v1.3.0 — live DiffPanel, pinned-group preservation, dynamic-group restoration, group restore bug fixes

Major:
- Live side-by-side DiffPanel on Restore page (source vs destination, before/after snapshots per node)
- Pinned-group preservation with multi-endpoint convert chain
- Dynamic-group restoration by filter NAME (backup carries filterName; restore remaps to dest filterId)
- Resizable PanedWindow split, numbered rows, tooltips, auto-scroll, mouse-wheel forwarding

Bug fixes:
- Dynamic groups no longer silently restored as static
- PUT /groups/{id} no longer sends 'type' field (S1 rejects it)
- Group create with inherits=False fixed (always create with inherits=True; policy step decouples)
- Config overrides re-inject data.scope after _clean_for_restore strips it
- S1 API error extractor reads title+detail+code (no more 'Unrecognised error')
- Per-item failure records keep full error message (was 80-char truncated)

Also includes uncommitted v1.2.0 features: Purple AI page, Unified Alerts page, connection pooling, 429/5xx retry, parallel fan-out, GraphQL transport.

Author: Ranjacobi

.gitignore

@@ -13,3 +13,8 @@ s1-restore-report-*.html
 build/
 dist/
 *.spec
+
+# Internal-only modules (never publish)
+jira_page.py
+atlas_token.txt
+pso_tickets_cache.json

.idea/.gitignore

@@ -41,6 +41,7 @@ pyinstaller \
     --hidden-import openpyxl \
     --hidden-import PIL \
     --collect-all customtkinter \
+    --exclude-module jira_page \
     --noconfirm \
     main.py
 

app.py

@@ -38,6 +38,7 @@ pyinstaller ^
     --hidden-import openpyxl ^
     --hidden-import PIL ^
     --collect-all customtkinter ^
+    --exclude-module jira_page ^
     --noconfirm ^
     main.py
 

build_macos.sh

@@ -6,8 +6,8 @@
 from dataclasses import dataclass, asdict
 from typing import Optional
 
-CONFIG_DIR = os.path.join(os.path.expanduser("~"), ".s1-command-center")
-CONFIG_FILE = os.path.join(CONFIG_DIR, "contexts.json")
+CONFIG_DIR   = os.path.join(os.path.expanduser("~"), ".s1-command-center")
+CONFIG_FILE  = os.path.join(CONFIG_DIR, "contexts.json")
 
 
 @dataclass
@@ -16,6 +16,7 @@ class Context:
     url: str
     api_token: str
     role: str = ""  # "source" or "destination"
+    ignore_ssl_errors: bool = False
 
     @property
     def display_url(self) -> str:
@@ -43,31 +44,48 @@ def save(self):
         with open(CONFIG_FILE, "w") as f:
             json.dump([asdict(c) for c in self.contexts], f, indent=2)
 
-    def upsert(self, name: str, url: str, api_token: str, role: str = "") -> Context:
+    def upsert(self, name: str, url: str, api_token: str, role: str = "",
+               ignore_ssl_errors: bool = False) -> Context:
         if not url.startswith("http"):
             url = f"https://{url}.sentinelone.net"
-        self.contexts = [c for c in self.contexts if c.name != name]
-        ctx = Context(name=name, url=url, api_token=api_token, role=role)
+        # A console's identity is its URL, not its friendly name — ticket
+        # data often gives the same account name to both source and
+        # destination consoles, so deduping by name would wipe one of them.
+        self.contexts = [c for c in self.contexts if c.url != url]
+        ctx = Context(name=name, url=url, api_token=api_token, role=role,
+                      ignore_ssl_errors=bool(ignore_ssl_errors))
         self.contexts.append(ctx)
         self.save()
         return ctx
 
-    def remove(self, name: str):
-        self.contexts = [c for c in self.contexts if c.name != name]
+    def remove(self, url_or_name: str):
+        """Remove by URL first; fall back to name for legacy callers."""
+        before = len(self.contexts)
+        self.contexts = [c for c in self.contexts if c.url != url_or_name]
+        if len(self.contexts) == before:
+            self.contexts = [c for c in self.contexts if c.name != url_or_name]
         self.save()
 
     def get(self, name: str) -> Optional[Context]:
         return next((c for c in self.contexts if c.name == name), None)
 
+    def get_by_url(self, url: str) -> Optional[Context]:
+        return next((c for c in self.contexts if c.url == url), None)
+
     def get_by_role(self, role: str) -> Optional[Context]:
         return next((c for c in self.contexts if c.role == role), None)
 
-    def set_role(self, name: str, role: str):
+    def set_role(self, identifier: str, role: str):
+        """Promote the context with this URL (or name, for legacy) to the
+        given role, demoting any other context that currently holds it."""
+        target = self.get_by_url(identifier) or self.get(identifier)
+        if not target:
+            return
         for c in self.contexts:
-            if c.role == role:
-                c.role = ""
-            if c.name == name:
+            if c is target:
                 c.role = role
+            elif c.role == role:
+                c.role = ""
         self.save()
 
     def names(self) -> list[str]: