@knowttl/mg-axi 0.1.1 → 0.1.3

package/dist/entra-contracts.js

@@ -1,4 +1,5 @@
 import { AxiError } from "axi-sdk-js";
+import { listTotals } from "./list-totals.js";
 // EXT-04 partner contracts subfamily: the read mapping behind `mg-axi entra
 // contract list/show/count`. Operation construction stays beside its command;
 // the shared session owns URLs, credentials, paging, retries and error
@@ -198,20 +199,22 @@ export async function listContracts(session, flags, profile, operation, help, pr
     if (!result.complete) {
         return {
             contracts,
-            count: { returned: contracts.length, complete: false, reason: result.reason },
+            ...listTotals(contracts.length, result.total, "contracts", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint(profileName), showHint, PARTNER_NOTE],
         };
     }
-    const count = { returned: contracts.length, complete: true };
     if (!contracts.length) {
         return {
             contracts,
-            count,
+            ...listTotals(contracts.length, result.total, "contracts", true),
+            complete: true,
             help: ["0 contracts matched; the absence of results is the answer, not an error", PARTNER_NOTE],
         };
     }
-    return { contracts, count, help: [...truncationHints, showHint, PARTNER_NOTE] };
+    return { contracts, ...listTotals(contracts.length, result.total, "contracts", true), complete: true, help: [...truncationHints, showHint, PARTNER_NOTE] };
 }
 export async function showContract(session, flags, profile, operation, help, profileName) {
     const { select, fields } = selectedFields(flags, KNOWN_CONTRACTS, KNOWN_CONTRACT_FIELDS, DEFAULT_CONTRACT_SHOW_SELECT, help);

package/dist/entra-custom-security-attributes.js

@@ -1,4 +1,5 @@
 import { AxiError } from "axi-sdk-js";
+import { listTotals } from "./list-totals.js";
 // EXT-01 custom-security-attributes subfamily: the read mapping behind
 // `mg-axi entra attribute-set list/show/count`,
 // `mg-axi entra custom-security-attribute-definition list/show/count` and
@@ -265,20 +266,22 @@ export async function listAttributeSets(session, flags, profile, operation, help
     if (!result.complete) {
         return {
             attributeSets: sets,
-            count: { returned: sets.length, complete: false, reason: result.reason },
+            ...listTotals(sets.length, result.total, "attribute sets", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint(profileName), showHint, filterNote],
         };
     }
-    const count = { returned: sets.length, complete: true };
     if (!sets.length) {
         return {
             attributeSets: sets,
-            count,
+            ...listTotals(sets.length, result.total, "attribute sets", true),
+            complete: true,
             help: [filterNote, "0 attribute sets matched; the absence of results is the answer, not an error"],
         };
     }
-    return { attributeSets: sets, count, help: [...truncationHints, showHint, filterNote] };
+    return { attributeSets: sets, ...listTotals(sets.length, result.total, "attribute sets", true), complete: true, help: [...truncationHints, showHint, filterNote] };
 }
 export async function showAttributeSet(session, flags, profile, operation, help, profileName) {
     const { select, fields } = selectedFields(flags, KNOWN_ATTRIBUTE_SETS, KNOWN_ATTRIBUTE_SET_FIELDS, DEFAULT_ATTRIBUTE_SET_SHOW_SELECT, help, "attribute-set");
@@ -331,20 +334,22 @@ export async function listCustomSecurityAttributeDefinitions(session, flags, pro
     if (!result.complete) {
         return {
             customSecurityAttributeDefinitions: definitions,
-            count: { returned: definitions.length, complete: false, reason: result.reason },
+            ...listTotals(definitions.length, result.total, "custom security attribute definitions", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint(profileName), showHint],
         };
     }
-    const count = { returned: definitions.length, complete: true };
     if (!definitions.length) {
         return {
             customSecurityAttributeDefinitions: definitions,
-            count,
+            ...listTotals(definitions.length, result.total, "custom security attribute definitions", true),
+            complete: true,
             help: ["0 custom security attribute definitions matched; the absence of results is the answer, not an error"],
         };
     }
-    return { customSecurityAttributeDefinitions: definitions, count, help: [...truncationHints, showHint] };
+    return { customSecurityAttributeDefinitions: definitions, ...listTotals(definitions.length, result.total, "custom security attribute definitions", true), complete: true, help: [...truncationHints, showHint] };
 }
 export async function showCustomSecurityAttributeDefinition(session, flags, profile, operation, help, profileName) {
     const { select, fields } = selectedFields(flags, KNOWN_DEFINITIONS, KNOWN_CUSTOM_SECURITY_DEFINITION_FIELDS, DEFAULT_DEFINITION_SHOW_SELECT, help, "definition");
@@ -407,20 +412,22 @@ export async function listAllowedValues(session, flags, profile, operation, help
     if (!result.complete) {
         return {
             allowedValues: values,
-            count: { returned: values.length, complete: false, reason: result.reason },
+            ...listTotals(values.length, result.total, "allowed values", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint(profileName), showHint, filterNote],
         };
     }
-    const count = { returned: values.length, complete: true };
     if (!values.length) {
         return {
             allowedValues: values,
-            count,
+            ...listTotals(values.length, result.total, "allowed values", true),
+            complete: true,
             help: [filterNote, "0 allowed values matched; the definition may allow free-form values instead of predefined ones"],
         };
     }
-    return { allowedValues: values, count, help: [...truncationHints, showHint, filterNote] };
+    return { allowedValues: values, ...listTotals(values.length, result.total, "allowed values", true), complete: true, help: [...truncationHints, showHint, filterNote] };
 }
 export async function showAllowedValue(session, flags, profile, operation, help, profileName) {
     const { select, fields } = selectedFields(flags, KNOWN_ALLOWED_VALUES, KNOWN_ALLOWED_VALUE_FIELDS, DEFAULT_ALLOWED_VALUE_SHOW_SELECT, help, "allowed-value");

package/dist/entra-data-policy-operations.js

@@ -1,4 +1,5 @@
 import { AxiError } from "axi-sdk-js";
+import { listTotals } from "./list-totals.js";
 import { REDACTED } from "./graph-session.js";
 // EXT-03 data-policy-operations subfamily: the read mapping behind
 // `mg-axi entra data-policy-operation list/show/count`. Operation
@@ -224,20 +225,22 @@ export async function listDataPolicyOperations(session, flags, profile, operatio
     if (!result.complete) {
         return {
             dataPolicyOperations: operations,
-            count: { returned: operations.length, complete: false, reason: result.reason },
+            ...listTotals(operations.length, result.total, "data-policy operations", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint(profileName), showHint, WORKFORCE_NOTE],
         };
     }
-    const count = { returned: operations.length, complete: true };
     if (!operations.length) {
         return {
             dataPolicyOperations: operations,
-            count,
+            ...listTotals(operations.length, result.total, "data-policy operations", true),
+            complete: true,
             help: ["0 data-policy operations matched; the absence of results is the answer, not an error", WORKFORCE_NOTE],
         };
     }
-    return { dataPolicyOperations: operations, count, help: [...truncationHints, showHint, WORKFORCE_NOTE] };
+    return { dataPolicyOperations: operations, ...listTotals(operations.length, result.total, "data-policy operations", true), complete: true, help: [...truncationHints, showHint, WORKFORCE_NOTE] };
 }
 export async function showDataPolicyOperation(session, flags, profile, operation, help, profileName) {
     const { select, fields } = selectedFields(flags, DEFAULT_SHOW_SELECT, help);

package/dist/entra-delegated-admin.js

@@ -1,4 +1,5 @@
 import { AxiError } from "axi-sdk-js";
+import { listTotals } from "./list-totals.js";
 // EXT-04 delegated-admin subfamily: the read mapping behind
 // `mg-axi entra delegated-admin-customer list/show`,
 // `mg-axi entra delegated-admin-relationship list/show` and the navigation
@@ -35,8 +36,8 @@ import { AxiError } from "axi-sdk-js";
 // --filter passes through as plain $filter with no $count or ConsistencyLevel
 // contract. serviceManagementDetails documents no query parameters, so both
 // service-management-detail reads run queryless and project locally. The
-// $count scalars and the tenantRelationship container root stay scheduled
-// for later EXT-04 subfamilies, as do the multi-tenant-organization reads
+// six $count scalars ship in this module; the tenantRelationship container
+// root stays scheduled for a later EXT-04 subfamily, as do the multi-tenant-organization reads
 // (shipped separately) and the tenant-lookup functions (shipped as
 // tenant-information show under mg-ext-04e). Beta stays out. No delegated-admin mutation exists in this slice:
 // relationship creation, approval and termination are writes.
@@ -389,20 +390,22 @@ async function listResource(session, flags, profile, operation, help, profileNam
     if (!result.complete) {
         return {
             [collectionKey]: rows,
-            count: { returned: rows.length, complete: false, reason: result.reason },
+            ...listTotals(rows.length, result.total, `${resource.noun}s`, false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint(profileName), showHint, partnerNote(resource)],
         };
     }
-    const count = { returned: rows.length, complete: true };
     if (!rows.length) {
         return {
             [collectionKey]: rows,
-            count,
+            ...listTotals(rows.length, result.total, `${resource.noun}s`, true),
+            complete: true,
             help: [`0 ${resource.noun}s matched; the absence of results is the answer, not an error`, partnerNote(resource)],
         };
     }
-    return { [collectionKey]: rows, count, help: [...truncationHints, showHint, partnerNote(resource)] };
+    return { [collectionKey]: rows, ...listTotals(rows.length, result.total, `${resource.noun}s`, true), complete: true, help: [...truncationHints, showHint, partnerNote(resource)] };
 }
 async function showResource(session, flags, profile, operation, help, profileName, resource, rowKey, showCommand) {
     const queryless = resource.queryless === true;
@@ -466,3 +469,49 @@ export async function listDelegatedAdminServiceManagementDetails(session, flags,
 export async function showDelegatedAdminServiceManagementDetail(session, flags, profile, operation, help, profileName) {
     return showResource(session, flags, profile, operation, help, profileName, SERVICE_MANAGEMENT_DETAIL, "delegatedAdminServiceManagementDetail", "entra delegated-admin-customer show-service-management-detail");
 }
+// The $count routes return a text/plain integer scalar rather than a JSON
+// collection, so each leaf reads it through session.execute and accepts only
+// a non-negative integer. There is no --filter/--select/--limit contract on
+// the counts: the catalogue declares no such flags and strict input
+// validation refuses them before credentials. All six share the parent
+// list/show read scope DelegatedAdminRelationship.Read.All, so no new
+// consent is needed.
+function countParentId(flags, label, help) {
+    const id = String(flags.id);
+    if (!id.trim())
+        throw new AxiError(`--id needs the delegated-admin ${label} identifier`, "VALIDATION_ERROR", [help]);
+    return id;
+}
+async function countScalar(session, flags, profile, operation, help, profileName, params, rowKey, noun) {
+    void profileName;
+    const scopes = scopesFor(flags, DEFAULT_DELEGATED_ADMIN_SCOPES, profile, help);
+    const raw = await withGuidance(DELEGATED_ADMIN_DENIAL_HINTS, () => session.execute({ profile, operation, params, scopes }));
+    if (typeof raw !== "number" || !Number.isInteger(raw) || raw < 0) {
+        throw new AxiError(`Graph returned a malformed delegated-admin ${noun} count body`, "GRAPH_ERROR", [
+            "Delegated-admin counts carry one non-negative integer scalar; treat anything else as unknown, not empty",
+        ]);
+    }
+    return { [rowKey]: raw };
+}
+export async function countDelegatedAdminCustomers(session, flags, profile, operation, help, profileName) {
+    return countScalar(session, flags, profile, operation, help, profileName, {}, "delegatedAdminCustomerCount", "customer");
+}
+export async function countDelegatedAdminServiceManagementDetails(session, flags, profile, operation, help, profileName) {
+    const customer = countParentId(flags, "customer", help);
+    return countScalar(session, flags, profile, operation, help, profileName, { "delegatedAdminCustomer-id": customer }, "delegatedAdminServiceManagementDetailCount", "service-management detail");
+}
+export async function countDelegatedAdminRelationships(session, flags, profile, operation, help, profileName) {
+    return countScalar(session, flags, profile, operation, help, profileName, {}, "delegatedAdminRelationshipCount", "relationship");
+}
+export async function countDelegatedAdminAccessAssignments(session, flags, profile, operation, help, profileName) {
+    const relationship = countParentId(flags, "relationship", help);
+    return countScalar(session, flags, profile, operation, help, profileName, { "delegatedAdminRelationship-id": relationship }, "delegatedAdminAccessAssignmentCount", "access assignment");
+}
+export async function countDelegatedAdminOperations(session, flags, profile, operation, help, profileName) {
+    const relationship = countParentId(flags, "relationship", help);
+    return countScalar(session, flags, profile, operation, help, profileName, { "delegatedAdminRelationship-id": relationship }, "delegatedAdminRelationshipOperationCount", "relationship operation");
+}
+export async function countDelegatedAdminRequests(session, flags, profile, operation, help, profileName) {
+    const relationship = countParentId(flags, "relationship", help);
+    return countScalar(session, flags, profile, operation, help, profileName, { "delegatedAdminRelationship-id": relationship }, "delegatedAdminRelationshipRequestCount", "relationship request");
+}

package/dist/entra-deleted-items.js

@@ -1,4 +1,5 @@
 import { AxiError } from "axi-sdk-js";
+import { listTotals } from "./list-totals.js";
 // EXT-01 deleted-items subfamily: the read mapping behind
 // `mg-axi entra deleted-user|deleted-group|deleted-application|
 // deleted-service-principal|deleted-administrative-unit list/count` and
@@ -402,16 +403,17 @@ export async function listDeletedItems(session, flags, profile, operation, help,
     if (!result.complete) {
         return {
             deletedItems: rows,
-            count: { returned: rows.length, complete: false, reason: result.reason },
+            ...listTotals(rows.length, result.total, "deleted items", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint(profileName), showHint, ...groupNote, ...appNote],
         };
     }
-    const count = { returned: rows.length, complete: true };
     if (!rows.length) {
-        return { deletedItems: rows, count, help: [emptyNote, ...groupNote, ...appNote] };
+        return { deletedItems: rows, ...listTotals(rows.length, result.total, "deleted items", true), complete: true, help: [emptyNote, ...groupNote, ...appNote] };
     }
-    return { deletedItems: rows, count, help: [...truncationHints, showHint, ...groupNote, ...appNote] };
+    return { deletedItems: rows, ...listTotals(rows.length, result.total, "deleted items", true), complete: true, help: [...truncationHints, showHint, ...groupNote, ...appNote] };
 }
 export async function showDeletedItem(session, flags, profile, operation, help, profileName) {
     checkShowOperation(operation, help);

package/dist/entra-directory-objects.js

@@ -1,4 +1,5 @@
 import { AxiError } from "axi-sdk-js";
+import { listTotals } from "./list-totals.js";
 // EXT-01 directory-objects subfamily: the read mapping behind
 // `mg-axi entra directory-object list/show/count`. Operation construction
 // stays beside its command; the shared session owns URLs, credentials,
@@ -225,16 +226,17 @@ export async function listDirectoryObjects(session, flags, profile, operation, h
     if (!result.complete) {
         return {
             directoryObjects,
-            count: { returned: directoryObjects.length, complete: false, reason: result.reason },
+            ...listTotals(directoryObjects.length, result.total, "directory objects", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint(profileName), showHint],
         };
     }
-    const count = { returned: directoryObjects.length, complete: true };
     if (!directoryObjects.length) {
-        return { directoryObjects, count, help: [EMPTY_NOTE] };
+        return { directoryObjects, ...listTotals(directoryObjects.length, result.total, "directory objects", true), complete: true, help: [EMPTY_NOTE] };
     }
-    return { directoryObjects, count, help: [...truncationHints, showHint] };
+    return { directoryObjects, ...listTotals(directoryObjects.length, result.total, "directory objects", true), complete: true, help: [...truncationHints, showHint] };
 }
 export async function showDirectoryObject(session, flags, profile, operation, help, profileName) {
     checkReadOperation(operation, help);

package/dist/entra-directory.js

@@ -1,4 +1,5 @@
 import { AxiError } from "axi-sdk-js";
+import { listTotals } from "./list-totals.js";
 // READ-10: the directory-device and administrative-unit read mapping behind
 // `mg-axi entra device list/show`, `mg-axi entra administrative-unit
 // list/show` and `mg-axi entra administrative-unit member list`. Operation
@@ -260,16 +261,18 @@ export async function listDevices(session, flags, profile, operation, help, prof
     if (!result.complete) {
         return {
             devices,
-            count: { returned: devices.length, complete: false, reason: result.reason },
+            ...listTotals(devices.length, result.total, "devices", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint(profileName), showHint, scopeHint],
         };
     }
-    const count = { returned: devices.length, complete: true };
     if (!devices.length) {
         return {
             devices,
-            count,
+            ...listTotals(devices.length, result.total, "devices", true),
+            complete: true,
             help: [
                 `mg-axi entra device list --filter <odata-filter> ${profileHint(profileName)}`,
                 "0 devices matched; the absence of results is the answer, not an error",
@@ -277,7 +280,7 @@ export async function listDevices(session, flags, profile, operation, help, prof
             ],
         };
     }
-    return { devices, count, help: [...truncationHints, showHint, scopeHint] };
+    return { devices, ...listTotals(devices.length, result.total, "devices", true), complete: true, help: [...truncationHints, showHint, scopeHint] };
 }
 export async function showDevice(session, flags, profile, operation, help, profileName) {
     const { select, fields } = selectedFields(flags, KNOWN_DEVICES, KNOWN_DEVICE_FIELDS, DEFAULT_DEVICE_SHOW_SELECT, help);
@@ -318,23 +321,25 @@ export async function listAdministrativeUnits(session, flags, profile, operation
     if (!result.complete) {
         return {
             administrativeUnits: units,
-            count: { returned: units.length, complete: false, reason: result.reason },
+            ...listTotals(units.length, result.total, "administrative units", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint(profileName), showHint],
         };
     }
-    const count = { returned: units.length, complete: true };
     if (!units.length) {
         return {
             administrativeUnits: units,
-            count,
+            ...listTotals(units.length, result.total, "administrative units", true),
+            complete: true,
             help: [
                 `mg-axi entra administrative-unit list --filter <odata-filter> ${profileHint(profileName)}`,
                 "0 administrative units matched; the absence of results is the answer, not an error",
             ],
         };
     }
-    return { administrativeUnits: units, count, help: [...truncationHints, showHint] };
+    return { administrativeUnits: units, ...listTotals(units.length, result.total, "administrative units", true), complete: true, help: [...truncationHints, showHint] };
 }
 export async function showAdministrativeUnit(session, flags, profile, operation, help, profileName) {
     const { select, fields } = selectedFields(flags, KNOWN_AUS, KNOWN_AU_FIELDS, DEFAULT_AU_SHOW_SELECT, help);
@@ -390,16 +395,18 @@ export async function listAdministrativeUnitMembers(session, flags, profile, ope
     if (!result.complete) {
         return {
             members: rows,
-            count: { returned: rows.length, complete: false, reason: result.reason },
+            ...listTotals(rows.length, result.total, "members", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, ...limitedHints, hiddenHint, resumeHint(profileName)],
         };
     }
-    const count = { returned: rows.length, complete: true };
     if (!rows.length) {
         return {
             members: rows,
-            count,
+            ...listTotals(rows.length, result.total, "members", true),
+            complete: true,
             help: [
                 ...limitedHints,
                 hiddenHint,
@@ -407,5 +414,5 @@ export async function listAdministrativeUnitMembers(session, flags, profile, ope
             ],
         };
     }
-    return { members: rows, count, help: [...truncationHints, ...limitedHints, hiddenHint] };
+    return { members: rows, ...listTotals(rows.length, result.total, "members", true), complete: true, help: [...truncationHints, ...limitedHints, hiddenHint] };
 }

package/dist/entra-domains.js

@@ -1,4 +1,5 @@
 import { AxiError } from "axi-sdk-js";
+import { listTotals } from "./list-totals.js";
 // EXT-01 domains subfamily: the read mapping behind `mg-axi entra domain
 // list/show`, the per-domain verification and service-configuration DNS
 // record reads, and the top-level domain DNS record reads. Operation
@@ -254,20 +255,22 @@ export async function listDomains(session, flags, profile, operation, help, prof
     if (!result.complete) {
         return {
             domains,
-            count: { returned: domains.length, complete: false, reason: result.reason },
+            ...listTotals(domains.length, result.total, "domains", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint(profileName), showHint, filterNote],
         };
     }
-    const count = { returned: domains.length, complete: true };
     if (!domains.length) {
         return {
             domains,
-            count,
+            ...listTotals(domains.length, result.total, "domains", true),
+            complete: true,
             help: [filterNote, "0 domains matched; the absence of results is the answer, not an error"],
         };
     }
-    return { domains, count, help: [...truncationHints, showHint, filterNote] };
+    return { domains, ...listTotals(domains.length, result.total, "domains", true), complete: true, help: [...truncationHints, showHint, filterNote] };
 }
 export async function showDomain(session, flags, profile, operation, help, profileName) {
     const { select, fields } = selectedFields(flags, KNOWN_DOMAINS, KNOWN_DOMAIN_FIELDS, DEFAULT_DOMAIN_SHOW_SELECT, help);
@@ -321,20 +324,22 @@ async function listDnsRecords(session, flags, profile, operation, help, profileN
     if (!result.complete) {
         return {
             [command.collectionKey]: records,
-            count: { returned: records.length, complete: false, reason: result.reason },
+            ...listTotals(records.length, result.total, "DNS records", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint(profileName), showHint, kindHint],
         };
     }
-    const count = { returned: records.length, complete: true };
     if (!records.length) {
         return {
             [command.collectionKey]: records,
-            count,
+            ...listTotals(records.length, result.total, "DNS records", true),
+            complete: true,
             help: [kindHint, "0 DNS records matched; the absence of results is the answer, not an error"],
         };
     }
-    return { [command.collectionKey]: records, count, help: [...truncationHints, showHint, kindHint] };
+    return { [command.collectionKey]: records, ...listTotals(records.length, result.total, "DNS records", true), complete: true, help: [...truncationHints, showHint, kindHint] };
 }
 async function showDnsRecord(session, flags, profile, operation, help, profileName, command) {
     const { select, fields } = selectedFields(flags, KNOWN_DNS, KNOWN_DNS_FIELDS, DEFAULT_DNS_SHOW_SELECT, help);

package/dist/entra-entitlement-management.js

@@ -1,4 +1,5 @@
 import { AxiError } from "axi-sdk-js";
+import { listTotals } from "./list-totals.js";
 // EXT-02 entitlement-management reads: the read-only catalog and
 // access-package mapping plus the assignment and request reads. See
 // README.md for the supported commands and usage. Operation construction
@@ -348,6 +349,7 @@ function flattenRequestLinks(source) {
 const CATALOG_LIST = {
     command: "entra entitlement catalog list",
     key: "catalogs",
+    noun: "catalogs",
     known: CATALOG_KNOWN,
     knownList: KNOWN_CATALOG_FIELDS,
     defaultSelect: DEFAULT_CATALOG_LIST_SELECT,
@@ -360,6 +362,7 @@ const CATALOG_LIST = {
 const ACCESS_PACKAGE_LIST = {
     command: "entra entitlement access-package list",
     key: "accessPackages",
+    noun: "access packages",
     known: ACCESS_PACKAGE_KNOWN,
     knownList: KNOWN_ACCESS_PACKAGE_FIELDS,
     defaultSelect: DEFAULT_ACCESS_PACKAGE_LIST_SELECT,
@@ -372,6 +375,7 @@ const ACCESS_PACKAGE_LIST = {
 const ASSIGNMENT_POLICY_LIST = {
     command: "entra entitlement assignment-policy list",
     key: "assignmentPolicies",
+    noun: "assignment policies",
     known: ASSIGNMENT_POLICY_KNOWN,
     knownList: KNOWN_ASSIGNMENT_POLICY_FIELDS,
     defaultSelect: DEFAULT_ASSIGNMENT_POLICY_LIST_SELECT,
@@ -384,6 +388,7 @@ const ASSIGNMENT_POLICY_LIST = {
 const RESOURCE_ROLE_SCOPE_LIST = {
     command: "entra entitlement resource-role-scope list",
     key: "resourceRoleScopes",
+    noun: "resource-role scopes",
     known: RESOURCE_ROLE_SCOPE_KNOWN,
     knownList: KNOWN_RESOURCE_ROLE_SCOPE_FIELDS,
     defaultSelect: DEFAULT_RESOURCE_ROLE_SCOPE_LIST_SELECT,
@@ -396,6 +401,7 @@ const RESOURCE_ROLE_SCOPE_LIST = {
 const ASSIGNMENT_LIST = {
     command: "entra entitlement assignment list",
     key: "assignments",
+    noun: "assignments",
     known: ASSIGNMENT_KNOWN,
     knownList: KNOWN_ASSIGNMENT_FIELDS,
     defaultSelect: DEFAULT_ASSIGNMENT_LIST_SELECT,
@@ -413,6 +419,7 @@ const ASSIGNMENT_LIST = {
 const ASSIGNMENT_REQUEST_LIST = {
     command: "entra entitlement assignment-request list",
     key: "assignmentRequests",
+    noun: "assignment requests",
     known: ASSIGNMENT_REQUEST_KNOWN,
     knownList: KNOWN_ASSIGNMENT_REQUEST_FIELDS,
     defaultSelect: DEFAULT_ASSIGNMENT_REQUEST_LIST_SELECT,
@@ -501,16 +508,17 @@ async function listCollection(shape, session, flags, profile, operation, help, p
     if (!result.complete) {
         return {
             [shape.key]: rows,
-            count: { returned: rows.length, complete: false, reason: result.reason },
+            ...listTotals(rows.length, result.total, shape.noun, false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, resumeHint, ...standing],
         };
     }
-    const count = { returned: rows.length, complete: true };
     if (!rows.length) {
-        return { [shape.key]: rows, count, help: [shape.emptyNote, ...standing] };
+        return { [shape.key]: rows, ...listTotals(rows.length, result.total, shape.noun, true), complete: true, help: [shape.emptyNote, ...standing] };
     }
-    return { [shape.key]: rows, count, help: [...truncationHints, ...standing] };
+    return { [shape.key]: rows, ...listTotals(rows.length, result.total, shape.noun, true), complete: true, help: [...truncationHints, ...standing] };
 }
 async function showOne(key, command, known, knownList, defaultSelect, session, flags, profile, operation, help, profileName, params, malformed, extra) {
     const { select, fields, fetch } = selectedFields(flags, defaultSelect, known, knownList, help, extra?.synthetic);

package/dist/entra-federation-configurations.js

@@ -1,4 +1,5 @@
 import { AxiError } from "axi-sdk-js";
+import { listTotals } from "./list-totals.js";
 // EXT-01 directory federation-configurations subfamily: the read mapping
 // behind `mg-axi entra federation-configuration list/show/count/available-types`.
 // Operation construction stays beside its command; the shared session owns
@@ -203,20 +204,22 @@ export async function listFederationConfigurations(session, flags, profile, oper
     if (!result.complete) {
         return {
             federationConfigurations: configurations,
-            count: { returned: configurations.length, complete: false, reason: result.reason },
+            ...listTotals(configurations.length, result.total, "federation configurations", false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, `Resume losslessly with the same flags plus --cursor <cursor-from-output> ${profileHint(profileName)}`, showHint, CERT_BLOB_NOTE, WORKFORCE_NOTE],
         };
     }
-    const count = { returned: configurations.length, complete: true };
     if (!configurations.length) {
         return {
             federationConfigurations: configurations,
-            count,
+            ...listTotals(configurations.length, result.total, "federation configurations", true),
+            complete: true,
             help: ["0 federation configurations matched; no SAML or WS-Fed federation is configured for the tenant, or no row passed --filter", CERT_BLOB_NOTE, WORKFORCE_NOTE],
         };
     }
-    return { federationConfigurations: configurations, count, help: [...truncationHints, showHint, CERT_BLOB_NOTE, WORKFORCE_NOTE] };
+    return { federationConfigurations: configurations, ...listTotals(configurations.length, result.total, "federation configurations", true), complete: true, help: [...truncationHints, showHint, CERT_BLOB_NOTE, WORKFORCE_NOTE] };
 }
 export async function showFederationConfiguration(session, flags, profile, operation, help, profileName) {
     const { select, fields } = selectedFields(flags, DEFAULT_SHOW_SELECT, help);

package/dist/entra-grants.js

@@ -1,4 +1,5 @@
 import { AxiError } from "axi-sdk-js";
+import { listTotals } from "./list-totals.js";
 // READ-08: the Entra consent-grant read mapping behind
 // `mg-axi entra service-principal oauth2-grant list` and
 // `mg-axi entra service-principal app-role-assignment list` for a named
@@ -181,6 +182,7 @@ const APP_ROLE_DENIAL_HINTS = [
 const OAUTH2_GRANT_LIST = {
     command: "entra service-principal oauth2-grant list",
     key: "oauth2PermissionGrants",
+    noun: "oauth2 grants",
     known: GRANT_KNOWN,
     knownList: KNOWN_GRANT_FIELDS,
     defaultSelect: DEFAULT_GRANT_SELECT,
@@ -192,6 +194,7 @@ const OAUTH2_GRANT_LIST = {
 const APP_ROLE_LIST = {
     command: "entra service-principal app-role-assignment list",
     key: "appRoleAssignments",
+    noun: "app role assignments",
     known: APP_ROLE_KNOWN,
     knownList: KNOWN_APP_ROLE_FIELDS,
     defaultSelect: DEFAULT_APP_ROLE_SELECT,
@@ -253,16 +256,17 @@ async function listCollection(shape, session, flags, profile, operation, help, p
     if (!result.complete) {
         return {
             [shape.key]: rows,
-            count: { returned: rows.length, complete: false, reason: result.reason },
+            ...listTotals(rows.length, result.total, shape.noun, false),
+            complete: false,
+            reason: result.reason,
             cursor: result.cursor,
             help: [...truncationHints, `Resume losslessly with the same flags plus --cursor <cursor-from-output> ${profileHint(profileName)}`, ...standing],
         };
     }
-    const count = { returned: rows.length, complete: true };
     if (!rows.length) {
-        return { [shape.key]: rows, count, help: [shape.emptyNote, ...standing] };
+        return { [shape.key]: rows, ...listTotals(rows.length, result.total, shape.noun, true), complete: true, help: [shape.emptyNote, ...standing] };
     }
-    return { [shape.key]: rows, count, help: [...truncationHints, ...standing] };
+    return { [shape.key]: rows, ...listTotals(rows.length, result.total, shape.noun, true), complete: true, help: [...truncationHints, ...standing] };
 }
 export async function listOAuth2Grants(session, flags, profile, operation, help, profileName) {
     return listCollection(OAUTH2_GRANT_LIST, session, flags, profile, operation, help, profileName);