feat: enriched recommendations with attack scenarios and likelihood (#90)

backend/app/api/__init__.py

@@ -418,6 +418,8 @@ class RecommendationOut(BaseModel):
     steps: list[str]
     effort: str
     impact: str
+    attack_scenario: str | None
+    likelihood: str | None
     created_at: str | None
     updated_at: str | None
 
@@ -494,6 +496,8 @@ def _rec_to_out(r) -> RecommendationOut:  # noqa: ANN001 — SQLAlchemy instance
         steps=_safe_load_steps(r.steps),
         effort=r.effort,
         impact=r.impact,
+        attack_scenario=r.attack_scenario,
+        likelihood=r.likelihood,
         created_at=r.created_at.isoformat() if r.created_at else None,
         updated_at=r.updated_at.isoformat() if r.updated_at else None,
     )

backend/app/db.py

@@ -35,6 +35,8 @@ def _migrate_schema(engine) -> None:
         ("risks", "acknowledged_at", "DATETIME"),
         ("risks", "acknowledged_note", "TEXT"),
         ("devices", "label", "TEXT"),
+        ("recommendations", "attack_scenario", "TEXT"),
+        ("recommendations", "likelihood", "TEXT"),
     ]
     with engine.connect() as conn:
         for table, column, col_def in migrations:

backend/app/models/recommendation.py

@@ -26,6 +26,8 @@ class Recommendation(Base):
     steps = Column(Text, nullable=False)  # JSON-encoded list[str]
     effort = Column(String, nullable=False)  # "low" | "medium" | "high"
     impact = Column(String, nullable=False)  # "low" | "medium" | "high"
+    attack_scenario = Column(Text, nullable=True)
+    likelihood = Column(Text, nullable=True)
     created_at = Column(DateTime, nullable=False, default=func.now())
     updated_at = Column(DateTime, nullable=False, default=func.now(), onupdate=func.now())