"""Bonus: AI pentesting copilot hook — extend with tool-calling + scoped auth."""

from __future__ import annotations

from models.schemas import Incident


def suggest_pentest_queries(incident: Incident) -> list[str]:
    """Returns safe, authorized recon prompts for purple-team exercises."""
    return [
        f"Map exposed services related to: {incident.title}",
        "Enumerate IAM roles assuming breach of bastion host",
        "Generate non-destructive Nmap plan for internal VLAN segmentation validation",
    ]