aiwaf 0.1.9.0.1__py3-none-any.whl → 0.1.9.0.3__py3-none-any.whl

aiwaf/__init__.py

@@ -1,24 +1,6 @@
 default_app_config = "aiwaf.apps.AiwafConfig"
 
-__version__ = "0.1.9.0.1"
+__version__ = "0.1.9.0.3"
 
 # Note: Middleware classes are available from aiwaf.middleware
-# Import them only when needed to avoid circular imports during Django app loading= "aiwaf.apps.AiwafConfig"
-
-__version__ = "0.1.9.0.1"
-
-# Import main middleware classes for easier access
-try:
-    from .middleware import (
-        IPAndKeywordBlockMiddleware,
-        RateLimitMiddleware, 
-        AIAnomalyMiddleware,
-        HoneypotTimingMiddleware,
-        UUIDTamperMiddleware
-    )
-except ImportError as e:
-    # Handle import errors gracefully during package installation
-    import sys
-    if 'runserver' in sys.argv or 'migrate' in sys.argv or 'shell' in sys.argv:
-        print(f"Warning: Could not import middleware classes: {e}")
-        print("Tip: Run 'python manage.py aiwaf_diagnose' to troubleshoot")
+# Import them only when needed to avoid circular imports during Django app loading

aiwaf/management/commands/regenerate_model.py

@@ -0,0 +1,79 @@
+from django.core.management.base import BaseCommand
+import os
+import warnings
+
+class Command(BaseCommand):
+    help = 'Regenerate AI-WAF model with current scikit-learn version'
+
+    def add_arguments(self, parser):
+        parser.add_argument(
+            '--force',
+            action='store_true',
+            help='Force regeneration even if model exists',
+        )
+
+    def handle(self, *args, **options):
+        self.stdout.write(self.style.HTTP_INFO("🔄 AI-WAF Model Regeneration"))
+        self.stdout.write("")
+        
+        # Check current sklearn version
+        try:
+            import sklearn
+            self.stdout.write(f"Current scikit-learn version: {sklearn.__version__}")
+        except ImportError:
+            self.stdout.write(self.style.ERROR("❌ scikit-learn not available"))
+            self.stdout.write("Install with: pip install scikit-learn")
+            return
+        
+        # Check if model exists
+        from aiwaf.trainer import MODEL_PATH
+        model_exists = os.path.exists(MODEL_PATH)
+        
+        if model_exists and not options['force']:
+            self.stdout.write(f"Model exists at: {MODEL_PATH}")
+            
+            # Try to load and check version
+            try:
+                import joblib
+                with warnings.catch_warnings():
+                    warnings.filterwarnings("ignore", category=UserWarning, module="sklearn.base")
+                    model_data = joblib.load(MODEL_PATH)
+                    
+                if isinstance(model_data, dict) and 'sklearn_version' in model_data:
+                    stored_version = model_data['sklearn_version']
+                    if stored_version == sklearn.__version__:
+                        self.stdout.write(self.style.SUCCESS("✅ Model is up-to-date"))
+                        return
+                    else:
+                        self.stdout.write(f"⚠️  Model version mismatch:")
+                        self.stdout.write(f"   Stored: {stored_version}")
+                        self.stdout.write(f"   Current: {sklearn.__version__}")
+                else:
+                    self.stdout.write("⚠️  Legacy model format detected")
+                    
+            except Exception as e:
+                self.stdout.write(f"⚠️  Could not check model: {e}")
+            
+            self.stdout.write("")
+            self.stdout.write("Regenerating model to fix version compatibility...")
+        
+        # Regenerate model
+        self.stdout.write("🚀 Starting model training...")
+        
+        try:
+            from aiwaf.trainer import train
+            train()
+            self.stdout.write("")
+            self.stdout.write(self.style.SUCCESS("✅ Model regenerated successfully!"))
+            self.stdout.write("")
+            self.stdout.write("The model is now compatible with your current scikit-learn version.")
+            self.stdout.write("Version warnings should no longer appear.")
+            
+        except Exception as e:
+            self.stdout.write("")
+            self.stdout.write(self.style.ERROR(f"❌ Model regeneration failed: {e}"))
+            self.stdout.write("")
+            self.stdout.write("Possible solutions:")
+            self.stdout.write("1. Check that you have log data available")
+            self.stdout.write("2. Verify AIWAF_ACCESS_LOG setting")
+            self.stdout.write("3. Run 'python manage.py detect_and_train' for full training")

aiwaf/middleware.py

@@ -25,7 +25,43 @@ MODEL_PATH = getattr(
     "AIWAF_MODEL_PATH",
     os.path.join(os.path.dirname(__file__), "resources", "model.pkl")
 )
-MODEL = joblib.load(MODEL_PATH)
+
+def load_model_safely():
+    """Load the AI model with version compatibility checking."""
+    import warnings
+    import sklearn
+    
+    try:
+        # Suppress sklearn version warnings temporarily
+        with warnings.catch_warnings():
+            warnings.filterwarnings("ignore", category=UserWarning, module="sklearn.base")
+            model_data = joblib.load(MODEL_PATH)
+            
+            # Handle both old format (direct model) and new format (with metadata)
+            if isinstance(model_data, dict) and 'model' in model_data:
+                # New format with metadata
+                model = model_data['model']
+                stored_version = model_data.get('sklearn_version', 'unknown')
+                current_version = sklearn.__version__
+                
+                if stored_version != current_version:
+                    print(f"ℹ️  Model was trained with sklearn v{stored_version}, current v{current_version}")
+                    print("   Run 'python manage.py detect_and_train' to update model if needed.")
+                
+                return model
+            else:
+                # Old format - direct model object
+                print("ℹ️  Using legacy model format. Consider retraining for better compatibility.")
+                return model_data
+                
+    except Exception as e:
+        print(f"Warning: Could not load AI model from {MODEL_PATH}: {e}")
+        print("AI anomaly detection will be disabled until model is retrained.")
+        print("Run 'python manage.py detect_and_train' to regenerate the model.")
+        return None
+
+# Load model with safety checks
+MODEL = load_model_safely()
 
 STATIC_KW = getattr(
     settings,
@@ -130,8 +166,8 @@ class AIAnomalyMiddleware(MiddlewareMixin):
 
     def __init__(self, get_response=None):
         super().__init__(get_response)
-        model_path = os.path.join(os.path.dirname(__file__), "resources", "model.pkl")
-        self.model = joblib.load(model_path)
+        # Use the safely loaded global MODEL instead of loading again
+        self.model = MODEL
 
     def process_request(self, request):
         if is_exempt(request):
@@ -164,7 +200,9 @@ class AIAnomalyMiddleware(MiddlewareMixin):
         total_404 = sum(1 for (_, _, st, _) in data if st == 404)
         feats = [path_len, kw_hits, resp_time, status_idx, burst_count, total_404]
         X = np.array(feats, dtype=float).reshape(1, -1)
-        if self.model.predict(X)[0] == -1:
+        
+        # Only use AI model if it's available
+        if self.model is not None and self.model.predict(X)[0] == -1:
             if not is_ip_exempted(ip):
                 BlacklistManager.block(ip, "AI anomaly")
                 return JsonResponse({"error": "blocked"}, status=403)

aiwaf/trainer.py

@@ -17,7 +17,7 @@ from .utils import is_exempt_path
 from .storage import get_blacklist_store, get_exemption_store, get_keyword_store
 
 # ─────────── Configuration ───────────
-LOG_PATH   = settings.AIWAF_ACCESS_LOG
+LOG_PATH   = getattr(settings, 'AIWAF_ACCESS_LOG', None)
 MODEL_PATH = os.path.join(os.path.dirname(__file__), "resources", "model.pkl")
 
 STATIC_KW  = [".php", "xmlrpc", "wp-", ".env", ".git", ".bak", "conflg", "shell", "filemanager"]
@@ -192,11 +192,28 @@ def train() -> None:
         contamination=getattr(settings, "AIWAF_AI_CONTAMINATION", 0.05), 
         random_state=42
     )
-    model.fit(X)
+    
+    # Suppress sklearn warnings during training
+    import warnings
+    with warnings.catch_warnings():
+        warnings.filterwarnings("ignore", category=UserWarning, module="sklearn")
+        model.fit(X)
 
     os.makedirs(os.path.dirname(MODEL_PATH), exist_ok=True)
-    joblib.dump(model, MODEL_PATH)
-    print(f"Model trained on {len(X)} samples → {MODEL_PATH}")
+    
+    # Save model with version metadata
+    import sklearn
+    from django.utils import timezone as django_timezone
+    model_data = {
+        'model': model,
+        'sklearn_version': sklearn.__version__,
+        'created_at': str(django_timezone.now()),
+        'feature_count': len(feature_cols),
+        'samples_count': len(X)
+    }
+    joblib.dump(model_data, MODEL_PATH)
+    print(f"✅ Model trained on {len(X)} samples → {MODEL_PATH}")
+    print(f"📦 Created with scikit-learn v{sklearn.__version__}")
     
     # Check for anomalies and intelligently decide which IPs to block
     preds = model.predict(X)

{aiwaf-0.1.9.0.1.dist-info → aiwaf-0.1.9.0.3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aiwaf
-Version: 0.1.9.0.1
+Version: 0.1.9.0.3
 Summary: AI-powered Web Application Firewall
 Home-page: https://github.com/aayushgauba/aiwaf
 Author: Aayush Gauba
@@ -12,7 +12,7 @@ License-File: LICENSE
 Requires-Dist: Django>=3.2
 Requires-Dist: numpy>=1.21
 Requires-Dist: pandas>=1.3
-Requires-Dist: scikit-learn>=1.0
+Requires-Dist: scikit-learn<2.0,>=1.0
 Requires-Dist: joblib>=1.1
 Dynamic: author
 Dynamic: home-page
@@ -371,6 +371,7 @@ MIDDLEWARE = [
 
 **Common Issues:**
 - **AppRegistryNotReady Error**: Fixed in v0.1.9.0.1 - update with `pip install --upgrade aiwaf`
+- **Scikit-learn Version Warnings**: Fixed in v0.1.9.0.3 - regenerate model with `python manage.py regenerate_model`
 - Missing Django: `pip install Django`
 - Old AI-WAF version: `pip install --upgrade aiwaf`
 - Missing migrations: `python manage.py migrate`
@@ -388,6 +389,24 @@ python manage.py detect_and_train
 1. Read access logs (incl. rotated or gzipped) **OR** AI-WAF middleware CSV logs
 2. Auto‑block IPs with ≥ 6 total 404s
 3. Extract features & train IsolationForest
+4. Save `model.pkl` with current scikit-learn version
+
+### Model Regeneration
+
+If you see scikit-learn version warnings, regenerate the model:
+
+```bash
+# Quick model regeneration (recommended)
+python manage.py regenerate_model
+
+# Full retraining with fresh data
+python manage.py detect_and_train
+```
+
+**Benefits:**
+- ✅ Eliminates version compatibility warnings
+- ✅ Uses current scikit-learn optimizations
+- ✅ Maintains same protection level
 4. Save `model.pkl`
 5. Extract top 10 dynamic keywords from 4xx/5xx
 6. Remove any keywords associated with newly exempt paths

{aiwaf-0.1.9.0.1.dist-info → aiwaf-0.1.9.0.3.dist-info}/RECORD

@@ -1,12 +1,12 @@
-aiwaf/__init__.py,sha256=4PDddOVwIGrxJMbJroJ6SmT5rGamZF5NPJzZir7i-dM,855
+aiwaf/__init__.py,sha256=mj3cwko8cLPwJPmo9pF0dWcJJOzRCz4o5dB-cYBhqyc,220
 aiwaf/apps.py,sha256=nCez-Ptlv2kaEk5HenA8b1pATz1VfhrHP1344gwcY1A,142
 aiwaf/blacklist_manager.py,sha256=92ltIrFfv8WOC4CXwvNVZYfivkRZHGNg3E2QAbHQipQ,550
 aiwaf/decorators.py,sha256=IUKOdM_gdroffImRZep1g1wT6gNqD10zGwcp28hsJCs,825
-aiwaf/middleware.py,sha256=1JPrc0npI_a5bnB-thN0ME1ehfTbWBl1j9wTndZwRdQ,9505
+aiwaf/middleware.py,sha256=fajFXsETb2kGQJzHi7cEV3bQA88yqHbZvRDPNR1y2OA,11188
 aiwaf/middleware_logger.py,sha256=uTYTvIc4Mv1pjY50aXaqQ5cWAO9qqquijAyVMs1KWlM,6517
 aiwaf/models.py,sha256=XaG1pd_oZu3y-fw66u4wblGlWcUY9gvsTNKGD0kQk7Y,1672
 aiwaf/storage.py,sha256=aaszMkskRO0RZPwD2vsgP35TthI_xQEs5IxsCsxjGcw,13734
-aiwaf/trainer.py,sha256=bgVoBewnNVMJdgxcNchfhsPOnFXxStoBOqNhFYnpsqs,9244
+aiwaf/trainer.py,sha256=Cem-qi1KMjfw7MFDxyxjn7nAJGPrk-I8An4HHniiT00,9877
 aiwaf/utils.py,sha256=BJk5vJCYdGPl_4QQiknjhCbkzv5HZCXgFcBJDMJpHok,3390
 aiwaf/management/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 aiwaf/management/commands/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -15,11 +15,12 @@ aiwaf/management/commands/aiwaf_diagnose.py,sha256=nXFRhq66N4QC3e4scYJ2sUngJce-0
 aiwaf/management/commands/aiwaf_logging.py,sha256=FCIqULn2tii2vD9VxL7vk3PV4k4vr7kaA00KyaCExYY,7692
 aiwaf/management/commands/aiwaf_reset.py,sha256=0FIBqpZS8xgFFvAKJ-0zAC_-QNQwRkOHpXb8N-OdFr8,3740
 aiwaf/management/commands/detect_and_train.py,sha256=-o-LZ7QZ5GeJPCekryox1DGXKMmFEkwwrcDsiM166K0,269
+aiwaf/management/commands/regenerate_model.py,sha256=SUy7TCTTDJy4kRZNAbTIVBxSmljUaAC6ms0JTfSO6BE,3445
 aiwaf/resources/model.pkl,sha256=5t6h9BX8yoh2xct85MXOO60jdlWyg1APskUOW0jZE1Y,1288265
 aiwaf/templatetags/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 aiwaf/templatetags/aiwaf_tags.py,sha256=XXfb7Tl4DjU3Sc40GbqdaqOEtKTUKELBEk58u83wBNw,357
-aiwaf-0.1.9.0.1.dist-info/licenses/LICENSE,sha256=Ir8PX4dxgAcdB0wqNPIkw84fzIIRKE75NoUil9RX0QU,1069
-aiwaf-0.1.9.0.1.dist-info/METADATA,sha256=PfFRoPruk3Dx51ERtgqdk61ig9PsY0FL-EpmQFjBTNY,13002
-aiwaf-0.1.9.0.1.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-aiwaf-0.1.9.0.1.dist-info/top_level.txt,sha256=kU6EyjobT6UPCxuWpI_BvcHDG0I2tMgKaPlWzVxe2xI,6
-aiwaf-0.1.9.0.1.dist-info/RECORD,,
+aiwaf-0.1.9.0.3.dist-info/licenses/LICENSE,sha256=Ir8PX4dxgAcdB0wqNPIkw84fzIIRKE75NoUil9RX0QU,1069
+aiwaf-0.1.9.0.3.dist-info/METADATA,sha256=-5zOyXmpp_KL_C1kCtgKOqyUT4gS2cCzpoM8UOupfeY,13571
+aiwaf-0.1.9.0.3.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+aiwaf-0.1.9.0.3.dist-info/top_level.txt,sha256=kU6EyjobT6UPCxuWpI_BvcHDG0I2tMgKaPlWzVxe2xI,6
+aiwaf-0.1.9.0.3.dist-info/RECORD,,