fix: scope and batch sensitive suggestions

frontend/src/api/catalog-databases.ts

@@ -99,6 +99,11 @@ export interface CatalogColumn {
 
 export interface SensitiveDataSuggestion {
   columnId: string;
+  tableId: string;
+  tableName: string;
+  columnName: string;
+  version: number;
+  currentSensitive: boolean;
   sensitive: boolean;
 }
 
@@ -106,6 +111,11 @@ export interface SensitiveDataSuggestions {
   suggestions: SensitiveDataSuggestion[];
 }
 
+export type SensitiveDataSuggestionRequest =
+  | { scope: "all" }
+  | { scope: "selected_tables"; targetIds: string[] }
+  | { scope: "selected_columns"; targetIds: string[] };
+
 export interface CatalogRelationshipColumn {
   position: number;
   sourceColumnId: string;
@@ -357,10 +367,25 @@ export const updateCatalogColumnMetadata = (
   { method: "PATCH", body: JSON.stringify({ version, description, generatedDescription, sensitive }) },
 );
 
-export const suggestSensitiveFields = (databaseId: string, modelId: string) =>
+export const updateCatalogColumnSensitive = (
+  databaseId: string,
+  tableId: string,
+  columnId: string,
+  version: number,
+  sensitive: boolean,
+) => apiFetch<CatalogColumn>(
+  `/catalog/databases/${encodeURIComponent(databaseId)}/tables/${encodeURIComponent(tableId)}/columns/${encodeURIComponent(columnId)}`,
+  { method: "PATCH", body: JSON.stringify({ version, sensitive }) },
+);
+
+export const suggestSensitiveFields = (
+  databaseId: string,
+  modelId: string,
+  selection: SensitiveDataSuggestionRequest,
+) =>
   apiFetch<SensitiveDataSuggestions>(
     `/catalog/databases/${encodeURIComponent(databaseId)}/sensitive-data-suggestions`,
-    { method: "POST", body: JSON.stringify({ modelId }) },
+    { method: "POST", body: JSON.stringify({ modelId, ...selection }) },
   );
 
 export const listCatalogRelationships = (databaseId: string) =>

frontend/src/api/client.test.ts

@@ -147,7 +147,9 @@ test.each([
   ["description_generation_target_ids_duplicate", "Description generation target IDs must be unique."],
   ["description_generation_no_eligible_targets", "No eligible catalog tables or columns need description generation."],
   ["catalog_table_not_found", "One or more selected catalog tables were not found."],
-])("maps the description-generation error code %s to safe local copy", async (code, message) => {
+  ["sensitive_data_suggestion_invalid_response", "The model returned an incomplete or invalid classification. No suggestions were applied."],
+  ["sensitive_data_suggestion_provider_unavailable", "The selected model could not complete the request. No suggestions were applied."],
+])("maps the catalog error code %s to safe local copy", async (code, message) => {
   const fetchSpy = vi.spyOn(globalThis, "fetch").mockResolvedValue(
     new Response(JSON.stringify({ code, message: "provider detail must not be trusted" }), {
       status: 400,

frontend/src/api/client.ts

@@ -23,6 +23,13 @@ const safeErrorCodes = new Set([
   "description_generation_target_ids_duplicate", "metadata_generation_model_unavailable",
   "catalog_column_not_found", "catalog_table_not_found",
   "workspace_configuration_unavailable",
+  "sensitive_data_suggestion_request_invalid",
+  "sensitive_data_suggestion_target_ids_duplicate",
+  "sensitive_data_suggestion_no_columns",
+  "sensitive_data_suggestion_payload_too_large",
+  "sensitive_data_suggestion_invalid_response",
+  "sensitive_data_suggestion_provider_unavailable",
+  "sensitive_data_suggestion_failed",
   "schema_sync_conflict", "schema_introspection_failed", "schema_request_invalid",
   "schema_operation_failed", "sync_run_not_found", "table_stale", "column_stale",
 ]);
@@ -77,6 +84,13 @@ const localCodeMessages: Record<string, string> = {
   catalog_column_not_found: "The selected catalog column was not found.",
   catalog_table_not_found: "One or more selected catalog tables were not found.",
   workspace_configuration_unavailable: "The database workspace configuration is unavailable.",
+  sensitive_data_suggestion_request_invalid: "Select a database, one or more tables, or one or more columns before requesting sensitive-field suggestions.",
+  sensitive_data_suggestion_target_ids_duplicate: "Each selected table or column can be included only once.",
+  sensitive_data_suggestion_no_columns: "The selected scope contains no catalog columns to classify.",
+  sensitive_data_suggestion_payload_too_large: "The selected structural metadata cannot be divided into safe model requests.",
+  sensitive_data_suggestion_invalid_response: "The model returned an incomplete or invalid classification. No suggestions were applied.",
+  sensitive_data_suggestion_provider_unavailable: "The selected model could not complete the request. No suggestions were applied.",
+  sensitive_data_suggestion_failed: "Sensitive-field suggestions failed before review. No changes were applied.",
   schema_sync_conflict: "A schema synchronization is already active or no longer current.",
   schema_introspection_failed: "The database schema could not be read safely.",
   schema_request_invalid: "The schema request is invalid.",