           kid: kidThumbprint,
@@ -6319,10 +6317,10 @@ var init_TokenCacheContext = __esm({
 
 // ../../node_modules/.store/@azure-msal-common-npm-14.12.0-b3576c04b2/package/dist/response/ResponseHandler.mjs
 function parseServerErrorNo(serverResponse) {
-  var _a, _b;
+  var _a2, _b2;
   const errorCodePrefix = "code=";
-  const errorCodePrefixIndex = (_a = serverResponse.error_uri) == null ? void 0 : _a.lastIndexOf(errorCodePrefix);
-  return errorCodePrefixIndex && errorCodePrefixIndex >= 0 ? (_b = serverResponse.error_uri) == null ? void 0 : _b.substring(errorCodePrefixIndex + errorCodePrefix.length) : void 0;
+  const errorCodePrefixIndex = (_a2 = serverResponse.error_uri) == null ? void 0 : _a2.lastIndexOf(errorCodePrefix);
+  return errorCodePrefixIndex && errorCodePrefixIndex >= 0 ? (_b2 = serverResponse.error_uri) == null ? void 0 : _b2.substring(errorCodePrefixIndex + errorCodePrefix.length) : void 0;
 }
 function buildAccountToCache(cacheStorage, authority, homeAccountId, idTokenClaims, base64Decode, clientInfo, environment, claimsTenantId, authCodePayload, nativeAccountId, logger) {
   logger == null ? void 0 : logger.verbose("setCachedAccount called");
@@ -6423,10 +6421,10 @@ var init_ResponseHandler = __esm({
        * @param refreshAccessToken
        */
       validateTokenResponse(serverResponse, refreshAccessToken) {
-        var _a;
+        var _a2;
         if (serverResponse.error || serverResponse.error_description || serverResponse.suberror) {
           const errString = `${serverResponse.error_codes} - [${serverResponse.timestamp}]: ${serverResponse.error_description} - Correlation ID: ${serverResponse.correlation_id} - Trace ID: ${serverResponse.trace_id}`;
-          const serverErrorNo = ((_a = serverResponse.error_codes) == null ? void 0 : _a.length) ? serverResponse.error_codes[0] : void 0;
+          const serverErrorNo = ((_a2 = serverResponse.error_codes) == null ? void 0 : _a2.length) ? serverResponse.error_codes[0] : void 0;
           const serverError = new ServerError(serverResponse.error, errString, serverResponse.suberror, serverErrorNo);
           if (refreshAccessToken && serverResponse.status && serverResponse.status >= HttpStatus.SERVER_ERROR_RANGE_START && serverResponse.status <= HttpStatus.SERVER_ERROR_RANGE_END) {
             this.logger.warning(`executeTokenRequest:validateTokenResponse - AAD is currently unavailable and the access token is unable to be refreshed.
@@ -6449,8 +6447,8 @@ ${serverError}`);
        * @param authority
        */
       async handleServerTokenResponse(serverTokenResponse, authority, reqTimestamp, request, authCodePayload, userAssertionHash, handlingRefreshTokenResponse, forceCacheRefreshTokenResponse, serverRequestId) {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.HandleServerTokenResponse, serverTokenResponse.correlation_id);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.HandleServerTokenResponse, serverTokenResponse.correlation_id);
         let idTokenClaims;
         if (serverTokenResponse.id_token) {
           idTokenClaims = extractTokenClaims(serverTokenResponse.id_token || Constants.EMPTY_STRING, this.cryptoObj.base64Decode);
@@ -6570,7 +6568,7 @@ ${serverError}`);
        * @param stateString
        */
       static async generateAuthenticationResult(cryptoObj, authority, cacheRecord, fromTokenCache, request, idTokenClaims, requestState, serverTokenResponse, requestId) {
-        var _a, _b, _c, _d, _e;
+        var _a2, _b2, _c, _d, _e;
         let accessToken = Constants.EMPTY_STRING;
         let responseScopes = [];
         let expiresOn = null;
@@ -6608,7 +6606,7 @@ ${serverError}`);
           void 0,
           // tenantProfile optional
           idTokenClaims,
-          (_a = cacheRecord.idToken) == null ? void 0 : _a.secret
+          (_a2 = cacheRecord.idToken) == null ? void 0 : _a2.secret
         ) : null;
         return {
           authority: authority.canonicalAuthority,
@@ -6616,7 +6614,7 @@ ${serverError}`);
           tenantId: tid,
           scopes: responseScopes,
           account: accountInfo,
-          idToken: ((_b = cacheRecord == null ? void 0 : cacheRecord.idToken) == null ? void 0 : _b.secret) || "",
+          idToken: ((_b2 = cacheRecord == null ? void 0 : cacheRecord.idToken) == null ? void 0 : _b2.secret) || "",
           idTokenClaims: idTokenClaims || {},
           accessToken,
           fromCache: fromTokenCache,
@@ -6668,10 +6666,10 @@ var init_AuthorizationCodeClient = __esm({
     init_ClientConfigurationErrorCodes();
     _AuthorizationCodeClient = class _AuthorizationCodeClient extends BaseClient {
       constructor(configuration, performanceClient) {
-        var _a;
+        var _a2;
         super(configuration, performanceClient);
         this.includeRedirectUri = true;
-        this.oidcDefaultScopes = (_a = this.config.authOptions.authority.options.OIDCOptions) == null ? void 0 : _a.defaultScopes;
+        this.oidcDefaultScopes = (_a2 = this.config.authOptions.authority.options.OIDCOptions) == null ? void 0 : _a2.defaultScopes;
       }
       /**
        * Creates the URL of the authorization request letting the user input credentials and consent to the
@@ -6684,8 +6682,8 @@ var init_AuthorizationCodeClient = __esm({
        * @param request
        */
       async getAuthCodeUrl(request) {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.GetAuthCodeUrl, request.correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.GetAuthCodeUrl, request.correlationId);
         const queryString = await invokeAsync(this.createAuthCodeUrlQueryString.bind(this), PerformanceEvents.AuthClientCreateQueryString, this.logger, this.performanceClient, request.correlationId)(request);
         return UrlString.appendQueryString(this.authority.authorizationEndpoint, queryString);
       }
@@ -6695,14 +6693,14 @@ var init_AuthorizationCodeClient = __esm({
        * @param request
        */
       async acquireToken(request, authCodePayload) {
-        var _a, _b;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthClientAcquireToken, request.correlationId);
+        var _a2, _b2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.AuthClientAcquireToken, request.correlationId);
         if (!request.code) {
           throw createClientAuthError(requestCannotBeMade);
         }
         const reqTimestamp = nowSeconds();
         const response = await invokeAsync(this.executeTokenRequest.bind(this), PerformanceEvents.AuthClientExecuteTokenRequest, this.logger, this.performanceClient, request.correlationId)(this.authority, request);
-        const requestId = (_b = response.headers) == null ? void 0 : _b[HeaderNames.X_MS_REQUEST_ID];
+        const requestId = (_b2 = response.headers) == null ? void 0 : _b2[HeaderNames.X_MS_REQUEST_ID];
         const responseHandler = new ResponseHandler(this.config.authOptions.clientId, this.cacheManager, this.cryptoUtils, this.logger, this.config.serializableCache, this.config.persistencePlugin, this.performanceClient);
         responseHandler.validateTokenResponse(response.body);
         return invokeAsync(responseHandler.handleServerTokenResponse.bind(responseHandler), PerformanceEvents.HandleServerTokenResponse, this.logger, this.performanceClient, request.correlationId)(response.body, this.authority, reqTimestamp, request, authCodePayload, void 0, void 0, void 0, requestId);
@@ -6738,8 +6736,8 @@ var init_AuthorizationCodeClient = __esm({
        * @param request
        */
       async executeTokenRequest(authority, request) {
-        var _a, _b;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthClientExecuteTokenRequest, request.correlationId);
+        var _a2, _b2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.AuthClientExecuteTokenRequest, request.correlationId);
         const queryParametersString = this.createTokenQueryParameters(request);
         const endpoint = UrlString.appendQueryString(authority.tokenEndpoint, queryParametersString);
         const requestBody = await invokeAsync(this.createTokenRequestBody.bind(this), PerformanceEvents.AuthClientCreateTokenRequestBody, this.logger, this.performanceClient, request.correlationId)(request);
@@ -6757,7 +6755,7 @@ var init_AuthorizationCodeClient = __esm({
         }
         const headers = this.createTokenRequestHeaders(ccsCredential || request.ccsCredential);
         const thumbprint = {
-          clientId: ((_b = request.tokenBodyParameters) == null ? void 0 : _b.clientId) || this.config.authOptions.clientId,
+          clientId: ((_b2 = request.tokenBodyParameters) == null ? void 0 : _b2.clientId) || this.config.authOptions.clientId,
           authority: authority.canonicalAuthority,
           scopes: request.scopes,
           claims: request.claims,
@@ -6774,10 +6772,10 @@ var init_AuthorizationCodeClient = __esm({
        * @param request
        */
       async createTokenRequestBody(request) {
-        var _a, _b;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthClientCreateTokenRequestBody, request.correlationId);
+        var _a2, _b2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.AuthClientCreateTokenRequestBody, request.correlationId);
         const parameterBuilder = new RequestParameterBuilder();
-        parameterBuilder.addClientId(((_b = request.tokenBodyParameters) == null ? void 0 : _b[CLIENT_ID]) || this.config.authOptions.clientId);
+        parameterBuilder.addClientId(((_b2 = request.tokenBodyParameters) == null ? void 0 : _b2[CLIENT_ID]) || this.config.authOptions.clientId);
         if (!this.includeRedirectUri) {
           RequestValidator.validateRedirectUri(request.redirectUri);
         } else {
@@ -6870,10 +6868,10 @@ var init_AuthorizationCodeClient = __esm({
        * @param request
        */
       async createAuthCodeUrlQueryString(request) {
-        var _a, _b;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.AuthClientCreateQueryString, request.correlationId);
+        var _a2, _b2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.AuthClientCreateQueryString, request.correlationId);
         const parameterBuilder = new RequestParameterBuilder();
-        parameterBuilder.addClientId(((_b = request.extraQueryParameters) == null ? void 0 : _b[CLIENT_ID]) || this.config.authOptions.clientId);
+        parameterBuilder.addClientId(((_b2 = request.extraQueryParameters) == null ? void 0 : _b2[CLIENT_ID]) || this.config.authOptions.clientId);
         const requestScopes = [
           ...request.scopes || [],
           ...request.extraScopesToConsent || []
@@ -7008,12 +7006,12 @@ var init_AuthorizationCodeClient = __esm({
        * @param account
        */
       extractAccountSid(account) {
-        var _a;
-        return ((_a = account.idTokenClaims) == null ? void 0 : _a.sid) || null;
+        var _a2;
+        return ((_a2 = account.idTokenClaims) == null ? void 0 : _a2.sid) || null;
       }
       extractLoginHint(account) {
-        var _a;
-        return ((_a = account.idTokenClaims) == null ? void 0 : _a.login_hint) || null;
+        var _a2;
+        return ((_a2 = account.idTokenClaims) == null ? void 0 : _a2.login_hint) || null;
       }
     };
     __name(_AuthorizationCodeClient, "AuthorizationCodeClient");
@@ -7055,11 +7053,11 @@ var init_RefreshTokenClient = __esm({
         super(configuration, performanceClient);
       }
       async acquireToken(request) {
-        var _a, _b;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);
+        var _a2, _b2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);
         const reqTimestamp = nowSeconds();
         const response = await invokeAsync(this.executeTokenRequest.bind(this), PerformanceEvents.RefreshTokenClientExecuteTokenRequest, this.logger, this.performanceClient, request.correlationId)(request, this.authority);
-        const requestId = (_b = response.headers) == null ? void 0 : _b[HeaderNames.X_MS_REQUEST_ID];
+        const requestId = (_b2 = response.headers) == null ? void 0 : _b2[HeaderNames.X_MS_REQUEST_ID];
         const responseHandler = new ResponseHandler(this.config.authOptions.clientId, this.cacheManager, this.cryptoUtils, this.logger, this.config.serializableCache, this.config.persistencePlugin);
         responseHandler.validateTokenResponse(response.body);
         return invokeAsync(responseHandler.handleServerTokenResponse.bind(responseHandler), PerformanceEvents.HandleServerTokenResponse, this.logger, this.performanceClient, request.correlationId)(response.body, this.authority, reqTimestamp, request, void 0, void 0, true, request.forceCache, requestId);
@@ -7069,11 +7067,11 @@ var init_RefreshTokenClient = __esm({
        * @param request
        */
       async acquireTokenByRefreshToken(request) {
-        var _a;
+        var _a2;
         if (!request) {
           throw createClientConfigurationError(tokenRequestEmpty);
         }
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireTokenByRefreshToken, request.correlationId);
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireTokenByRefreshToken, request.correlationId);
         if (!request.account) {
           throw createClientAuthError(noAccountInSilentRequest);
         }
@@ -7098,8 +7096,8 @@ var init_RefreshTokenClient = __esm({
        * @param request
        */
       async acquireTokenWithCachedRefreshToken(request, foci) {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
         const refreshToken = invoke(this.cacheManager.getRefreshToken.bind(this.cacheManager), PerformanceEvents.CacheManagerGetRefreshToken, this.logger, this.performanceClient, request.correlationId)(request.account, foci, void 0, this.performanceClient, request.correlationId);
         if (!refreshToken) {
           throw createInteractionRequiredAuthError(noTokensFound);
@@ -7133,14 +7131,14 @@ var init_RefreshTokenClient = __esm({
        * @param authority
        */
       async executeTokenRequest(request, authority) {
-        var _a, _b;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);
+        var _a2, _b2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);
         const queryParametersString = this.createTokenQueryParameters(request);
         const endpoint = UrlString.appendQueryString(authority.tokenEndpoint, queryParametersString);
         const requestBody = await invokeAsync(this.createTokenRequestBody.bind(this), PerformanceEvents.RefreshTokenClientCreateTokenRequestBody, this.logger, this.performanceClient, request.correlationId)(request);
         const headers = this.createTokenRequestHeaders(request.ccsCredential);
         const thumbprint = {
-          clientId: ((_b = request.tokenBodyParameters) == null ? void 0 : _b.clientId) || this.config.authOptions.clientId,
+          clientId: ((_b2 = request.tokenBodyParameters) == null ? void 0 : _b2.clientId) || this.config.authOptions.clientId,
           authority: authority.canonicalAuthority,
           scopes: request.scopes,
           claims: request.claims,
@@ -7157,11 +7155,11 @@ var init_RefreshTokenClient = __esm({
        * @param request
        */
       async createTokenRequestBody(request) {
-        var _a, _b, _c;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.RefreshTokenClientCreateTokenRequestBody, request.correlationId);
+        var _a2, _b2, _c;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.RefreshTokenClientCreateTokenRequestBody, request.correlationId);
         const correlationId = request.correlationId;
         const parameterBuilder = new RequestParameterBuilder();
-        parameterBuilder.addClientId(((_b = request.tokenBodyParameters) == null ? void 0 : _b[CLIENT_ID]) || this.config.authOptions.clientId);
+        parameterBuilder.addClientId(((_b2 = request.tokenBodyParameters) == null ? void 0 : _b2[CLIENT_ID]) || this.config.authOptions.clientId);
         if (request.redirectUri) {
           parameterBuilder.addRedirectUri(request.redirectUri);
         }
@@ -7257,11 +7255,11 @@ var init_SilentFlowClient = __esm({
        * @param request
        */
       async acquireToken(request) {
-        var _a;
+        var _a2;
         try {
           const [authResponse, cacheOutcome] = await this.acquireCachedToken({
             ...request,
-            scopes: ((_a = request.scopes) == null ? void 0 : _a.length) ? request.scopes : [...OIDC_DEFAULT_SCOPES]
+            scopes: ((_a2 = request.scopes) == null ? void 0 : _a2.length) ? request.scopes : [...OIDC_DEFAULT_SCOPES]
           });
           if (cacheOutcome === CacheOutcome.PROACTIVELY_REFRESHED) {
             this.logger.info("SilentFlowClient:acquireCachedToken - Cached access token's refreshOn property has been exceeded'. It's not expired, but must be refreshed.");
@@ -7284,8 +7282,8 @@ var init_SilentFlowClient = __esm({
        * @param request
        */
       async acquireCachedToken(request) {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.SilentFlowClientAcquireCachedToken, request.correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.SilentFlowClientAcquireCachedToken, request.correlationId);
         let lastCacheOutcome = CacheOutcome.NOT_APPLICABLE;
         if (request.forceRefresh || !this.config.cacheOptions.claimsBasedCachingEnabled && !StringUtils.isEmptyObj(request.claims)) {
           this.setCacheOutcome(CacheOutcome.FORCE_REFRESH_OR_CLAIMS, request.correlationId);
@@ -7324,9 +7322,9 @@ var init_SilentFlowClient = __esm({
         ];
       }
       setCacheOutcome(cacheOutcome, correlationId) {
-        var _a, _b;
-        (_a = this.serverTelemetryManager) == null ? void 0 : _a.setCacheOutcome(cacheOutcome);
-        (_b = this.performanceClient) == null ? void 0 : _b.addFields({
+        var _a2, _b2;
+        (_a2 = this.serverTelemetryManager) == null ? void 0 : _a2.setCacheOutcome(cacheOutcome);
+        (_b2 = this.performanceClient) == null ? void 0 : _b2.addFields({
           cacheOutcome
         }, correlationId);
         if (cacheOutcome !== CacheOutcome.NOT_APPLICABLE) {
@@ -7338,8 +7336,8 @@ var init_SilentFlowClient = __esm({
        * @param cacheRecord
        */
       async generateResultFromCacheRecord(cacheRecord, request) {
-        var _a;
-        (_a = this.performanceClient) == null ? void 0 : _a.addQueueMeasurement(PerformanceEvents.SilentFlowClientGenerateResultFromCacheRecord, request.correlationId);
+        var _a2;
+        (_a2 = this.performanceClient) == null ? void 0 : _a2.addQueueMeasurement(PerformanceEvents.SilentFlowClientGenerateResultFromCacheRecord, request.correlationId);
         let idTokenClaims;
         if (cacheRecord.idToken) {
           idTokenClaims = extractTokenClaims(cacheRecord.idToken.secret, this.config.cryptoInterface.base64Decode);
@@ -7604,7 +7602,7 @@ var init_Deserializer = __esm({
         const accountObjects = {};
         if (accounts) {
           Object.keys(accounts).map(function(key) {
-            var _a;
+            var _a2;
             const serializedAcc = accounts[key];
             const mappedAcc = {
               homeAccountId: serializedAcc.home_account_id,
@@ -7617,7 +7615,7 @@ var init_Deserializer = __esm({
               clientInfo: serializedAcc.client_info,
               lastModificationTime: serializedAcc.last_modification_time,
               lastModificationApp: serializedAcc.last_modification_app,
-              tenantProfiles: (_a = serializedAcc.tenantProfiles) == null ? void 0 : _a.map((serializedTenantProfile) => {
+              tenantProfiles: (_a2 = serializedAcc.tenantProfiles) == null ? void 0 : _a2.map((serializedTenantProfile) => {
                 return JSON.parse(serializedTenantProfile);
               })
             };
@@ -8409,8 +8407,8 @@ var init_Configuration = __esm({
       claimsBasedCachingEnabled: false
     };
     DEFAULT_LOGGER_OPTIONS = {
-      loggerCallback: () => {
-      },
+      loggerCallback: /* @__PURE__ */ __name(() => {
+      }, "loggerCallback"),
       piiLoggingEnabled: false,
       logLevel: LogLevel.Info
     };
@@ -10186,8 +10184,7 @@ var require_JsonWebTokenError = __commonJS({
       }
       this.name = "JsonWebTokenError";
       this.message = message;
-      if (error)
-        this.inner = error;
+      if (error) this.inner = error;
     }, "JsonWebTokenError");
     JsonWebTokenError.prototype = Object.create(Error.prototype);
     JsonWebTokenError.prototype.constructor = JsonWebTokenError;
@@ -11958,19 +11955,18 @@ var require_subset = __commonJS({
       sub = new Range(sub, options);
       dom = new Range(dom, options);
       let sawNonNull = false;
-      OUTER:
-        for (const simpleSub of sub.set) {
-          for (const simpleDom of dom.set) {
-            const isSub = simpleSubset(simpleSub, simpleDom, options);
-            sawNonNull = sawNonNull || isSub !== null;
-            if (isSub) {
-              continue OUTER;
-            }
-          }
-          if (sawNonNull) {
-            return false;
+      OUTER: for (const simpleSub of sub.set) {
+        for (const simpleDom of dom.set) {
+          const isSub = simpleSubset(simpleSub, simpleDom, options);
+          sawNonNull = sawNonNull || isSub !== null;
+          if (isSub) {
+            continue OUTER;
           }
         }
+        if (sawNonNull) {
+          return false;
+        }
+      }
       return true;
     }, "subset");
     var minimumVersionWithPreRelease = [new Comparator(">=0.0.0-0")];
@@ -12231,11 +12227,9 @@ var require_validateAsymmetricKey = __commonJS({
       ES512: "secp521r1"
     };
     module.exports = function(algorithm, key) {
-      if (!algorithm || !key)
-        return;
+      if (!algorithm || !key) return;
       const keyType = key.asymmetricKeyType;
-      if (!keyType)
-        return;
+      if (!keyType) return;
       const allowedAlgorithms = allowedAlgorithmsForKeys[keyType];
       if (!allowedAlgorithms) {
         throw new Error(`Unknown key type "${keyType}".`);
@@ -12312,8 +12306,7 @@ var require_verify = __commonJS({
         done = callback;
       } else {
         done = /* @__PURE__ */ __name(function(err, data) {
-          if (err)
-            throw err;
+          if (err) throw err;
           return data;
         }, "done");
       }
@@ -12987,15 +12980,15 @@ var require_sign = __commonJS({
       SUPPORTED_ALGS.splice(3, 0, "PS256", "PS384", "PS512");
     }
     var sign_options_schema = {
-      expiresIn: { isValid: function(value) {
+      expiresIn: { isValid: /* @__PURE__ */ __name(function(value) {
         return isInteger(value) || isString(value) && value;
-      }, message: '"expiresIn" should be a number of seconds or string representing a timespan' },
-      notBefore: { isValid: function(value) {
+      }, "isValid"), message: '"expiresIn" should be a number of seconds or string representing a timespan' },
+      notBefore: { isValid: /* @__PURE__ */ __name(function(value) {
         return isInteger(value) || isString(value) && value;
-      }, message: '"notBefore" should be a number of seconds or string representing a timespan' },
-      audience: { isValid: function(value) {
+      }, "isValid"), message: '"notBefore" should be a number of seconds or string representing a timespan' },
+      audience: { isValid: /* @__PURE__ */ __name(function(value) {
         return isString(value) || Array.isArray(value);
-      }, message: '"audience" must be a string or array' },
+      }, "isValid"), message: '"audience" must be a string or array' },
       algorithm: { isValid: includes.bind(null, SUPPORTED_ALGS), message: '"algorithm" must be a valid string enum value' },
       header: { isValid: isPlainObject, message: '"header" must be an object' },
       encoding: { isValid: isString, message: '"encoding" must be a string' },
@@ -14173,7 +14166,7 @@ var init_PublicClientApplication = __esm({
        * Acquires a token interactively via the browser by requesting an authorization code then exchanging it for a token.
        */
       async acquireTokenInteractive(request) {
-        var _a;
+        var _a2;
         const correlationId = request.correlationId || this.cryptoProvider.createNewGuid();
         this.logger.trace("acquireTokenInteractive called", correlationId);
         const { openBrowser, successTemplate, errorTemplate, windowHandle, loopbackClient: customLoopbackClient, ...remainingProperties } = request;
@@ -14189,7 +14182,7 @@ var init_PublicClientApplication = __esm({
               ...remainingProperties.extraQueryParameters,
               ...remainingProperties.tokenQueryParameters
             },
-            accountId: (_a = remainingProperties.account) == null ? void 0 : _a.nativeAccountId
+            accountId: (_a2 = remainingProperties.account) == null ? void 0 : _a2.nativeAccountId
           };
           return this.nativeBrokerPlugin.acquireTokenInteractive(brokerRequest, windowHandle);
         }
@@ -14359,7 +14352,7 @@ var init_ClientCredentialClient = __esm({
        * looks up cache if the tokens are cached already
        */
       async getCachedAuthenticationResult(request, config, cryptoUtils, authority, cacheManager, serverTelemetryManager) {
-        var _a, _b;
+        var _a2, _b2;
         const clientConfiguration = config;
         const managedIdentityConfiguration = config;
         let lastCacheOutcome = CacheOutcome.NOT_APPLICABLE;
@@ -14368,7 +14361,7 @@ var init_ClientCredentialClient = __esm({
           cacheContext = new TokenCacheContext(clientConfiguration.serializableCache, false);
           await clientConfiguration.persistencePlugin.beforeCacheAccess(cacheContext);
         }
-        const cachedAccessToken = this.readAccessTokenFromCache(authority, ((_a = managedIdentityConfiguration.managedIdentityId) == null ? void 0 : _a.id) || clientConfiguration.authOptions.clientId, new ScopeSet(request.scopes || []), cacheManager);
+        const cachedAccessToken = this.readAccessTokenFromCache(authority, ((_a2 = managedIdentityConfiguration.managedIdentityId) == null ? void 0 : _a2.id) || clientConfiguration.authOptions.clientId, new ScopeSet(request.scopes || []), cacheManager);
         if (clientConfiguration.serializableCache && clientConfiguration.persistencePlugin && cacheContext) {
           await clientConfiguration.persistencePlugin.afterCacheAccess(cacheContext);
         }
@@ -14376,7 +14369,7 @@ var init_ClientCredentialClient = __esm({
           serverTelemetryManager == null ? void 0 : serverTelemetryManager.setCacheOutcome(CacheOutcome.NO_CACHED_ACCESS_TOKEN);
           return [null, CacheOutcome.NO_CACHED_ACCESS_TOKEN];
         }
-        if (TimeUtils_exports.isTokenExpired(cachedAccessToken.expiresOn, ((_b = clientConfiguration.systemOptions) == null ? void 0 : _b.tokenRenewalOffsetSeconds) || DEFAULT_TOKEN_RENEWAL_OFFSET_SEC)) {
+        if (TimeUtils_exports.isTokenExpired(cachedAccessToken.expiresOn, ((_b2 = clientConfiguration.systemOptions) == null ? void 0 : _b2.tokenRenewalOffsetSeconds) || DEFAULT_TOKEN_RENEWAL_OFFSET_SEC)) {
           serverTelemetryManager == null ? void 0 : serverTelemetryManager.setCacheOutcome(CacheOutcome.CACHED_ACCESS_TOKEN_EXPIRED);
           return [null, CacheOutcome.CACHED_ACCESS_TOKEN_EXPIRED];
         }
@@ -14538,14 +14531,14 @@ var init_OnBehalfOfClient = __esm({
        * @param request
        */
       async getCachedAuthenticationResult(request) {
-        var _a, _b;
+        var _a2, _b2;
         const cachedAccessToken = this.readAccessTokenFromCacheForOBO(this.config.authOptions.clientId, request);
         if (!cachedAccessToken) {
-          (_a = this.serverTelemetryManager) == null ? void 0 : _a.setCacheOutcome(CacheOutcome.NO_CACHED_ACCESS_TOKEN);
+          (_a2 = this.serverTelemetryManager) == null ? void 0 : _a2.setCacheOutcome(CacheOutcome.NO_CACHED_ACCESS_TOKEN);
           this.logger.info("SilentFlowClient:acquireCachedToken - No access token found in cache for the given properties.");
           throw createClientAuthError(ClientAuthErrorCodes_exports.tokenRefreshRequired);
         } else if (TimeUtils_exports.isTokenExpired(cachedAccessToken.expiresOn, this.config.systemOptions.tokenRenewalOffsetSeconds)) {
-          (_b = this.serverTelemetryManager) == null ? void 0 : _b.setCacheOutcome(CacheOutcome.CACHED_ACCESS_TOKEN_EXPIRED);
+          (_b2 = this.serverTelemetryManager) == null ? void 0 : _b2.setCacheOutcome(CacheOutcome.CACHED_ACCESS_TOKEN_EXPIRED);
           this.logger.info(`OnbehalfofFlow:getCachedAuthenticationResult - Cached access token is expired or will expire within ${this.config.systemOptions.tokenRenewalOffsetSeconds} seconds.`);
           throw createClientAuthError(ClientAuthErrorCodes_exports.tokenRefreshRequired);
         }
@@ -14812,7 +14805,7 @@ var init_ConfidentialClientApplication = __esm({
         }
       }
       setClientCredential(configuration) {
-        var _a;
+        var _a2;
         const clientSecretNotEmpty = !!configuration.auth.clientSecret;
         const clientAssertionNotEmpty = !!configuration.auth.clientAssertion;
         const certificate = configuration.auth.clientCertificate || {
@@ -14837,7 +14830,7 @@ var init_ConfidentialClientApplication = __esm({
         if (!certificateNotEmpty) {
           throw createClientAuthError(ClientAuthErrorCodes_exports.invalidClientCredential);
         } else {
-          this.clientAssertion = ClientAssertion.fromCertificate(certificate.thumbprint, certificate.privateKey, (_a = configuration.auth.clientCertificate) == null ? void 0 : _a.x5c);
+          this.clientAssertion = ClientAssertion.fromCertificate(certificate.thumbprint, certificate.privateKey, (_a2 = configuration.auth.clientCertificate) == null ? void 0 : _a2.x5c);
         }
       }
     };
@@ -15529,11 +15522,11 @@ var init_dist2 = __esm({
 var require_package15 = __commonJS({
   "../../node_modules/.store/is-docker-npm-2.2.1-3f18a53aff/package/index.js"(exports, module) {
     "use strict";
-    var fs = __require("fs");
+    var fs3 = __require("fs");
     var isDocker;
     function hasDockerEnv() {
       try {
-        fs.statSync("/.dockerenv");
+        fs3.statSync("/.dockerenv");
         return true;
       } catch (_) {
         return false;
@@ -15542,7 +15535,7 @@ var require_package15 = __commonJS({
     __name(hasDockerEnv, "hasDockerEnv");
     function hasDockerCGroup() {
       try {
-        return fs.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
+        return fs3.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
       } catch (_) {
         return false;
       }
@@ -15562,7 +15555,7 @@ var require_package16 = __commonJS({
   "../../node_modules/.store/is-wsl-npm-2.2.0-2ba10d6393/package/index.js"(exports, module) {
     "use strict";
     var os = __require("os");
-    var fs = __require("fs");
+    var fs3 = __require("fs");
     var isDocker = require_package15();
     var isWsl = /* @__PURE__ */ __name(() => {
       if (process.platform !== "linux") {
@@ -15575,7 +15568,7 @@ var require_package16 = __commonJS({
         return true;
       }
       try {
-        return fs.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isDocker() : false;
+        return fs3.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isDocker() : false;
       } catch (_) {
         return false;
       }
@@ -15614,17 +15607,17 @@ var require_package17 = __commonJS({
 // ../../node_modules/.store/open-npm-8.4.2-1f763e8b75/package/index.js
 var require_package18 = __commonJS({
   "../../node_modules/.store/open-npm-8.4.2-1f763e8b75/package/index.js"(exports, module) {
-    var path4 = __require("path");
+    var path5 = __require("path");
     var childProcess = __require("child_process");
-    var { promises: fs, constants: fsConstants } = __require("fs");
+    var { promises: fs3, constants: fsConstants } = __require("fs");
     var isWsl = require_package16();
     var isDocker = require_package15();
     var defineLazyProperty = require_package17();
-    var localXdgOpenPath = path4.join(__dirname, "xdg-open");
+    var localXdgOpenPath = path5.join(__dirname, "xdg-open");
     var { platform, arch } = process;
     var hasContainerEnv = /* @__PURE__ */ __name(() => {
       try {
-        fs.statSync("/run/.containerenv");
+        fs3.statSync("/run/.containerenv");
         return true;
       } catch {
         return false;
@@ -15648,14 +15641,14 @@ var require_package18 = __commonJS({
         const configFilePath = "/etc/wsl.conf";
         let isConfigFileExists = false;
         try {
-          await fs.access(configFilePath, fsConstants.F_OK);
+          await fs3.access(configFilePath, fsConstants.F_OK);
           isConfigFileExists = true;
         } catch {
         }
         if (!isConfigFileExists) {
           return defaultMountPoint;
         }
-        const configContent = await fs.readFile(configFilePath, { encoding: "utf8" });
+        const configContent = await fs3.readFile(configFilePath, { encoding: "utf8" });
         const configMountPoint = /(?<!#.*)root\s*=\s*(?<mountPoint>.*)/g.exec(configContent);
         if (!configMountPoint) {
           return defaultMountPoint;
@@ -15755,7 +15748,7 @@ var require_package18 = __commonJS({
           const isBundled = !__dirname || __dirname === "/";
           let exeLocalXdgOpen = false;
           try {
-            await fs.access(localXdgOpenPath, fsConstants.X_OK);
+            await fs3.access(localXdgOpenPath, fsConstants.X_OK);
             exeLocalXdgOpen = true;
           } catch {
           }
@@ -15880,9 +15873,9 @@ var require_dist2 = __commonJS({
     var coreRestPipeline = require_commonjs4();
     var abortController = require_dist();
     var coreTracing = require_commonjs3();
-    var fs = __require("fs");
+    var fs3 = __require("fs");
     var os = __require("os");
-    var path4 = __require("path");
+    var path5 = __require("path");
     var msalCommon = (init_dist2(), __toCommonJS(dist_exports));
     var fs$1 = __require("node:fs");
     var https2 = __require("https");
@@ -15899,9 +15892,9 @@ var require_dist2 = __commonJS({
             var d = Object.getOwnPropertyDescriptor(e, k);
             Object.defineProperty(n, k, d.get ? d : {
               enumerable: true,
-              get: function() {
+              get: /* @__PURE__ */ __name(function() {
                 return e[k];
-              }
+              }, "get")
             });
           }
         });
@@ -15946,11 +15939,11 @@ var require_dist2 = __commonJS({
       }
     };
     function generatePluginConfiguration(options) {
-      var _a, _b, _c, _d, _e, _f, _g;
+      var _a2, _b2, _c, _d, _e, _f, _g;
       const config = {
         cache: {},
         broker: {
-          isEnabled: (_b = (_a = options.brokerOptions) === null || _a === void 0 ? void 0 : _a.enabled) !== null && _b !== void 0 ? _b : false,
+          isEnabled: (_b2 = (_a2 = options.brokerOptions) === null || _a2 === void 0 ? void 0 : _a2.enabled) !== null && _b2 !== void 0 ? _b2 : false,
           enableMsaPassthrough: (_d = (_c = options.brokerOptions) === null || _c === void 0 ? void 0 : _c.legacyEnableMsaPassthrough) !== null && _d !== void 0 ? _d : false,
           parentWindowHandle: (_e = options.brokerOptions) === null || _e === void 0 ? void 0 : _e.parentWindowHandle
         }
@@ -16133,14 +16126,14 @@ ${errorDetail}`);
     }
     __name(createConfigurationErrorMessage, "createConfigurationErrorMessage");
     function processMultiTenantRequest(tenantId, getTokenOptions, additionallyAllowedTenantIds = [], logger2) {
-      var _a;
+      var _a2;
       let resolvedTenantId;
       if (process.env.AZURE_IDENTITY_DISABLE_MULTITENANTAUTH) {
         resolvedTenantId = tenantId;
       } else if (tenantId === "adfs") {
         resolvedTenantId = tenantId;
       } else {
-        resolvedTenantId = (_a = getTokenOptions === null || getTokenOptions === void 0 ? void 0 : getTokenOptions.tenantId) !== null && _a !== void 0 ? _a : tenantId;
+        resolvedTenantId = (_a2 = getTokenOptions === null || getTokenOptions === void 0 ? void 0 : getTokenOptions.tenantId) !== null && _a2 !== void 0 ? _a2 : tenantId;
       }
       if (tenantId && resolvedTenantId !== tenantId && !additionallyAllowedTenantIds.includes("*") && !additionallyAllowedTenantIds.some((t) => t.localeCompare(resolvedTenantId) === 0)) {
         const message = createConfigurationErrorMessage(tenantId);
@@ -16248,9 +16241,9 @@ ${errorDetail}`);
     __name(getIdentityClientAuthorityHost, "getIdentityClientAuthorityHost");
     var _IdentityClient = class _IdentityClient extends coreClient.ServiceClient {
       constructor(options) {
-        var _a, _b;
+        var _a2, _b2;
         const packageDetails = `azsdk-js-identity/${SDK_VERSION}`;
-        const userAgentPrefix = ((_a = options === null || options === void 0 ? void 0 : options.userAgentOptions) === null || _a === void 0 ? void 0 : _a.userAgentPrefix) ? `${options.userAgentOptions.userAgentPrefix} ${packageDetails}` : `${packageDetails}`;
+        const userAgentPrefix = ((_a2 = options === null || options === void 0 ? void 0 : options.userAgentOptions) === null || _a2 === void 0 ? void 0 : _a2.userAgentPrefix) ? `${options.userAgentOptions.userAgentPrefix} ${packageDetails}` : `${packageDetails}`;
         const baseUri = getIdentityClientAuthorityHost(options);
         if (!baseUri.startsWith("https:")) {
           throw new Error("The authorityHost address must use the 'https' protocol.");
@@ -16262,7 +16255,7 @@ ${errorDetail}`);
         }, baseUri }));
         this.authorityHost = baseUri;
         this.abortControllers = /* @__PURE__ */ new Map();
-        this.allowLoggingAccountIdentifiers = (_b = options === null || options === void 0 ? void 0 : options.loggingOptions) === null || _b === void 0 ? void 0 : _b.allowLoggingAccountIdentifiers;
+        this.allowLoggingAccountIdentifiers = (_b2 = options === null || options === void 0 ? void 0 : options.loggingOptions) === null || _b2 === void 0 ? void 0 : _b2.allowLoggingAccountIdentifiers;
         this.tokenCredentialOptions = Object.assign({}, options);
       }
       async sendTokenRequest(request) {
@@ -16364,8 +16357,8 @@ ${errorDetail}`);
         this.abortControllers.set(key, void 0);
       }
       getCorrelationId(options) {
-        var _a;
-        const parameter = (_a = options === null || options === void 0 ? void 0 : options.body) === null || _a === void 0 ? void 0 : _a.split("&").map((part) => part.split("=")).find(([key]) => key === "client-request-id");
+        var _a2;
+        const parameter = (_a2 = options === null || options === void 0 ? void 0 : options.body) === null || _a2 === void 0 ? void 0 : _a2.split("&").map((part) => part.split("=")).find(([key]) => key === "client-request-id");
         return parameter && parameter.length ? parameter[1] || noCorrelationId : noCorrelationId;
       }
       // The MSAL network module methods follow
@@ -16472,8 +16465,8 @@ ${errorDetail}`);
       const vsCodeFolder = "Code";
       const homedir = os.homedir();
       function loadProperty(...pathSegments) {
-        const fullPath = path4.join(...pathSegments, vsCodeFolder, ...settingsPath);
-        const settings = JSON.parse(fs.readFileSync(fullPath, { encoding: "utf8" }));
+        const fullPath = path5.join(...pathSegments, vsCodeFolder, ...settingsPath);
+        const settings = JSON.parse(fs3.readFileSync(fullPath, { encoding: "utf8" }));
         return settings[property];
       }
       __name(loadProperty, "loadProperty");
@@ -16548,7 +16541,7 @@ ${errorDetail}`);
        *                `TokenCredential` implementation might make.
        */
       async getToken(scopes, options) {
-        var _a, _b;
+        var _a2, _b2;
         await this.prepareOnce();
         const tenantId = processMultiTenantRequest(this.tenantId, options, this.additionallyAllowedTenantIds, logger$o) || this.tenantId;
         if (findCredentials === void 0) {
@@ -16570,7 +16563,7 @@ ${errorDetail}`);
           scopeString += " offline_access";
         }
         const credentials = await findCredentials();
-        const { password: refreshToken } = (_b = (_a = credentials.find(({ account }) => account === this.cloudName)) !== null && _a !== void 0 ? _a : credentials[0]) !== null && _b !== void 0 ? _b : {};
+        const { password: refreshToken } = (_b2 = (_a2 = credentials.find(({ account }) => account === this.cloudName)) !== null && _a2 !== void 0 ? _a2 : credentials[0]) !== null && _b2 !== void 0 ? _b2 : {};
         if (refreshToken) {
           const tokenResponse = await this.identityClient.refreshAccessToken(tenantId, AzureAccountClientId, scopeString, refreshToken, void 0);
           if (tokenResponse) {
@@ -16814,7 +16807,7 @@ ${errorDetail}`);
         return result;
       },
       async getToken(configuration, getTokenOptions = {}) {
-        var _a;
+        var _a2;
         const { identityClient, scopes, clientId, resourceId } = configuration;
         if (clientId) {
           logger$l.warning(`${msiName$4}: user-assigned identities not supported. The argument clientId might be ignored by the service.`);
@@ -16827,7 +16820,7 @@ ${errorDetail}`);
         const filePath = await filePathRequest(identityClient, requestOptions);
         validateKeyFile(filePath);
         const key = await fs$1.promises.readFile(filePath, { encoding: "utf-8" });
-        (_a = requestOptions.headers) === null || _a === void 0 ? void 0 : _a.set("Authorization", `Basic ${key}`);
+        (_a2 = requestOptions.headers) === null || _a2 === void 0 ? void 0 : _a2.set("Authorization", `Basic ${key}`);
         const request = coreRestPipeline.createPipelineRequest(Object.assign(Object.assign({}, requestOptions), {
           // Generally, MSI endpoints use the HTTP protocol, without transport layer security (TLS).
           allowInsecureConnection: true
@@ -17112,7 +17105,7 @@ ${errorDetail}`);
     var msiName$1 = "ManagedIdentityCredential - IMDS";
     var logger$h = credentialLogger(msiName$1);
     function prepareRequestOptions(scopes, clientId, resourceId, options) {
-      var _a;
+      var _a2;
       const resource = mapScopesToResource(scopes);
       if (!resource) {
         throw new Error(`${msiName$1}: Multiple scopes are not supported.`);
@@ -17133,7 +17126,7 @@ ${errorDetail}`);
         const params = new URLSearchParams(queryParameters);
         query = `?${params.toString()}`;
       }
-      const url = new URL(imdsEndpointPath, (_a = process.env.AZURE_POD_IDENTITY_AUTHORITY_HOST) !== null && _a !== void 0 ? _a : imdsHost);
+      const url = new URL(imdsEndpointPath, (_a2 = process.env.AZURE_POD_IDENTITY_AUTHORITY_HOST) !== null && _a2 !== void 0 ? _a2 : imdsHost);
       const rawHeaders = {
         Accept: "application/json",
         Metadata: "true"
@@ -17168,10 +17161,10 @@ ${errorDetail}`);
           skipQuery: true
         });
         return tracingClient.withSpan("ManagedIdentityCredential-pingImdsEndpoint", getTokenOptions, async (options) => {
-          var _a, _b;
+          var _a2, _b2;
           requestOptions.tracingOptions = options.tracingOptions;
           const request = coreRestPipeline.createPipelineRequest(requestOptions);
-          request.timeout = ((_a = options.requestOptions) === null || _a === void 0 ? void 0 : _a.timeout) || 1e3;
+          request.timeout = ((_a2 = options.requestOptions) === null || _a2 === void 0 ? void 0 : _a2.timeout) || 1e3;
           request.allowInsecureConnection = true;
           let response;
           try {
@@ -17185,7 +17178,7 @@ ${errorDetail}`);
             return false;
           }
           if (response.status === 403) {
-            if ((_b = response.bodyAsText) === null || _b === void 0 ? void 0 : _b.includes("unreachable")) {
+            if ((_b2 = response.bodyAsText) === null || _b2 === void 0 ? void 0 : _b2.includes("unreachable")) {
               logger$h.info(`${msiName$1}: The Azure IMDS endpoint is unavailable`);
               logger$h.info(`${msiName$1}: ${response.bodyAsText}`);
               return false;
@@ -17277,9 +17270,9 @@ ${errorDetail}`);
       RegionalAuthority2["GovernmentUSDodCentral"] = "usdodcentral";
     })(RegionalAuthority || (RegionalAuthority = {}));
     function calculateRegionalAuthority(regionalAuthority) {
-      var _a, _b;
+      var _a2, _b2;
       let azureRegion = regionalAuthority;
-      if (azureRegion === void 0 && ((_b = (_a = globalThis.process) === null || _a === void 0 ? void 0 : _a.env) === null || _b === void 0 ? void 0 : _b.AZURE_REGIONAL_AUTHORITY_NAME) !== void 0) {
+      if (azureRegion === void 0 && ((_b2 = (_a2 = globalThis.process) === null || _a2 === void 0 ? void 0 : _a2.env) === null || _b2 === void 0 ? void 0 : _b2.AZURE_REGIONAL_AUTHORITY_NAME) !== void 0) {
         azureRegion = process.env.AZURE_REGIONAL_AUTHORITY_NAME;
       }
       if (azureRegion === RegionalAuthority.AutoDiscoverRegion) {
@@ -17290,9 +17283,9 @@ ${errorDetail}`);
     __name(calculateRegionalAuthority, "calculateRegionalAuthority");
     var msalLogger = credentialLogger("MsalClient");
     function generateMsalConfiguration(clientId, tenantId, msalClientOptions = {}) {
-      var _a, _b, _c;
+      var _a2, _b2, _c;
       const resolvedTenant = resolveTenantId(msalLogger, tenantId, clientId);
-      const authority = getAuthority(resolvedTenant, (_a = msalClientOptions.authorityHost) !== null && _a !== void 0 ? _a : process.env.AZURE_AUTHORITY_HOST);
+      const authority = getAuthority(resolvedTenant, (_a2 = msalClientOptions.authorityHost) !== null && _a2 !== void 0 ? _a2 : process.env.AZURE_AUTHORITY_HOST);
       const httpClient = new IdentityClient(Object.assign(Object.assign({}, msalClientOptions.tokenCredentialOptions), { authorityHost: authority, loggingOptions: msalClientOptions.loggingOptions }));
       const msalConfig = {
         auth: {
@@ -17303,7 +17296,7 @@ ${errorDetail}`);
         system: {
           networkClient: httpClient,
           loggerOptions: {
-            loggerCallback: defaultLoggerCallback((_b = msalClientOptions.logger) !== null && _b !== void 0 ? _b : msalLogger),
+            loggerCallback: defaultLoggerCallback((_b2 = msalClientOptions.logger) !== null && _b2 !== void 0 ? _b2 : msalLogger),
             logLevel: getMSALLogLevel(logger$q.getLogLevel()),
             piiLoggingEnabled: (_c = msalClientOptions.loggingOptions) === null || _c === void 0 ? void 0 : _c.enableUnsafeSupportLogging
           }
@@ -17371,7 +17364,7 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
       }
       __name(getTokenSilent, "getTokenSilent");
       async function withSilentAuthentication(msalApp, scopes, options, onAuthenticationRequired) {
-        var _a;
+        var _a2;
         let response = null;
         try {
           response = await getTokenSilent(msalApp, scopes, options);
@@ -17395,7 +17388,7 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
           }
         }
         ensureValidMsalToken(scopes, response, options);
-        state.cachedAccount = (_a = response === null || response === void 0 ? void 0 : response.account) !== null && _a !== void 0 ? _a : null;
+        state.cachedAccount = (_a2 = response === null || response === void 0 ? void 0 : response.account) !== null && _a2 !== void 0 ? _a2 : null;
         msalLogger.getToken.info(formatSuccess(scopes));
         return {
           token: response.accessToken,
@@ -17591,7 +17584,7 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
        * @hidden
        */
       constructor(clientIdOrOptions, options) {
-        var _a, _b;
+        var _a2, _b2;
         this.isEndpointUnavailable = null;
         this.isAppTokenProviderInitialized = false;
         this.msiRetryConfig = {
@@ -17611,7 +17604,7 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
         if (this.clientId && this.resourceId) {
           throw new Error(`${_ManagedIdentityCredential.name} - Client Id and Resource Id can't be provided at the same time.`);
         }
-        if (((_a = _options === null || _options === void 0 ? void 0 : _options.retryOptions) === null || _a === void 0 ? void 0 : _a.maxRetries) !== void 0) {
+        if (((_a2 = _options === null || _options === void 0 ? void 0 : _options.retryOptions) === null || _a2 === void 0 ? void 0 : _a2.maxRetries) !== void 0) {
           this.msiRetryConfig.maxRetries = _options.retryOptions.maxRetries;
         }
         this.identityClient = new IdentityClient(_options);
@@ -17621,7 +17614,7 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
         this.confidentialApp = new msalCommon.ConfidentialClientApplication({
           auth: {
             authority: "https://login.microsoftonline.com/managed_identity",
-            clientId: (_b = this.clientId) !== null && _b !== void 0 ? _b : DeveloperSignOnClientId,
+            clientId: (_b2 = this.clientId) !== null && _b2 !== void 0 ? _b2 : DeveloperSignOnClientId,
             clientSecret: "dummy-secret",
             cloudDiscoveryMetadata: '{"tenant_discovery_endpoint":"https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration","api-version":"1.1","metadata":[{"preferred_network":"login.microsoftonline.com","preferred_cache":"login.windows.net","aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"]},{"preferred_network":"login.partner.microsoftonline.cn","preferred_cache":"login.partner.microsoftonline.cn","aliases":["login.partner.microsoftonline.cn","login.chinacloudapi.cn"]},{"preferred_network":"login.microsoftonline.de","preferred_cache":"login.microsoftonline.de","aliases":["login.microsoftonline.de"]},{"preferred_network":"login.microsoftonline.us","preferred_cache":"login.microsoftonline.us","aliases":["login.microsoftonline.us","login.usgovcloudapi.net"]},{"preferred_network":"login-us.microsoftonline.com","preferred_cache":"login-us.microsoftonline.com","aliases":["login-us.microsoftonline.com"]}]}',
             authorityMetadata: '{"token_endpoint":"https://login.microsoftonline.com/common/oauth2/v2.0/token","token_endpoint_auth_methods_supported":["client_secret_post","private_key_jwt","client_secret_basic"],"jwks_uri":"https://login.microsoftonline.com/common/discovery/v2.0/keys","response_modes_supported":["query","fragment","form_post"],"subject_types_supported":["pairwise"],"id_token_signing_alg_values_supported":["RS256"],"response_types_supported":["code","id_token","code id_token","id_token token"],"scopes_supported":["openid","profile","email","offline_access"],"issuer":"https://login.microsoftonline.com/{tenantid}/v2.0","request_uri_parameter_supported":false,"userinfo_endpoint":"https://graph.microsoft.com/oidc/userinfo","authorization_endpoint":"https://login.microsoftonline.com/common/oauth2/v2.0/authorize","device_authorization_endpoint":"https://login.microsoftonline.com/common/oauth2/v2.0/devicecode","http_logout_supported":true,"frontchannel_logout_supported":true,"end_session_endpoint":"https://login.microsoftonline.com/common/oauth2/v2.0/logout","claims_supported":["sub","iss","cloud_instance_name","cloud_instance_host_name","cloud_graph_host_name","msgraph_host","aud","exp","iat","auth_time","acr","nonce","preferred_username","name","tid","ver","at_hash","c_hash","email"],"kerberos_endpoint":"https://login.microsoftonline.com/common/kerberos","tenant_region_scope":null,"cloud_instance_name":"microsoftonline.com","cloud_graph_host_name":"graph.windows.net","msgraph_host":"graph.microsoft.com","rbac_url":"https://pas.windows.net"}',
@@ -17919,13 +17912,13 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
         const scope = typeof scopes === "string" ? scopes : scopes[0];
         logger$c.getToken.info(`Using the scope ${scope}`);
         return tracingClient.withSpan(`${this.constructor.name}.getToken`, options, async () => {
-          var _a, _b, _c, _d;
+          var _a2, _b2, _c, _d;
           try {
             ensureValidScopeForDevTimeCreds(scope, logger$c);
             const resource = getScopeResource(scope);
             const obj = await cliCredentialInternals.getAzureCliAccessToken(resource, tenantId, this.timeout);
-            const specificScope = (_a = obj.stderr) === null || _a === void 0 ? void 0 : _a.match("(.*)az login --scope(.*)");
-            const isLoginError2 = ((_b = obj.stderr) === null || _b === void 0 ? void 0 : _b.match("(.*)az login(.*)")) && !specificScope;
+            const specificScope = (_a2 = obj.stderr) === null || _a2 === void 0 ? void 0 : _a2.match("(.*)az login --scope(.*)");
+            const isLoginError2 = ((_b2 = obj.stderr) === null || _b2 === void 0 ? void 0 : _b2.match("(.*)az login(.*)")) && !specificScope;
             const isNotInstallError = ((_c = obj.stderr) === null || _c === void 0 ? void 0 : _c.match("az:(.*)not found")) || ((_d = obj.stderr) === null || _d === void 0 ? void 0 : _d.startsWith("'az' is not recognized"));
             if (isNotInstallError) {
               const error = new CredentialUnavailableError("Azure CLI could not be found. Please visit https://aka.ms/azure-cli for installation instructions and then, once installed, authenticate to your Azure account using 'az login'.");
@@ -18072,13 +18065,13 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
         }
         logger$b.getToken.info(`Using the scopes ${scopes}`);
         return tracingClient.withSpan(`${this.constructor.name}.getToken`, options, async () => {
-          var _a, _b, _c, _d;
+          var _a2, _b2, _c, _d;
           try {
             scopeList.forEach((scope) => {
               ensureValidScopeForDevTimeCreds(scope, logger$b);
             });
             const obj = await developerCliCredentialInternals.getAzdAccessToken(scopeList, tenantId, this.timeout);
-            const isNotLoggedInError = ((_a = obj.stderr) === null || _a === void 0 ? void 0 : _a.match("not logged in, run `azd login` to login")) || ((_b = obj.stderr) === null || _b === void 0 ? void 0 : _b.match("not logged in, run `azd auth login` to login"));
+            const isNotLoggedInError = ((_a2 = obj.stderr) === null || _a2 === void 0 ? void 0 : _a2.match("not logged in, run `azd login` to login")) || ((_b2 = obj.stderr) === null || _b2 === void 0 ? void 0 : _b2.match("not logged in, run `azd auth login` to login"));
             const isNotInstallError = ((_c = obj.stderr) === null || _c === void 0 ? void 0 : _c.match("azd:(.*)not found")) || ((_d = obj.stderr) === null || _d === void 0 ? void 0 : _d.startsWith("'azd' is not recognized"));
             if (isNotInstallError || obj.error && obj.error.code === "ENOENT") {
               const error = new CredentialUnavailableError("Azure Developer CLI couldn't be found. To mitigate this issue, see the troubleshooting guidelines at https://aka.ms/azsdk/js/identity/azdevclicredential/troubleshoot.");
@@ -18474,19 +18467,19 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
     var ClientSecretCredential = _ClientSecretCredential;
     var _MsalNode = class _MsalNode {
       constructor(options) {
-        var _a, _b, _c, _d, _e, _f;
+        var _a2, _b2, _c, _d, _e, _f;
         this.app = {};
         this.caeApp = {};
         this.requiresConfidential = false;
         this.logger = options.logger;
         this.msalConfig = this.defaultNodeMsalConfig(options);
         this.tenantId = resolveTenantId(options.logger, options.tenantId, options.clientId);
-        this.additionallyAllowedTenantIds = resolveAdditionallyAllowedTenantIds((_a = options === null || options === void 0 ? void 0 : options.tokenCredentialOptions) === null || _a === void 0 ? void 0 : _a.additionallyAllowedTenants);
+        this.additionallyAllowedTenantIds = resolveAdditionallyAllowedTenantIds((_a2 = options === null || options === void 0 ? void 0 : options.tokenCredentialOptions) === null || _a2 === void 0 ? void 0 : _a2.additionallyAllowedTenants);
         this.clientId = this.msalConfig.auth.clientId;
         if (options === null || options === void 0 ? void 0 : options.getAssertion) {
           this.getAssertion = options.getAssertion;
         }
-        this.enableBroker = (_b = options === null || options === void 0 ? void 0 : options.brokerOptions) === null || _b === void 0 ? void 0 : _b.enabled;
+        this.enableBroker = (_b2 = options === null || options === void 0 ? void 0 : options.brokerOptions) === null || _b2 === void 0 ? void 0 : _b2.enabled;
         this.enableMsaPassthrough = (_c = options === null || options === void 0 ? void 0 : options.brokerOptions) === null || _c === void 0 ? void 0 : _c.legacyEnableMsaPassthrough;
         this.parentWindowHandle = (_d = options.brokerOptions) === null || _d === void 0 ? void 0 : _d.parentWindowHandle;
         if (persistenceProvider !== void 0 && ((_e = options.tokenCachePersistenceOptions) === null || _e === void 0 ? void 0 : _e.enabled)) {
@@ -18517,7 +18510,7 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
        * Generates a MSAL configuration that generally works for Node.js
        */
       defaultNodeMsalConfig(options) {
-        var _a;
+        var _a2;
         const clientId = options.clientId || DeveloperSignOnClientId;
         const tenantId = resolveTenantId(options.logger, options.tenantId, options.clientId);
         this.authorityHost = options.authorityHost || process.env.AZURE_AUTHORITY_HOST;
@@ -18537,7 +18530,7 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
             loggerOptions: {
               loggerCallback: defaultLoggerCallback(options.logger),
               logLevel: getMSALLogLevel(logger$q.getLogLevel()),
-              piiLoggingEnabled: (_a = options.loggingOptions) === null || _a === void 0 ? void 0 : _a.enableUnsafeSupportLogging
+              piiLoggingEnabled: (_a2 = options.loggingOptions) === null || _a2 === void 0 ? void 0 : _a2.enableUnsafeSupportLogging
             }
           }
         };
@@ -18651,7 +18644,7 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
        * Attempts to retrieve a token from cache.
        */
       async getTokenSilent(scopes, options) {
-        var _a, _b, _c;
+        var _a2, _b2, _c;
         await this.getActiveAccount(options === null || options === void 0 ? void 0 : options.enableCae);
         if (!this.account) {
           throw new AuthenticationRequiredError({
@@ -18681,8 +18674,8 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
         }
         try {
           this.logger.info("Attempting to acquire token silently");
-          await ((_a = this.getApp("publicFirst", options === null || options === void 0 ? void 0 : options.enableCae)) === null || _a === void 0 ? void 0 : _a.getTokenCache().getAllAccounts());
-          const response = (_c = await ((_b = this.getApp("confidential", options === null || options === void 0 ? void 0 : options.enableCae)) === null || _b === void 0 ? void 0 : _b.acquireTokenSilent(silentRequest))) !== null && _c !== void 0 ? _c : await this.getApp("public", options === null || options === void 0 ? void 0 : options.enableCae).acquireTokenSilent(silentRequest);
+          await ((_a2 = this.getApp("publicFirst", options === null || options === void 0 ? void 0 : options.enableCae)) === null || _a2 === void 0 ? void 0 : _a2.getTokenCache().getAllAccounts());
+          const response = (_c = await ((_b2 = this.getApp("confidential", options === null || options === void 0 ? void 0 : options.enableCae)) === null || _b2 === void 0 ? void 0 : _b2.acquireTokenSilent(silentRequest))) !== null && _c !== void 0 ? _c : await this.getApp("public", options === null || options === void 0 ? void 0 : options.enableCae).acquireTokenSilent(silentRequest);
           return this.handleResult(scopes, response || void 0);
         } catch (err) {
           throw handleMsalError(scopes, err, options);
@@ -18826,8 +18819,8 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
       "AZURE_ADDITIONALLY_ALLOWED_TENANTS"
     ];
     function getAdditionallyAllowedTenants() {
-      var _a;
-      const additionallyAllowedValues = (_a = process.env.AZURE_ADDITIONALLY_ALLOWED_TENANTS) !== null && _a !== void 0 ? _a : "";
+      var _a2;
+      const additionallyAllowedValues = (_a2 = process.env.AZURE_ADDITIONALLY_ALLOWED_TENANTS) !== null && _a2 !== void 0 ? _a2 : "";
       return additionallyAllowedValues.split(";");
     }
     __name(getAdditionallyAllowedTenants, "getAdditionallyAllowedTenants");
@@ -18917,12 +18910,12 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
     var EnvironmentCredential = _EnvironmentCredential;
     var logger$4 = credentialLogger("DefaultAzureCredential");
     function createDefaultManagedIdentityCredential(options = {}) {
-      var _a, _b, _c, _d;
-      (_a = options.retryOptions) !== null && _a !== void 0 ? _a : options.retryOptions = {
+      var _a2, _b2, _c, _d;
+      (_a2 = options.retryOptions) !== null && _a2 !== void 0 ? _a2 : options.retryOptions = {
         maxRetries: 5,
         retryDelayInMs: 800
       };
-      const managedIdentityClientId = (_b = options === null || options === void 0 ? void 0 : options.managedIdentityClientId) !== null && _b !== void 0 ? _b : process.env.AZURE_CLIENT_ID;
+      const managedIdentityClientId = (_b2 = options === null || options === void 0 ? void 0 : options.managedIdentityClientId) !== null && _b2 !== void 0 ? _b2 : process.env.AZURE_CLIENT_ID;
       const workloadIdentityClientId = (_c = options === null || options === void 0 ? void 0 : options.workloadIdentityClientId) !== null && _c !== void 0 ? _c : managedIdentityClientId;
       const managedResourceId = options === null || options === void 0 ? void 0 : options.managedIdentityResourceId;
       const workloadFile = process.env.AZURE_FEDERATED_TOKEN_FILE;
@@ -18943,9 +18936,9 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
     }
     __name(createDefaultManagedIdentityCredential, "createDefaultManagedIdentityCredential");
     function createDefaultWorkloadIdentityCredential(options) {
-      var _a, _b, _c;
-      const managedIdentityClientId = (_a = options === null || options === void 0 ? void 0 : options.managedIdentityClientId) !== null && _a !== void 0 ? _a : process.env.AZURE_CLIENT_ID;
-      const workloadIdentityClientId = (_b = options === null || options === void 0 ? void 0 : options.workloadIdentityClientId) !== null && _b !== void 0 ? _b : managedIdentityClientId;
+      var _a2, _b2, _c;
+      const managedIdentityClientId = (_a2 = options === null || options === void 0 ? void 0 : options.managedIdentityClientId) !== null && _a2 !== void 0 ? _a2 : process.env.AZURE_CLIENT_ID;
+      const workloadIdentityClientId = (_b2 = options === null || options === void 0 ? void 0 : options.workloadIdentityClientId) !== null && _b2 !== void 0 ? _b2 : managedIdentityClientId;
       const workloadFile = process.env.AZURE_FEDERATED_TOKEN_FILE;
       const tenantId = (_c = options === null || options === void 0 ? void 0 : options.tenantId) !== null && _c !== void 0 ? _c : process.env.AZURE_TENANT_ID;
       if (workloadFile && workloadIdentityClientId) {
@@ -19018,21 +19011,21 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
     };
     var _MsalOpenBrowser = class _MsalOpenBrowser extends MsalNode {
       constructor(options) {
-        var _a, _b, _c, _d;
+        var _a2, _b2, _c, _d;
         super(options);
         this.loginHint = options.loginHint;
-        this.errorTemplate = (_a = options.browserCustomizationOptions) === null || _a === void 0 ? void 0 : _a.errorMessage;
-        this.successTemplate = (_b = options.browserCustomizationOptions) === null || _b === void 0 ? void 0 : _b.successMessage;
+        this.errorTemplate = (_a2 = options.browserCustomizationOptions) === null || _a2 === void 0 ? void 0 : _a2.errorMessage;
+        this.successTemplate = (_b2 = options.browserCustomizationOptions) === null || _b2 === void 0 ? void 0 : _b2.successMessage;
         this.logger = credentialLogger("Node.js MSAL Open Browser");
         this.useDefaultBrokerAccount = ((_c = options.brokerOptions) === null || _c === void 0 ? void 0 : _c.enabled) && ((_d = options.brokerOptions) === null || _d === void 0 ? void 0 : _d.useDefaultBrokerAccount);
       }
       async doGetToken(scopes, options = {}) {
         try {
           const interactiveRequest = {
-            openBrowser: async (url) => {
+            openBrowser: /* @__PURE__ */ __name(async (url) => {
               this.logger.verbose(`Opening browser to ${url}`);
               await interactiveBrowserMockable.open(url, { wait: true, newInstance: true });
-            },
+            }, "openBrowser"),
             scopes,
             authority: options === null || options === void 0 ? void 0 : options.authority,
             claims: options === null || options === void 0 ? void 0 : options.claims,
@@ -19063,7 +19056,7 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
        * If the default broker account is not available, the method will fall back to interactive authentication.
        */
       async doGetBrokeredToken(scopes, interactiveRequest, options) {
-        var _a;
+        var _a2;
         this.logger.verbose("Authentication will resume through the broker");
         if (this.parentWindowHandle) {
           interactiveRequest.windowHandle = Buffer.from(this.parentWindowHandle);
@@ -19071,7 +19064,7 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
           this.logger.warning("Parent window handle is not specified for the broker. This may cause unexpected behavior. Please provide the parentWindowHandle.");
         }
         if (this.enableMsaPassthrough) {
-          ((_a = interactiveRequest.tokenQueryParameters) !== null && _a !== void 0 ? _a : interactiveRequest.tokenQueryParameters = {})["msal_request_type"] = "consumer_passthrough";
+          ((_a2 = interactiveRequest.tokenQueryParameters) !== null && _a2 !== void 0 ? _a2 : interactiveRequest.tokenQueryParameters = {})["msal_request_type"] = "consumer_passthrough";
         }
         if (options.useDefaultBrokerAccount) {
           interactiveRequest.prompt = "none";
@@ -19116,13 +19109,13 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
        * @param options - Options for configuring the client which makes the authentication requests.
        */
       constructor(options) {
-        var _a, _b, _c, _d;
+        var _a2, _b2, _c, _d;
         const redirectUri = typeof options.redirectUri === "function" ? options.redirectUri() : options.redirectUri || "http://localhost";
         this.tenantId = options === null || options === void 0 ? void 0 : options.tenantId;
         this.additionallyAllowedTenantIds = resolveAdditionallyAllowedTenantIds(options === null || options === void 0 ? void 0 : options.additionallyAllowedTenants);
         const ibcNodeOptions = options;
-        if ((_a = ibcNodeOptions === null || ibcNodeOptions === void 0 ? void 0 : ibcNodeOptions.brokerOptions) === null || _a === void 0 ? void 0 : _a.enabled) {
-          if (!((_b = ibcNodeOptions === null || ibcNodeOptions === void 0 ? void 0 : ibcNodeOptions.brokerOptions) === null || _b === void 0 ? void 0 : _b.parentWindowHandle)) {
+        if ((_a2 = ibcNodeOptions === null || ibcNodeOptions === void 0 ? void 0 : ibcNodeOptions.brokerOptions) === null || _a2 === void 0 ? void 0 : _a2.enabled) {
+          if (!((_b2 = ibcNodeOptions === null || ibcNodeOptions === void 0 ? void 0 : ibcNodeOptions.brokerOptions) === null || _b2 === void 0 ? void 0 : _b2.parentWindowHandle)) {
             throw new Error("In order to do WAM authentication, `parentWindowHandle` under `brokerOptions` is a required parameter");
           } else {
             this.msalFlow = new MsalOpenBrowser(Object.assign(Object.assign({}, options), {
@@ -19372,7 +19365,7 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
     };
     __name(_AuthorizationCodeCredential, "AuthorizationCodeCredential");
     var AuthorizationCodeCredential = _AuthorizationCodeCredential;
-    var readFileAsync = util.promisify(fs.readFile);
+    var readFileAsync = util.promisify(fs3.readFile);
     async function parseCertificate(configuration, sendCertificateChain) {
       const certificateParts = {};
       const certificate = configuration.certificate;
@@ -19480,19 +19473,19 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
       const pipeline = coreRestPipeline.createEmptyPipeline();
       pipeline.addPolicy(coreRestPipeline.bearerTokenAuthenticationPolicy({ credential, scopes }));
       async function getRefreshedToken() {
-        var _a;
+        var _a2;
         const res = await pipeline.sendRequest({
-          sendRequest: (request) => Promise.resolve({
+          sendRequest: /* @__PURE__ */ __name((request) => Promise.resolve({
             request,
             status: 200,
             headers: request.headers
-          })
+          }), "sendRequest")
         }, coreRestPipeline.createPipelineRequest({
           url: "https://example.com",
           abortSignal,
           tracingOptions
         }));
-        const accessToken = (_a = res.headers.get("authorization")) === null || _a === void 0 ? void 0 : _a.split(" ")[1];
+        const accessToken = (_a2 = res.headers.get("authorization")) === null || _a2 === void 0 ? void 0 : _a2.split(" ")[1];
         if (!accessToken) {
           throw new Error("Failed to get access token");
         }
@@ -19539,141 +19532,629 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
   }
 });
 
-// ../../node_modules/.store/@azure-identity-cache-persistence-npm-1.1.0-fbed6439ad/package/dist/index.js
-var require_dist3 = __commonJS({
-  "../../node_modules/.store/@azure-identity-cache-persistence-npm-1.1.0-fbed6439ad/package/dist/index.js"(exports) {
-    "use strict";
-    Object.defineProperty(exports, "__esModule", { value: true });
-    var tslib = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
-    var path4 = __require("path");
-    var msalNodeExtensions = __require("@azure/msal-node-extensions");
-    function _interopNamespaceDefault(e) {
-      var n = /* @__PURE__ */ Object.create(null);
-      if (e) {
-        Object.keys(e).forEach(function(k) {
-          if (k !== "default") {
-            var d = Object.getOwnPropertyDescriptor(e, k);
-            Object.defineProperty(n, k, d.get ? d : {
-              enumerable: true,
-              get: function() {
-                return e[k];
-              }
-            });
-          }
-        });
+// src/authentication/getCredential.ts
+var import_identity3 = __toESM(require_dist2(), 1);
+
+// src/authentication/forks/identity-cache-persistence/platforms.ts
+import * as path2 from "path";
+
+// src/authentication/forks/msal-node-extensions/persistence/NapiRsKeyRingPersistence.ts
+import { Entry } from "@napi-rs/keyring";
+import { dirname as dirname2 } from "path";
+
+// src/authentication/forks/msal-node-extensions/utils/TypeGuards.ts
+var isNodeError = /* @__PURE__ */ __name((error) => {
+  return !!error && typeof error === "object" && "code" in error;
+}, "isNodeError");
+
+// src/authentication/forks/msal-node-extensions/error/PersistenceError.ts
+var _PersistenceError = class _PersistenceError extends Error {
+  constructor(errorCode, errorMessage) {
+    const errorString = errorMessage ? `${errorCode}: ${errorMessage}` : errorCode;
+    super(errorString);
+    Object.setPrototypeOf(this, _PersistenceError.prototype);
+    this.errorCode = errorCode;
+    this.errorMessage = errorMessage;
+    this.name = "PersistenceError";
+  }
+  /**
+   * Error thrown when trying to access the file system.
+   */
+  static createFileSystemError(errorCode, errorMessage) {
+    return new _PersistenceError(errorCode, errorMessage);
+  }
+  /**
+   * Error thrown when trying to encrypt or decrypt data using DPAPI on Windows.
+   */
+  static createFilePersistenceWithDPAPIError(errorMessage) {
+    return new _PersistenceError("DPAPIEncryptedFileError", errorMessage);
+  }
+  /**
+   * Error thrown when using the cross platform lock.
+   */
+  static createCrossPlatformLockError(errorMessage) {
+    return new _PersistenceError("CrossPlatformLockError", errorMessage);
+  }
+  /**
+   * Error thrown when trying to write, load, or delete data from NapiRsKeyRingPersistence.
+   */
+  static createNapiRsKeyRingPersistenceError(errorMessage) {
+    return new _PersistenceError("NapiRsKeyRingError", errorMessage);
+  }
+  /**
+   * Throw cache persistence error
+   *
+   * @param errorMessage string
+   * @returns PersistenceError
+   */
+  static createCachePersistenceError(errorMessage) {
+    return new _PersistenceError("CachePersistenceError", errorMessage);
+  }
+};
+__name(_PersistenceError, "PersistenceError");
+var PersistenceError = _PersistenceError;
+
+// src/authentication/forks/msal-node-extensions/utils/Constants.ts
+var Constants3 = {
+  /**
+   * An existing file was the target of an operation that required that the target not exist
+   */
+  EEXIST_ERROR: "EEXIST",
+  /**
+   * No such file or directory: Commonly raised by fs operations to indicate that a component
+   * of the specified pathname does not exist. No entity (file or directory) could be found
+   * by the given path
+   */
+  ENOENT_ERROR: "ENOENT",
+  /**
+   * Operation not permitted. An attempt was made to perform an operation that requires
+   * elevated privileges.
+   */
+  EPERM_ERROR: "EPERM",
+  /**
+   * Default service name for using MSAL Keytar
+   */
+  DEFAULT_SERVICE_NAME: "msal-node-extensions",
+  /**
+   * Test data used to verify underlying persistence mechanism
+   */
+  PERSISTENCE_TEST_DATA: "Dummy data to verify underlying persistence mechanism",
+  // Name of the default cache file
+  DEFAULT_CACHE_FILE_NAME: "cache.json"
+};
+var ErrorCodes = {
+  INTERATION_REQUIRED_ERROR_CODE: "interaction_required",
+  SERVER_UNAVAILABLE: "server_unavailable",
+  UNKNOWN: "unknown_error"
+};
+
+// src/authentication/forks/msal-node-extensions/persistence/BasePersistence.ts
+var _BasePersistence = class _BasePersistence {
+  async verifyPersistence() {
+    const persistenceValidator = await this.createForPersistenceValidation();
+    try {
+      await persistenceValidator.save(Constants3.PERSISTENCE_TEST_DATA);
+      const retrievedDummyData = await persistenceValidator.load();
+      if (!retrievedDummyData) {
+        throw PersistenceError.createCachePersistenceError(
+          "Persistence check failed. Data was written but it could not be read. Possible cause: on Linux, LibSecret is installed but D-Bus isn't running                     because it cannot be started over SSH."
+        );
       }
-      n.default = e;
-      return Object.freeze(n);
+      if (retrievedDummyData !== Constants3.PERSISTENCE_TEST_DATA) {
+        throw PersistenceError.createCachePersistenceError(
+          `Persistence check failed. Data written ${Constants3.PERSISTENCE_TEST_DATA} is different                     from data read ${retrievedDummyData}`
+        );
+      }
+      await persistenceValidator.delete();
+      return true;
+    } catch (e) {
+      throw PersistenceError.createCachePersistenceError(`Verifing persistence failed with the error: ${e}`);
     }
-    __name(_interopNamespaceDefault, "_interopNamespaceDefault");
-    var path__namespace = /* @__PURE__ */ _interopNamespaceDefault(path4);
-    var _a;
-    var _b;
-    var _c;
-    var localApplicationDataFolder = (_c = (_b = (_a = process.env.APPDATA) === null || _a === void 0 ? void 0 : _a.replace) === null || _b === void 0 ? void 0 : _b.call(_a, /(.Roaming)*$/, "\\Local")) !== null && _c !== void 0 ? _c : process.env.HOME;
-    var defaultMsalValues = {
-      tokenCache: {
-        name: "msal.cache",
-        // Expected values:
-        // - Darwin: '/Users/user/.IdentityService'
-        // - Windows 8+: 'C:\Users\user\AppData\Local\.IdentityService'
-        // - Linux: '/home/user/.IdentityService'
-        directory: path__namespace.join(localApplicationDataFolder, ".IdentityService")
-      },
-      keyRing: {
-        label: "MSALCache",
-        schema: "msal.cache",
-        collection: "default",
-        attributes: {
-          MsalClientID: "Microsoft.Developer.IdentityService",
-          "Microsoft.Developer.IdentityService": "1.0.0.0"
-        },
-        service: "Microsoft.Developer.IdentityService",
-        account: "MSALCache"
-      },
-      keyChain: {
-        service: "Microsoft.Developer.IdentityService",
-        account: "MSALCache"
+  }
+};
+__name(_BasePersistence, "BasePersistence");
+var BasePersistence = _BasePersistence;
+
+// src/authentication/forks/msal-node-extensions/persistence/FilePersistence.ts
+import { promises as fs } from "fs";
+import { dirname } from "path";
+init_dist();
+var _FilePersistence = class _FilePersistence extends BasePersistence {
+  constructor(fileLocation, loggerOptions) {
+    super();
+    this.logger = new Logger(loggerOptions || _FilePersistence.createDefaultLoggerOptions());
+    this.filePath = fileLocation;
+  }
+  static async create(fileLocation, loggerOptions) {
+    const filePersistence = new _FilePersistence(fileLocation, loggerOptions);
+    await filePersistence.createCacheFile();
+    return filePersistence;
+  }
+  async save(contents) {
+    try {
+      await fs.writeFile(this.getFilePath(), contents, "utf-8");
+    } catch (err) {
+      if (isNodeError(err)) {
+        throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
+      } else {
+        throw err;
+      }
+    }
+  }
+  async saveBuffer(contents) {
+    try {
+      await fs.writeFile(this.getFilePath(), contents);
+    } catch (err) {
+      if (isNodeError(err)) {
+        throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
+      } else {
+        throw err;
+      }
+    }
+  }
+  async load() {
+    try {
+      return await fs.readFile(this.getFilePath(), "utf-8");
+    } catch (err) {
+      if (isNodeError(err)) {
+        throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
+      } else {
+        throw err;
+      }
+    }
+  }
+  async loadBuffer() {
+    try {
+      return await fs.readFile(this.getFilePath());
+    } catch (err) {
+      if (isNodeError(err)) {
+        throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
+      } else {
+        throw err;
       }
+    }
+  }
+  async delete() {
+    try {
+      await fs.unlink(this.getFilePath());
+      return true;
+    } catch (err) {
+      if (isNodeError(err)) {
+        if (err.code === Constants3.ENOENT_ERROR) {
+          this.logger.warning("Cache file does not exist, so it could not be deleted");
+          return false;
+        }
+        throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
+      } else {
+        throw err;
+      }
+    }
+  }
+  getFilePath() {
+    return this.filePath;
+  }
+  async reloadNecessary(lastSync) {
+    return lastSync < await this.timeLastModified();
+  }
+  getLogger() {
+    return this.logger;
+  }
+  createForPersistenceValidation() {
+    const testCacheFileLocation = `${dirname(this.filePath)}/test.cache`;
+    return _FilePersistence.create(testCacheFileLocation);
+  }
+  static createDefaultLoggerOptions() {
+    return {
+      loggerCallback: /* @__PURE__ */ __name(() => {
+      }, "loggerCallback"),
+      piiLoggingEnabled: false,
+      logLevel: LogLevel.Info
     };
-    function getPersistencePath(name3) {
-      return path__namespace.join(defaultMsalValues.tokenCache.directory, name3);
+  }
+  async timeLastModified() {
+    try {
+      const stats = await fs.stat(this.filePath);
+      return stats.mtime.getTime();
+    } catch (err) {
+      if (isNodeError(err)) {
+        if (err.code === Constants3.ENOENT_ERROR) {
+          this.logger.verbose("Cache file does not exist");
+          return 0;
+        }
+        throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
+      } else {
+        throw err;
+      }
     }
-    __name(getPersistencePath, "getPersistencePath");
-    var msalPersistencePlatforms = {
-      win32: ({ name: name3 = defaultMsalValues.tokenCache.name } = {}) => msalNodeExtensions.FilePersistenceWithDataProtection.create(getPersistencePath(name3), msalNodeExtensions.DataProtectionScope.CurrentUser),
-      darwin: (options = {}) => tslib.__awaiter(void 0, void 0, void 0, function* () {
-        const { name: name3, unsafeAllowUnencryptedStorage } = options;
-        const { service, account } = defaultMsalValues.keyChain;
-        const persistencePath = getPersistencePath(name3 || defaultMsalValues.tokenCache.name);
-        try {
-          const persistence = yield msalNodeExtensions.KeychainPersistence.create(persistencePath, service, account);
-          yield persistence.load();
-          return persistence;
-        } catch (e) {
-          if (!unsafeAllowUnencryptedStorage) {
-            throw new Error("Unable to read from the macOS Keychain.");
-          }
-          return msalNodeExtensions.FilePersistence.create(persistencePath);
+  }
+  async createCacheFile() {
+    await this.createFileDirectory();
+    const fileHandle = await fs.open(this.filePath, "a");
+    await fileHandle.close();
+    this.logger.info(`File created at ${this.filePath}`);
+  }
+  async createFileDirectory() {
+    try {
+      await fs.mkdir(dirname(this.filePath), { recursive: true });
+    } catch (err) {
+      if (isNodeError(err)) {
+        if (err.code === Constants3.EEXIST_ERROR) {
+          this.logger.info(`Directory ${dirname(this.filePath)}  already exists`);
+        } else {
+          throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
         }
-      }),
-      linux: (options = {}) => tslib.__awaiter(void 0, void 0, void 0, function* () {
-        const { name: name3, unsafeAllowUnencryptedStorage } = options;
-        const { service, account } = defaultMsalValues.keyRing;
-        const persistencePath = getPersistencePath(name3 || defaultMsalValues.tokenCache.name);
-        try {
-          const persistence = yield msalNodeExtensions.LibSecretPersistence.create(persistencePath, service, account);
-          yield persistence.load();
-          return persistence;
-        } catch (e) {
-          if (!unsafeAllowUnencryptedStorage) {
-            throw new Error("Unable to read from the system keyring (libsecret).");
+      } else {
+        throw err;
+      }
+    }
+  }
+};
+__name(_FilePersistence, "FilePersistence");
+var FilePersistence = _FilePersistence;
+
+// src/authentication/forks/msal-node-extensions/persistence/NapiRsKeyRingPersistence.ts
+var _NapiRsKeyRingPersistance = class _NapiRsKeyRingPersistance extends BasePersistence {
+  constructor(filePersistence, service, account) {
+    super();
+    this.service = service;
+    this.account = account;
+    this.entry = new Entry(service, account);
+    this.filePersistence = filePersistence;
+  }
+  static async create(fileLocation, serviceName, accountName, loggerOptions) {
+    const filePersistence = await FilePersistence.create(fileLocation, loggerOptions);
+    return new _NapiRsKeyRingPersistance(filePersistence, serviceName, accountName);
+  }
+  async save(contents) {
+    try {
+      this.entry.setPassword(contents);
+    } catch (e) {
+      if (isNodeError(e)) {
+        throw PersistenceError.createNapiRsKeyRingPersistenceError(e.message);
+      }
+      throw e;
+    }
+    await this.filePersistence.save(contents);
+  }
+  load() {
+    try {
+      return Promise.resolve(this.entry.getPassword());
+    } catch (e) {
+      if (isNodeError(e)) {
+        throw PersistenceError.createNapiRsKeyRingPersistenceError(e.message);
+      }
+      throw e;
+    }
+  }
+  async delete() {
+    try {
+      await this.filePersistence.delete();
+      return this.entry.deletePassword();
+    } catch (e) {
+      if (isNodeError(e)) {
+        throw PersistenceError.createNapiRsKeyRingPersistenceError(e.message);
+      }
+      throw e;
+    }
+  }
+  reloadNecessary(lastSync) {
+    return this.filePersistence.reloadNecessary(lastSync);
+  }
+  getFilePath() {
+    return this.filePersistence.getFilePath();
+  }
+  getLogger() {
+    return this.filePersistence.getLogger();
+  }
+  createForPersistenceValidation() {
+    const testCacheFileLocation = `${dirname2(this.filePersistence.getFilePath())}/test.cache`;
+    return _NapiRsKeyRingPersistance.create(
+      testCacheFileLocation,
+      "persistenceValidationServiceName",
+      "persistencValidationAccountName"
+    );
+  }
+};
+__name(_NapiRsKeyRingPersistance, "NapiRsKeyRingPersistance");
+var NapiRsKeyRingPersistance = _NapiRsKeyRingPersistance;
+
+// src/authentication/forks/msal-node-extensions/persistence/FilePersistenceWithDataProtection.ts
+import { protectData, unprotectData } from "node-dpapi-prebuilt";
+import { dirname as dirname3 } from "path";
+var _FilePersistenceWithDataProtection = class _FilePersistenceWithDataProtection extends BasePersistence {
+  constructor(filePersistence, scope, optionalEntropy) {
+    super();
+    this.scope = scope;
+    this.optionalEntropy = optionalEntropy ? Buffer.from(optionalEntropy, "utf-8") : null;
+    this.filePersistence = filePersistence;
+  }
+  static async create(fileLocation, scope, optionalEntropy, loggerOptions) {
+    const filePersistence = await FilePersistence.create(fileLocation, loggerOptions);
+    const persistence = new _FilePersistenceWithDataProtection(filePersistence, scope, optionalEntropy);
+    return persistence;
+  }
+  async save(contents) {
+    try {
+      const encryptedContents = protectData(Buffer.from(contents, "utf-8"), this.optionalEntropy, this.scope);
+      await this.filePersistence.saveBuffer(encryptedContents);
+    } catch (err) {
+      if (isNodeError(err)) {
+        throw PersistenceError.createFilePersistenceWithDPAPIError(err.message);
+      } else {
+        throw err;
+      }
+    }
+  }
+  async load() {
+    try {
+      const encryptedContents = await this.filePersistence.loadBuffer();
+      if (typeof encryptedContents === "undefined" || !encryptedContents || 0 === encryptedContents.length) {
+        this.filePersistence.getLogger().info("Encrypted contents loaded from file were null or empty");
+        return null;
+      }
+      return unprotectData(encryptedContents, this.optionalEntropy, this.scope).toString();
+    } catch (err) {
+      if (isNodeError(err)) {
+        throw PersistenceError.createFilePersistenceWithDPAPIError(err.message);
+      } else {
+        throw err;
+      }
+    }
+  }
+  async delete() {
+    return this.filePersistence.delete();
+  }
+  async reloadNecessary(lastSync) {
+    return this.filePersistence.reloadNecessary(lastSync);
+  }
+  getFilePath() {
+    return this.filePersistence.getFilePath();
+  }
+  getLogger() {
+    return this.filePersistence.getLogger();
+  }
+  createForPersistenceValidation() {
+    const testCacheFileLocation = `${dirname3(this.filePersistence.getFilePath())}/test.cache`;
+    return _FilePersistenceWithDataProtection.create(testCacheFileLocation, "CurrentUser");
+  }
+};
+__name(_FilePersistenceWithDataProtection, "FilePersistenceWithDataProtection");
+var FilePersistenceWithDataProtection = _FilePersistenceWithDataProtection;
+
+// src/authentication/forks/identity-cache-persistence/platforms.ts
+var _a, _b;
+var localApplicationDataFolder = ((_b = (_a = process.env.APPDATA) == null ? void 0 : _a.replace) == null ? void 0 : _b.call(_a, /(.Roaming)*$/, "\\Local")) ?? process.env.HOME;
+var defaultMsalValues = {
+  tokenCache: {
+    name: "msal.cache",
+    // Expected values:
+    // - Darwin: '/Users/user/.IdentityService'
+    // - Windows 8+: 'C:\Users\user\AppData\Local\.IdentityService'
+    // - Linux: '/home/user/.IdentityService'
+    directory: path2.join(localApplicationDataFolder, ".IdentityService")
+  },
+  keyRing: {
+    label: "MSALCache",
+    schema: "msal.cache",
+    collection: "default",
+    attributes: {
+      MsalClientID: "Microsoft.Developer.IdentityService",
+      "Microsoft.Developer.IdentityService": "1.0.0.0"
+    },
+    service: "Microsoft.Developer.IdentityService",
+    account: "MSALCache"
+  },
+  keyChain: {
+    service: "Microsoft.Developer.IdentityService",
+    account: "MSALCache"
+  }
+};
+function getPersistencePath(name3) {
+  return path2.join(defaultMsalValues.tokenCache.directory, name3);
+}
+__name(getPersistencePath, "getPersistencePath");
+async function persistanceFactory(options = {}) {
+  const { name: name3, unsafeAllowUnencryptedStorage } = options;
+  const { service, account } = defaultMsalValues.keyChain;
+  const persistencePath = getPersistencePath(name3 || defaultMsalValues.tokenCache.name);
+  try {
+    const persistence = await NapiRsKeyRingPersistance.create(persistencePath, `${service}.${name3}`, account);
+    await persistence.load();
+    return persistence;
+  } catch (e) {
+    if (!unsafeAllowUnencryptedStorage) {
+      throw new Error("Unable to read from the NAPI keyring.");
+    }
+    return FilePersistence.create(persistencePath);
+  }
+}
+__name(persistanceFactory, "persistanceFactory");
+var msalPersistencePlatforms = {
+  win32: /* @__PURE__ */ __name(({ name: name3 = defaultMsalValues.tokenCache.name } = {}) => FilePersistenceWithDataProtection.create(getPersistencePath(name3), "CurrentUser"), "win32"),
+  darwin: persistanceFactory,
+  linux: persistanceFactory
+};
+
+// src/authentication/forks/msal-node-extensions/lock/CrossPlatformLock.ts
+import { promises as fs2 } from "fs";
+import { pid } from "process";
+var _CrossPlatformLock = class _CrossPlatformLock {
+  constructor(lockFilePath, logger, lockOptions) {
+    this.lockFilePath = lockFilePath;
+    this.retryNumber = lockOptions ? lockOptions.retryNumber : 500;
+    this.retryDelay = lockOptions ? lockOptions.retryDelay : 100;
+    this.logger = logger;
+  }
+  /**
+   * Locks cache from read or writes by creating file with same path and name as
+   * cache file but with .lockfile extension. If another process has already created
+   * the lockfile, will back off and retry based on configuration settings set by CrossPlatformLockOptions
+   */
+  async lock() {
+    for (let tryCount = 0; tryCount < this.retryNumber; tryCount++) {
+      try {
+        this.logger.info(`Pid ${pid} trying to acquire lock`);
+        this.lockFileHandle = await fs2.open(this.lockFilePath, "wx+");
+        this.logger.info(`Pid ${pid} acquired lock`);
+        await this.lockFileHandle.write(pid.toString());
+        return;
+      } catch (err) {
+        if (isNodeError(err)) {
+          if (err.code === Constants3.EEXIST_ERROR || err.code === Constants3.EPERM_ERROR) {
+            this.logger.info(err.message);
+            await this.sleep(this.retryDelay);
+          } else {
+            this.logger.error(`${pid} was not able to acquire lock. Ran into error: ${err.message}`);
+            throw PersistenceError.createCrossPlatformLockError(err.message);
           }
-          return msalNodeExtensions.FilePersistence.create(persistencePath);
+        } else {
+          throw err;
         }
-      })
-    };
-    function createPersistence(options) {
-      var _a2;
-      return tslib.__awaiter(this, void 0, void 0, function* () {
-        const persistence = yield (_a2 = msalPersistencePlatforms[process.platform]) === null || _a2 === void 0 ? void 0 : _a2.call(msalPersistencePlatforms, options);
-        if (persistence === void 0) {
-          throw new Error("no persistence providers are available on this platform");
+      }
+    }
+    this.logger.error(`${pid} was not able to acquire lock. Exceeded amount of retries set in the options`);
+    throw PersistenceError.createCrossPlatformLockError(
+      "Not able to acquire lock. Exceeded amount of retries set in options"
+    );
+  }
+  /**
+   * unlocks cache file by deleting .lockfile.
+   */
+  async unlock() {
+    try {
+      if (this.lockFileHandle) {
+        await fs2.unlink(this.lockFilePath);
+        await this.lockFileHandle.close();
+        this.logger.info("lockfile deleted");
+      } else {
+        this.logger.warning("lockfile handle does not exist, so lockfile could not be deleted");
+      }
+    } catch (err) {
+      if (isNodeError(err)) {
+        if (err.code === Constants3.ENOENT_ERROR) {
+          this.logger.info("Tried to unlock but lockfile does not exist");
+        } else {
+          this.logger.error(`${pid} was not able to release lock. Ran into error: ${err.message}`);
+          throw PersistenceError.createCrossPlatformLockError(err.message);
         }
-        return persistence;
-      });
+      } else {
+        throw err;
+      }
     }
-    __name(createPersistence, "createPersistence");
-    function createPersistenceCachePlugin(options) {
-      return tslib.__awaiter(this, void 0, void 0, function* () {
-        const persistence = yield createPersistence(options !== null && options !== void 0 ? options : {});
-        return new msalNodeExtensions.PersistenceCachePlugin(persistence, {
-          retryNumber: 100,
-          retryDelay: 50
-        });
-      });
+  }
+  sleep(ms) {
+    return new Promise((resolve) => {
+      setTimeout(resolve, ms);
+    });
+  }
+};
+__name(_CrossPlatformLock, "CrossPlatformLock");
+var CrossPlatformLock = _CrossPlatformLock;
+
+// src/authentication/forks/msal-node-extensions/persistence/PersistenceCachePlugin.ts
+import { pid as pid2 } from "process";
+var _PersistenceCachePlugin = class _PersistenceCachePlugin {
+  constructor(persistence, lockOptions) {
+    this.persistence = persistence;
+    this.logger = persistence.getLogger();
+    this.lockFilePath = `${this.persistence.getFilePath()}.lockfile`;
+    this.crossPlatformLock = new CrossPlatformLock(this.lockFilePath, this.logger, lockOptions);
+    this.lastSync = 0;
+    this.currentCache = null;
+  }
+  /**
+   * Reads from storage and saves an in-memory copy. If persistence has not been updated
+   * since last time data was read, in memory copy is used.
+   *
+   * If cacheContext.cacheHasChanged === true, then file lock is created and not deleted until
+   * afterCacheAccess() is called, to prevent the cache file from changing in between
+   * beforeCacheAccess() and afterCacheAccess().
+   */
+  async beforeCacheAccess(cacheContext) {
+    this.logger.info("Executing before cache access");
+    const reloadNecessary = await this.persistence.reloadNecessary(this.lastSync);
+    if (!reloadNecessary && this.currentCache !== null) {
+      if (cacheContext.cacheHasChanged) {
+        this.logger.verbose("Cache context has changed");
+        await this.crossPlatformLock.lock();
+      }
+      return;
+    }
+    try {
+      this.logger.info(`Reload necessary. Last sync time: ${this.lastSync}`);
+      await this.crossPlatformLock.lock();
+      this.currentCache = await this.persistence.load();
+      this.lastSync = (/* @__PURE__ */ new Date()).getTime();
+      if (this.currentCache) {
+        cacheContext.tokenCache.deserialize(this.currentCache);
+      } else {
+        this.logger.info("Cache empty.");
+      }
+      this.logger.info(`Last sync time updated to: ${this.lastSync}`);
+    } finally {
+      if (!cacheContext.cacheHasChanged) {
+        await this.crossPlatformLock.unlock();
+        this.logger.info(`Pid ${pid2} released lock`);
+      } else {
+        this.logger.info(`Pid ${pid2} beforeCacheAccess did not release lock`);
+      }
     }
-    __name(createPersistenceCachePlugin, "createPersistenceCachePlugin");
-    var cachePersistencePlugin2 = /* @__PURE__ */ __name((context) => {
-      const { cachePluginControl } = context;
-      cachePluginControl.setPersistence(createPersistenceCachePlugin);
-    }, "cachePersistencePlugin");
-    exports.cachePersistencePlugin = cachePersistencePlugin2;
   }
-});
+  /**
+   * Writes to storage if MSAL in memory copy of cache has been changed.
+   */
+  async afterCacheAccess(cacheContext) {
+    this.logger.info("Executing after cache access");
+    try {
+      if (cacheContext.cacheHasChanged) {
+        this.logger.info("Msal in-memory cache has changed. Writing changes to persistence");
+        this.currentCache = cacheContext.tokenCache.serialize();
+        await this.persistence.save(this.currentCache);
+      } else {
+        this.logger.info("Msal in-memory cache has not changed. Did not write to persistence");
+      }
+    } finally {
+      await this.crossPlatformLock.unlock();
+      this.logger.info(`Pid ${pid2} afterCacheAccess released lock`);
+    }
+  }
+};
+__name(_PersistenceCachePlugin, "PersistenceCachePlugin");
+var PersistenceCachePlugin = _PersistenceCachePlugin;
+
+// src/authentication/forks/identity-cache-persistence/provider.ts
+async function createPersistence(options) {
+  var _a2, _b2;
+  const persistence = await ((_b2 = (_a2 = msalPersistencePlatforms)[process.platform]) == null ? void 0 : _b2.call(_a2, options));
+  if (persistence === void 0) {
+    throw new Error("no persistence providers are available on this platform");
+  }
+  return persistence;
+}
+__name(createPersistence, "createPersistence");
+async function createPersistenceCachePlugin(options) {
+  const persistence = await createPersistence(options ?? {});
+  return new PersistenceCachePlugin(persistence, {
+    retryNumber: 100,
+    retryDelay: 50
+  });
+}
+__name(createPersistenceCachePlugin, "createPersistenceCachePlugin");
 
-// src/authentication/getCredential.ts
-var import_identity3 = __toESM(require_dist2(), 1);
-var import_identity_cache_persistence = __toESM(require_dist3(), 1);
+// src/authentication/forks/identity-cache-persistence/cachePersistencePlugin.ts
+var cachePersistencePlugin = /* @__PURE__ */ __name((context) => {
+  const { cachePluginControl } = context;
+  cachePluginControl.setPersistence(createPersistenceCachePlugin);
+}, "cachePersistencePlugin");
 
 // src/authentication/getAuthenticationRecord.ts
 var import_identity = __toESM(require_dist2(), 1);
 import { existsSync, readFileSync as readFileSync2 } from "fs";
 
 // src/authentication/getAuthenticationRecordPath.ts
-import path2 from "path";
+import path3 from "path";
 function getAuthenticationRecordPath(cachePath) {
-  return path2.join(cachePath, "tokencache.bin");
+  return path3.join(cachePath, "tokencache.bin");
 }
 __name(getAuthenticationRecordPath, "getAuthenticationRecordPath");
 
@@ -19703,7 +20184,7 @@ __name(saveAuthenticationRecord, "saveAuthenticationRecord");
 // src/authentication/tokenCachePersistenceOptions.ts
 var tokenCachePersistenceOptions = {
   enabled: true,
-  name: "cloudpack"
+  name: "Cloudpack"
 };
 
 // src/utils/isProcessRunning.ts
@@ -19711,21 +20192,21 @@ function isErrorWithCode(error) {
   return error instanceof Error && "code" in error;
 }
 __name(isErrorWithCode, "isErrorWithCode");
-function isProcessRunning(pid) {
+function isProcessRunning(pid3) {
   try {
-    process.kill(pid, 0);
+    process.kill(pid3, 0);
     return true;
   } catch (error) {
     if (isErrorWithCode(error) && error.code === "ERR_INVALID_ARG_TYPE") {
-      console.log(`Invalid PID: ${pid}`);
+      console.log(`Invalid PID: ${pid3}`);
       return false;
     } else if (isErrorWithCode(error) && error.code === "EPERM") {
       console.log(
-        `Permission issue indicates that process ${pid} exists but user doesn't have permission to signal it.`
+        `Permission issue indicates that process ${pid3} exists but user doesn't have permission to signal it.`
       );
       return true;
     } else if (isErrorWithCode(error) && error.code === "ESRCH") {
-      console.log(`Process ${pid} does not exist.`);
+      console.log(`Process ${pid3} does not exist.`);
       return false;
     } else {
       throw error;
@@ -19738,11 +20219,11 @@ __name(isProcessRunning, "isProcessRunning");
 import { unlinkSync } from "fs";
 
 // src/authentication/lock-file/getAuthenticationLockFilePath.ts
-import path3 from "path";
+import path4 from "path";
 function getAuthenticationLockFilePath() {
-  var _a, _b;
-  const localApplicationDataFolder = ((_b = (_a = process.env.APPDATA) == null ? void 0 : _a.replace) == null ? void 0 : _b.call(_a, /(.Roaming)*$/, "\\Local")) ?? (process.env.HOME || "");
-  return path3.join(localApplicationDataFolder, ".IdentityService", tokenCachePersistenceOptions.name + ".lockfile");
+  var _a2, _b2;
+  const localApplicationDataFolder2 = ((_b2 = (_a2 = process.env.APPDATA) == null ? void 0 : _a2.replace) == null ? void 0 : _b2.call(_a2, /(.Roaming)*$/, "\\Local")) ?? (process.env.HOME || "");
+  return path4.join(localApplicationDataFolder2, ".IdentityService", tokenCachePersistenceOptions.name + ".lockfile");
 }
 __name(getAuthenticationLockFilePath, "getAuthenticationLockFilePath");
 
@@ -19795,9 +20276,9 @@ function tryCleaningLockFile() {
   if (!doesLockFileExist()) {
     return true;
   }
-  const pid = readAuthenticationLockFile();
-  console.log(`Process ID in the lock file: ${pid}`);
-  if (!isProcessRunning(pid) && deleteAuthenticationLockFile()) {
+  const pid3 = readAuthenticationLockFile();
+  console.log(`Process ID in the lock file: ${pid3}`);
+  if (!isProcessRunning(pid3) && deleteAuthenticationLockFile()) {
     console.log("Auth lock file is deleted successfully");
     return true;
   }
@@ -19828,7 +20309,7 @@ function getCredentialInternal(loginMethod, authenticationRecord, tenantId) {
 }
 __name(getCredentialInternal, "getCredentialInternal");
 async function getCredential(options, context) {
-  var _a;
+  var _a2;
   const { loginMethod, cachePath, tenantId } = options;
   const { reporter, azureLogger, telemetryClient } = context;
   if (loginMethod == "azure-cli") {
@@ -19837,22 +20318,22 @@ async function getCredential(options, context) {
   const tasks = {};
   azureLogger.once("MsalBrowserOpen", (url) => {
     tasks.interactiveAuthentication = reporter.addTask(
-      `Prepare to sign in \u2013 we are launching a browser page for you. Simply follow the instructions on the login page to seamlessly complete the authentication process. You can manually access the login page by navigating to the folliwing url if you inadvertently close the authentication page or prefer to use a different web browser or a profile. ${url}`
+      `Prepare to sign in - we are launching a browser page for you. Simply follow the instructions on the login page to seamlessly complete the authentication process. You can manually access the login page by navigating to the folliwing url if you inadvertently close the authentication page or prefer to use a different web browser or a profile. ${url}`
     );
   });
-  (0, import_identity3.useIdentityPlugin)(import_identity_cache_persistence.cachePersistencePlugin);
-  const credential = getCredentialInternal(loginMethod, getAuthenticationRecord(cachePath), tenantId);
   tryCleaningLockFile();
+  (0, import_identity3.useIdentityPlugin)(cachePersistencePlugin);
+  const credential = getCredentialInternal(loginMethod, getAuthenticationRecord(cachePath), tenantId);
   const storageScope = "https://storage.azure.com/.default";
   const authenticationRecord = await credential.authenticate(storageScope);
   const token = await credential.getToken(storageScope);
   const storageCustomCredential = {
-    getToken: () => Promise.resolve(token)
+    getToken: /* @__PURE__ */ __name(() => Promise.resolve(token), "getToken")
   };
   if (authenticationRecord) {
     saveAuthenticationRecord(cachePath, authenticationRecord);
   }
-  (_a = tasks.interactiveAuthentication) == null ? void 0 : _a.complete({
+  (_a2 = tasks.interactiveAuthentication) == null ? void 0 : _a2.complete({
     message: "You have successfully signed in."
   });
   telemetryClient.rootSpan.addEvent("SYNC_AUTH", {