CR: netapi Security Hardening — Implementation

dependencies = [
    "requests>=2.33.0",           # CVE fix
    "cryptography>=46.0.5",       # CVE fix
    "pyasn1>=0.6.3",              # CVE fix
    "python-socketio>=5.14.0",    # CVE fix
    # ... other deps
]

# CLI output parsing
parsing = [
    "textfsm>=1.1",
    "ntc-templates>=6.0",
    "ttp>=0.9",
]

# NOTE: Cisco pyATS/Genie removed due to unfixed CVEs (pyasn1, socketio)
# If needed, install separately: pip install genie pyats

class NetapiError(Exception):
    """Base exception for all netapi errors."""
    vendor: str = "netapi"

class NetapiApiError(NetapiError):
    """HTTP API returned error (4xx, 5xx)."""
    status_code: int | None

class NetapiAuthError(NetapiError):
    """Authentication failed."""

class NetapiConnectionError(NetapiError):
    """Network unreachable."""

class NetapiNotFoundError(NetapiError):
    """Resource not found (404)."""

class NetapiRateLimitError(NetapiError):
    """Rate limit exceeded."""

class NetapiTimeoutError(NetapiError):
    """Request timeout."""