Globus-cli

Bugfixes:

* A debug display of server timing info was always enabled when it should have
been disabled by default. This produced extraneous output to stderr for some
commands.

* Fix bug causing `globus rm` to fail when using the `--dry-run` option.

Enhancements:

* Add `globus flows create` as a new command for creating flows.

* JSON file parsing throughout the CLI has been made more uniform and robust.
Commands which required files to be specified with the `file:` prefix now
allow for filenames without the prefix, improving tab-completion. All
commands which accept JSON data as inputs now allow for files or
JSON-formatted arguments.

* Add the `--local-user` option to the `globus ls`, `globus rename`, `globus mkdir`,
`globus delete`, and `globus rm` commands.

* Add the `--source-local-user` and `--destination-local-user` options to the
`globus transfer` command.

* Error reporting for parsing errors during `--batch` processing has been
improved to better indicate the source of the error

Enhancements:

* Add `--include` option to `globus transfer` allowing ordered overrides of `--exclude` rules.

Breaking Changes:

* The `--exclude` option for `globus transfer` now only applies to files to better
support excluding files within a directory structure

Bugfixes:

* Fix the handling of multiple `-Q` parameters with the same name for
the `globus api` commands. Such usages were only sending the last value
used, but now correctly send all parameters.

* Certain combinations of options for `globus task list` could, generate
invalid or useless filters. These behaviors are fixed.

* Strip single quotes from scope strings passed to `globus session consent`,
fixing the behavior of this command when run from Windows Command Prompt

Enhancements:

* Add `globus timer create transfer` as a new command for creating new timers

** The command prompts for login if data_access consents are detected as a
requirement

* `globus session consent` now supports a `--timer-data-access` flag, specifically
to help support timer creation

* The CLI now has stronger requirements around the scope used for the Timer
service, and will treat past Timer tokens as invalid. Users running
`globus timer` commands will find that they must login again.

* Add `globus timer delete` as a command for deleting timers

* When showing login requirements for known Globus services, the error message
instructing users to run `globus login` will use recognizable nice names for
those services, e.g. `Globus Timers`

Other:

* The CLI's handling of changes to its scope requirements over time has been
improved. After CLI updates which change the required scopes, users will be
prompted to login again, ensuring that the most up-to-date set of scopes are
in use.

** Changes to the CLI which adjust scopes, and therefore force this
re-login behavior, will note this in the changelog.

** This change, in itself, will not force re-login for any users.

* `globus-cli` now uses `packaging` for version parsing. This improves
compatibility with python 3.12

Enhancements:

* Add `--policy` option to `globus session update` which takes a comma
delimited list of Globus Auth policy IDs and starts an auth flow to
meet the policies.

* Whenever an error is hit due to not meeting a Globus Auth policy, helptext
is displayed with a `globus session update` command to resolve the error.

* Support `--user-message` and `--user-message-link` for
`globus endpoint update` and `globus gcp create mapped`

Other:

* Improve the uniformity of endpoint and collection option parsing.
** The `--sharing-restrict-paths` option to `globus collection update` now
checks for invalid types (non-dict, non-null data)
** `globus endpoint update` now treats the empty string as null for the
following options: `--contact-email`, `--contact-info`,
`--default-directory`, `--department`, `--description`, `--info-link`,
and `--organization`. This behavior matches `globus collection update`.
`--no-default-directory` is still supported, but is equivalent to
`--default-directory ""`
** `globus gcp create guest` and `globus gcp create mapped` now accept
`--verify [force|disable|default]` for verification options. This replaces
`--disable-verify/--no-disable-verify`, which is now deprecated

Bugfixes:

* Fix a typo in the `globus endpoint permission update` command

* Fixed an AttributeError preventing text output of `globus session show`

Bugfixes:

* Fix a bug which caused `globus list-commands` not to show proper information

Enhancements:

* Add the `globus api flows` command for direct interactions with the Globus
Flows service

* Added commands for interacting with GCSv5 user credentials
** `globus endpoint user-credential list`
** `globus endpoint user-credential show`
** `globus endpoint user-credential delete`
** `globus endpoint user-credential create`
*** `globus endpoint user-credential create from-json`
*** `globus endpoint user-credential create posix`
*** `globus endpoint user-credential create s3`

* Added `globus endpoint storage-gateway list`

* Add `globus flows delete` to delete a flow by ID

* Add a new command, `globus flows show` which displays information about a
single flow

* Add `globus flows start` as a new command for starting a flow.

* Add `globus login --flow <flow_id>` to trigger a login that asks for consent to start a flow.

* `globus ls` has improved behavior when the `--filter` and `--recursive` options
are used in combination

** directory names are not matched against the filter, allowing the operation to
traverse directories regardless of their names

** the `--filter` is still applied to filenames in all directories traversed by
the `ls` operation

** directory names can be filtered out of the text output by eliminating
lines which end in `/`

** the behaviors of `globus ls` commands with `--recursive` or `--filter`, but not
both, are unchanged

Other:

* `globus endpoint create` is now hidden and displays a deprecation warning
when used

* Support Python 3.11.

* Endpointish now uses `entity_type` for determining EntityType