aspera-cli 4.10.0 → 4.12.0

data/README.md

@@ -1,10 +1,15 @@
 # Command Line Interface for IBM Aspera products
-
+<!-- markdownlint-disable MD033 MD003 MD053 -->
+<!-- cSpell:ignore devkit zcvf zxvf noded secondfile filesize sedemo eudemo webmail csum eascp loglevel cronfile magick keepalive inotify eastus bluemix trev sshfp struct genkey passout ibmaspera unpermitted -->
+<!-- cSpell:ignoreRegExp /-P[a-z]+/g -->
+<!-- cSpell:ignoreRegExp /my[a-z]+/g -->
 [comment1]: # (Do not edit this README.md, edit docs/README.erb.md, for details, read docs/README.md)
 
-Version : 4.10.0
+##
+
+Version : 4.12.0
 
-Laurent/2016-2022
+Laurent/2016-2023
 
 This gem provides the `ascli` Command Line Interface to IBM Aspera software.
 
@@ -14,9 +19,11 @@ Ruby Gem: [https://rubygems.org/gems/aspera-cli](https://rubygems.org/gems/asper
 
 Ruby Doc: [https://www.rubydoc.info/gems/aspera-cli](https://www.rubydoc.info/gems/aspera-cli)
 
-Minimum required Ruby version: >= 2.4. Deprecation notice: the minimum will be 2.7 in a future version.
+Minimum required Ruby version: >= 2.4.
+
+> **Deprecation notice**: the minimum Ruby version will be 2.7 in a future version.
 
-[Aspera APIs on IBM developer](https://developer.ibm.com/?size=30&q=aspera&DWContentType[0]=APIs)
+[Aspera APIs on IBM developer](https://developer.ibm.com/?size=30&q=aspera&DWContentType[0]=APIs&sort=title_asc)
 [Link 2](https://developer.ibm.com/apis/catalog/?search=aspera)
 
 Release notes: see [CHANGELOG.md](CHANGELOG.md)
@@ -46,7 +53,7 @@ So it is designed for:
 - A configuration file (config.yaml)
 - Advanced command line options
 - cURL (for REST calls)
-- Aspera transfer (ascp)
+- Aspera transfer (`ascp`)
 
 If the need is to perform operations programmatically in languages such as: C, Go, Python, nodejs, ... then it is better to directly use [Aspera APIs](https://ibm.biz/aspera_api)
 
@@ -59,10 +66,19 @@ For scripting and ad'hoc command line operations, `ascli` is perfect.
 
 ## Notations, Shell, Examples
 
-In examples, command line operations are shown using a shell such: `bash` or `zsh`.
+Command line operations examples are shown using a shell such: `bash` or `zsh`.
 
 Command line parameters in examples beginning with `my_`, like `my_param_value` are user-provided value and not fixed value commands.
 
+`ascli` is an API **Client** toward the remote Aspera application **Server** (Faspex, HSTS, etc...)
+
+Some commands will start an Aspera-based transfer (e.g. `upload`).
+The transfer is not directly implemented in `ascli`, rather `ascli` uses an external Aspera Client called **[Transfer Agents](#agents)**.
+
+> **Note:** The transfer agent is a client for the remote Transfer Server (HSTS).
+The transfer agent may be local or remote...
+For example a remote Aspera Server may be used as a transfer agent (using node API).
+i.e. using option `--transfer=node`
 
 ## Quick Start
 
@@ -77,7 +93,7 @@ ascli --version
 ```
 
 ```bash
-4.10.0
+4.12.0
 ```
 
 ### First use
@@ -88,6 +104,8 @@ If you want to test with Aspera on Cloud, jump to section: [Wizard](#aocwizard)
 
 To test with Aspera demo transfer server, setup the environment and then test:
 
+<!-- spellchecker: disable -->
+
 ```bash
 ascli config initdemo
 ```
@@ -107,6 +125,8 @@ ascli server browse /
 :............:...........:......:........:...........................:.......................:
 ```
 
+<!-- spellchecker: enable -->
+
 If you want to use `ascli` with another server, and in order to make further calls more convenient, it is advised to define a [option preset](#lprt) for the server's authentication options. The following example will:
 
 - create a [option preset](#lprt)
@@ -115,7 +135,7 @@ If you want to use `ascli` with another server, and in order to make further cal
 - download a file
 
 ```bash
-ascli config preset update myserver --url=ssh://demo.asperasoft.com:33001 --username=asperaweb --password=_pass_here_
+ascli config preset update myserver --url=ssh://demo.asperasoft.com:33001 --username=asperaweb --password=my_password_here
 ```
 
 ```output
@@ -127,7 +147,7 @@ ascli config preset set default server myserver
 ```
 
 ```output
-updated: default&rarr;server to myserver
+updated: default &rarr; server to myserver
 ```
 
 ```bash
@@ -138,15 +158,10 @@ ascli server browse /aspera-test-dir-large
 :............:...........:......:..............:...........................:............................:
 :   zmode    :   zuid    : zgid :     size     :           mtime           :            name            :
 :............:...........:......:..............:...........................:............................:
-: -rw-rw-rw- : asperaweb : fasp : 10133504     : 2018-05-04 14:16:24 +0200 : ctl_female_2.fastq.partial :
 : -rw-r--r-- : asperaweb : fasp : 209715200    : 2014-04-10 19:49:27 +0200 : 200MB                      :
 : -rw-r--r-- : asperaweb : fasp : 524288000    : 2014-04-10 19:44:15 +0200 : 500MB                      :
 : -rw-r--r-- : asperaweb : fasp : 5368709120   : 2014-04-10 19:45:52 +0200 : 5GB                        :
 : -rw-r--r-- : asperaweb : fasp : 500000000000 : 2017-06-14 20:09:57 +0200 : 500GB                      :
-: -rw-rw-rw- : asperaweb : fasp : 13606912     : 2018-05-04 14:20:21 +0200 : ctl_male_2.fastq.partial   :
-: -rw-rw-rw- : asperaweb : fasp : 76           : 2018-05-04 14:13:18 +0200 : ctl_female_2.fastq.haspx   :
-: -rw-rw-rw- : asperaweb : fasp : 647348       : 2018-05-04 14:26:39 +0200 : ctl_female_2.gz            :
-: -rw-rw-rw- : asperaweb : fasp : 74           : 2018-05-04 14:16:00 +0200 : ctl_male_2.fastq.haspx     :
 : -rw-r--r-- : asperaweb : fasp : 1048576000   : 2014-04-10 19:49:23 +0200 : 1GB                        :
 : -rw-r--r-- : asperaweb : fasp : 104857600    : 2014-04-10 19:49:29 +0200 : 100MB                      :
 : -rw-r--r-- : asperaweb : fasp : 10737418240  : 2014-04-10 19:49:04 +0200 : 10GB                       :
@@ -158,7 +173,7 @@ ascli server download /aspera-test-dir-large/200MB
 ```
 
 ```output
-Time: 00:00:02 ========================================================================================================== 100% 100 Mbps Time: 00:00:00
+Time: 00:00:02 =========================================================== 100% 100 Mbps Time: 00:00:00
 complete
 ```
 
@@ -174,9 +189,13 @@ It is possible to install *either* directly on the host operating system (Linux,
 
 The direct installation is recommended and consists in installing:
 
-- [Ruby](#ruby) (version: >= 2.4. Deprecation notice: the minimum will be 2.7 in a future version)
+- [Ruby](#ruby)
 - [aspera-cli](#the_gem)
-- [Aspera SDK (ascp)](#fasp_prot)
+- [Aspera SDK (`ascp`)](#fasp_prot)
+
+Ruby version: >= 2.4.
+
+> **Deprecation notice**: the minimum Ruby version will be 2.7 in a future version.
 
 The following sections provide information on the various installation methods.
 
@@ -184,33 +203,114 @@ An internet connection is required for the installation. If you don't have inter
 
 ### Docker container
 
-This method installs a docker image that contains: Ruby, `ascli` and the FASP SDK.
+The image is: [martinlaurent/ascli](https://hub.docker.com/r/martinlaurent/ascli).
+The container contains: Ruby, `ascli` and the Aspera Transfer SDK.
+To use the container, ensure that you have `docker` (or `podman`) installed.
 
-The image is: <https://hub.docker.com/r/martinlaurent/ascli>.
-It is built from this [Dockerfile](Dockerfile).
+```bash
+docker --version
+```
 
-Ensure that you have `docker` (or `podman`) installed.
+**Wanna start quickly ?** With an interactive shell ? Execute this:
 
 ```bash
-docker --version
+docker run --tty --interactive --entrypoint bash martinlaurent/ascli:latest
+```
+
+Then, execute individual `ascli` commands such as:
+
+```bash
+ascli conf init
+ascli conf preset overview
+ascli conf ascp info
+ascli server ls /
 ```
 
-Download the script [`dascli`](../examples/dascli) from [the GIT repo](https://raw.githubusercontent.com/IBM/aspera-cli/main/examples/dascli) :
+That is simple, but there are limitations:
 
-> If you have installed `ascli`, the script `dascli` can also be found: `cp $(ascli conf gem path)/../examples/dascli ascli`
+- Everything happens in the container
+- Any generated file in the container will be lost on container (shell) exit. Including configuration files and downloaded files.
+- No possibility to upload files located on the host system
 
-Note that ascli is run inside the container, so transfers are also executed inside the container and do not have access to host storage by default.
+The container image is built from this [Dockerfile](Dockerfile): the entry point is `ascli` and the default command is `help`.
 
-Some environment variables can be set to alter the behaviour of the script:
+The container can also be execute for individual commands like this: (add `ascli` commands and options at the end of the command line, e.g. `-v` to display the version)
 
-| env var     | description                        | default                  | example                  |
-|-------------|------------------------------------|--------------------------|--------------------------|
-| ASCLI__HOME  | configuration folder (persistency) | `$HOME/.aspera/ascli` | `$HOME/.ascliconfig`     |
-| docker_args | additional options to `docker`     | &lt;empty&gt;            | `--volume /Users:/Users` |
-| image       | container image name               | martinlaurent/ascli      |                          |
-| version     | container image version            | latest                   | `4.8.0.pre`              |
+```bash
+docker run --rm --tty --interactive martinlaurent/ascli:latest
+```
+
+For more convenience, you may define a shell alias:
+
+```bash
+alias ascli='docker run --rm --tty --interactive martinlaurent/ascli:latest'
+```
+
+Then, you can execute the container like a local command:
+
+```bash
+ascli -v
+```
+
+```text
+4.12.0
+```
+
+In order to keep persistency of configuration on the host,
+you should mount your user's config folder to the container.
+To enable write access, a possibility is to run as `root` in the container (and set the default configuration folder to `/home/cliuser/.aspera/ascli`).
+Add options:
+
+```bash
+--user root --env ASCLI_HOME=/home/cliuser/.aspera/ascli --volume $HOME/.aspera/ascli:/home/cliuser/.aspera/ascli
+```
 
-The wrapping script maps the folder `$ASCLI__HOME` on host to `/home/cliuser/.aspera/ascli` in the container.
+> **Note:** if you are using a `podman machine`, e.g. on Macos , make sure that the folder is also shared between the VM and the host, so that sharing is: container &rarr; VM &rarr; Host: `podman machine init ... --volume="/Users:/Users"`
+
+As shown in the quick start, if you prefer to keep a running container with a shell and `ascli` available,
+you can change the entry point, add option:
+
+```bash
+--entrypoint bash
+```
+
+You may also probably want that files downloaded in the container are in fact placed on the host.
+In this case you need also to mount the shared transfer folder:
+
+```bash
+--volume $HOME/xferdir:/xferfiles
+```
+
+> **Note:** ascli is run inside the container, so transfers are also executed inside the container and do not have access to host storage by default.
+
+And if you want all the above, simply use all the options:
+
+```bash
+alias asclish="docker run --rm --tty --interactive --user root --env ASCLI_HOME=/home/cliuser/.aspera/ascli --volume $HOME/.aspera/ascli:/home/cliuser/.aspera/ascli --volume $HOME/xferdir:/xferfiles --entrypoint bash martinlaurent/ascli:latest"
+```
+
+```bash
+export xferdir=$HOME/xferdir
+mkdir -p $xferdir
+chmod -R 777 $xferdir
+mkdir -p $HOME/.aspera/ascli
+asclish
+```
+
+A convenience sample script is also provided: download the script [`dascli`](../examples/dascli) from [the GIT repo](https://raw.githubusercontent.com/IBM/aspera-cli/main/examples/dascli) :
+
+> **Note:** If you have installed `ascli`, the script `dascli` can also be found: `cp $(ascli conf gem path)/../examples/dascli ascli`
+
+Some environment variables can be set for this script to adapt its behavior:
+
+| env var      | description                        | default                  | example                  |
+|--------------|------------------------------------|--------------------------|--------------------------|
+| ASCLI_HOME | configuration folder (persistency) | `$HOME/.aspera/ascli` | `$HOME/.ascliconfig`     |
+| docker_args  | additional options to `docker`     | &lt;empty&gt;            | `--volume /Users:/Users` |
+| image        | container image name               | martinlaurent/ascli      |                          |
+| version      | container image version            | latest                   | `4.8.0.pre`              |
+
+The wrapping script maps the folder `$ASCLI_HOME` on host to `/home/cliuser/.aspera/ascli` in the container.
 (value expected in the container).
 This allows having persistent configuration on the host.
 
@@ -221,21 +321,18 @@ Example of use:
 ```bash
 curl -o ascli https://raw.githubusercontent.com/IBM/aspera-cli/main/examples/dascli
 chmod a+x ascli
-export ASCLI__HOME=$HOME/.ascliconf
-mkdir -p $ASCLI__HOME
-chmod -R 777 $ASCLI__HOME
 export xferdir=$HOME/xferdir
 mkdir -p $xferdir
 chmod -R 777 $xferdir
-export docker_args="--volume $xferdir:/xferfolder"
+export docker_args="--volume $xferdir:/xferfiles"
 
 ./ascli conf init
 
-touch $xferdir/samplefile
-./ascli server upload /xferfolder/samplefile --to-folder=/Upload
+echo 'Local file to transfer' > $xferdir/samplefile.txt
+./ascli server upload /xferfiles/samplefile.txt --to-folder=/Upload
 ```
 
-> The local file (`samplefile`) is specified relative to storage view from container (`/xferfolder`) mapped to the host folder `$HOME/xferdir`
+> **Note:** The local file (`samplefile.txt`) is specified relative to storage view from container (`/xferfiles`) mapped to the host folder `$HOME/xferdir`
 
 ### <a id="ruby"></a>Ruby
 
@@ -243,7 +340,9 @@ Use this method to install on the native host.
 
 A ruby interpreter is required to run the tool or to use the gem and tool.
 
-Required Ruby version: >= 2.4. Deprecation notice: the minimum will be 2.7 in a future version.
+Required Ruby version: >= 2.4.
+
+> **Deprecation notice**: the minimum Ruby version will be 2.7 in a future version.
 
 *Ruby can be installed using any method* : rpm, yum, dnf, rvm, brew, windows installer, ... .
 
@@ -251,7 +350,7 @@ Refer to the following sections for a proposed method for specific operating sys
 
 The recommended installation method is `rvm` for systems with "bash-like" shell (Linux, macOS, Windows with cygwin, etc...).
 If the generic install is not suitable (e.g. Windows, no cygwin), you can use one of OS-specific install method.
-If you have a simpler better way to install Ruby : use it ! (version: >= 2.4. Deprecation notice: the minimum will be 2.7 in a future version)
+If you have a simpler better way to install Ruby : use it !
 
 #### Generic: RVM: single user installation (not root)
 
@@ -318,7 +417,7 @@ Install Latest stable Ruby:
 - Download the latest Ruby installer **with devkit**. (Msys2 is needed to install some native extensions, such as `grpc`)
 - Execute the installer which installs by default in: `C:\RubyVV-x64` (VV is the version number)
 - At the end of the installation procedure, the Msys2 installer is automatically executed, select option 3 (msys and mingw)
-- for the installation of 
+
 #### macOS: pre-installed or `brew`
 
 macOS 10.13+ (High Sierra) comes with a recent Ruby. So you can use it directly. You will need to install aspera-cli using `sudo` :
@@ -337,15 +436,20 @@ brew install ruby
 
 If your Linux distribution provides a standard ruby package, you can use it provided that the version is compatible (check at beginning of section).
 
-Example: Centos 8 Stream
+Example: RHEL 8 and 9: basic installation
+
+```bash
+yum module install ruby:3.1
+```
+
+Example: RHEL 8, Centos 8 Stream: with extensions to compile native gems
 
 ```bash
 yum install make automake gcc gcc-c++ kernel-devel
 yum install redhat-rpm-config
 dnf module reset ruby
-dnf module enable ruby:3.0
-dnf module -y install ruby:3.0/common
-gem install aspera-cli
+dnf module enable ruby:3.1
+dnf module -y install ruby:3.1/common
 ```
 
 Other examples:
@@ -398,7 +502,7 @@ If you already have a Java JVM on your system (`java`), it is possible to use `j
 
 <https://www.jruby.org/download>
 
-Note that using jruby the startup time is longer than the native ruby, but transfer speed is not impacted (executed by `ascp` binary).
+> **Note:** Using jruby the startup time is longer than the native ruby, but the transfer speed is not impacted (executed by `ascp` binary).
 
 ### <a id="the_gem"></a>`aspera-cli` gem
 
@@ -427,7 +531,7 @@ ascli conf check_update
 Most file transfers will be done using the FASP protocol, using `ascp`.
 Only two additional files are required to perform an Aspera Transfer, which are part of Aspera SDK:
 
-- ascp
+- `ascp`
 - aspera-license (in same folder, or ../etc)
 
 This can be installed either be installing an Aspera transfer software, or using an embedded command:
@@ -467,7 +571,8 @@ Use of a local client ([`direct`](#agt_direct) transfer agent) is one of them, b
 
 ### <a id="offline_install"></a>Installation in air gapped environment
 
-Note that currently no pre-packaged version exist yet.
+> **Note:** no pre-packaged version is provided.
+
 A method to build one is provided here:
 
 The procedure:
@@ -528,7 +633,7 @@ The `aspera-cli` Gem provides a command line interface (CLI) which interacts wit
 - Supports most Aspera server products (on-premise and SaaS)
 - Any command line options (products URL, credentials or any option) can be provided on command line, in configuration file, in env var, in files
 - Supports Commands, Option values and Parameters shortcuts
-- FASP [Transfer Agents](#agents) can be: local ascp, or Connect Client, or any transfer node
+- FASP [Transfer Agents](#agents) can be: local `ascp`, or Connect Client, or any transfer node
 - Transfer parameters can be altered by modification of [*transfer-spec*](#transferspec), this includes requiring multi-session
 - Allows transfers from products to products, essentially at node level (using the node transfer agent)
 - Supports FaspStream creation (using Node API)
@@ -551,14 +656,14 @@ Not all `ascli` features are fully documented here, the user may explore command
 
 If you want to use `ascp` directly as a command line, refer to IBM Aspera documentation of either [Desktop Client](https://www.ibm.com/docs/en/asdc), [Endpoint](https://www.ibm.com/docs/en/ahte) or [Transfer Server](https://www.ibm.com/docs/en/ahts) where [a section on `ascp` can be found](https://www.ibm.com/docs/en/ahts/4.4?topic=linux-ascp-transferring-from-command-line).
 
-Using `ascli` with plugin `server` for command line gives advantages over ascp:
+Using `ascli` with plugin `server` for command line gives advantages over `ascp`:
 
 - automatic resume on error
 - configuration file
 - choice of transfer agents
 - integrated support of multi-session
 
-Moreover all `ascp` options are supported either through transfer spec parameters and with the possibility to provide `ascp` arguments directly when the `direct` agent is used (`EX_ascp_args`).
+Moreover all `ascp` options are supported either through transfer spec parameters and with the possibility to provide `ascp` arguments directly when the `direct` agent is used (`ascp_args`).
 
 ### <a id="parsing"></a>Command line parsing, Special Characters
 
@@ -604,16 +709,17 @@ ERROR: Argument: unprocessed values: ["2", "3"]
 ```
 
 `config echo` displays the value of the first argument using Ruby syntax: it surrounds a string with `"` and add `\` before special characters.
-Note that it gets its value after shell command line parsing and `ascli` extended value parsing.
+
+> **Note:** It gets its value after shell command line parsing and `ascli` extended value parsing.
 
 In the following examples (using a POSIX shell, such as `bash`), several sample commands are provided when equivalent.
-For all example, most of special character handling is not specific to `ascli`: It depoends on the underlying syntax: shell , JSON, etc...
+For all example, most of special character handling is not specific to `ascli`: It depends on the underlying syntax: shell , JSON, etc...
 Depending on the case, a different `format` is used to display the actual value.
 
 For example, in the simple string `Hello World`, the space character is special for the shell, so it must be escaped so that a single value is represented.
 
 Double quotes are processed by the shell to create a single string argument.
-For POSIX shells, single quotes can also be used in this case, or protext the special character ` ` (space) with a backslash.
+For POSIX shells, single quotes can also be used in this case, or protect the special character ` ` (space) with a backslash. <!-- markdownlint-disable-line -->
 
 ```bash
 ascli conf echo "Hello World" --format=text
@@ -628,8 +734,9 @@ Hello World
 #### Using a shell variable, parsed by shell, in an extended value
 
 To be evaluated by shell, the shell variable must not be in single quotes.
-Note we use a simple variable here: the variable is not necessarily an environment variable.
-Even if the variable contains spaces it makes only one argument to `ascli` because word parsing is made before variable expansion by shell. 
+Even if the variable contains spaces it makes only one argument to `ascli` because word parsing is made before variable expansion by shell.
+
+> **Note:** we use a simple variable here: the variable is not necessarily an environment variable.
 
 ```bash
 MYVAR="Hello World"
@@ -702,9 +809,9 @@ ascli conf echo @ruby:"{'title'=>%q{Test \" ' & \\\\}}" --format=json
 {"title":"Test \" ' & \\"}
 ```
 
-#### Reading special characters interractively
+#### Reading special characters interactively
 
-If `ascli` is used interractively (a user typing on terminal), it is easy to require the user to type values:
+If `ascli` is used interactively (a user typing on terminal), it is easy to require the user to type values:
 
 ```bash
 ascli conf echo @ruby:"{'title'=>gets.chomp}" --format=json
@@ -787,7 +894,7 @@ ascli config echo -- --sample
 "--sample"
 ```
 
-Note that here, `--sample` is taken as an argument, and not as an option, due to `--`.
+> **Note:** Here, `--sample` is taken as an argument, and not as an option, due to `--`.
 
 Options can be optional or mandatory, with or without (hardcoded) default value. Options can be placed anywhere on command line and evaluated in order.
 
@@ -860,7 +967,7 @@ The style of output can be set using the `format` parameter, supporting:
 
 Table output can be filtered using the `select` parameter. Example:
 
-```javascript
+```bash
 ascli aoc admin res user list --fields=name,email,ats_admin --query=@json:'{"sort":"name"}' --select=@json:'{"ats_admin":true}'
 ```
 
@@ -873,7 +980,7 @@ ascli aoc admin res user list --fields=name,email,ats_admin --query=@json:'{"sor
 :...............................:..................................:...........:
 ```
 
-Note that `select` filters selected elements from the result of API calls, while the `query` parameters gives filtering parameters to the API when listing elements.
+> **Note:** `select` filters selected elements from the result of API calls, while the `query` parameters gives filtering parameters to the API when listing elements.
 
 #### Verbosity of output
 
@@ -913,7 +1020,9 @@ The extended value syntax is:
 <0 or more decoders><0 or 1 reader><nothing or some text value>
 ```
 
-The difference between reader and decoder is order and ordinality. Both act like a function of value on right hand side. Decoders are at the beginning of the value, followed by a single optional reader, followed by the optional value.
+The difference between reader and decoder is order and cardinality.
+Both act like a function of value on right hand side.
+Decoders are at the beginning of the value, followed by a single optional reader, followed by the optional value.
 
 The following "readers" are supported (returns value in []):
 
@@ -923,13 +1032,13 @@ The following "readers" are supported (returns value in []):
 - @path:PATH   : [String] performs path expansion (prefix `~/` is replaced with the users home folder), e.g. `--config-file=@path:~/sample_config.yml`
 - @env:ENVVAR  : [String] read from a named env var, e.g.--password=@env:MYPASSVAR
 - @stdin:      : [String] read from stdin (no value on right)
-- @preset:NAME : [Hash] get whole option preset value by name. Subvalues can also be used using `.` as separator. e.g. foo.bar is conf[foo][bar]
+- @preset:NAME : [Hash] get whole option preset value by name. Sub-values can also be used using `.` as separator. e.g. `foo.bar` is `conf[foo][bar]`
 
 In addition it is possible to decode a value, using one or multiple decoders :
 
 - @base64: [String] decode a base64 encoded string
 - @json: [any] decode JSON values (convenient to provide complex structures)
-- @zlib: [String] uncompress data
+- @zlib: [String] un-compress data
 - @ruby: [any] execute ruby code
 - @csvt: [Array] decode a titled CSV value
 - @lines: [Array] split a string in multiple lines and return an array
@@ -944,10 +1053,10 @@ Example: read the content of the specified file, then, base64 decode, then unzip
 ascli config echo @zlib:@base64:@file:myfile.dat
 ```
 
-Example: create a value as a hash, with one key and the value is read from a file:
+Example: Create a value as a hash, with one key and the value is read from a file:
 
 ```bash
-ascli config echo @ruby:'{"token_verification_key"=>File.read("pubkey.txt")}'
+ascli config echo @ruby:'{"token_verification_key"=>File.read("mykey.txt")}'
 ```
 
 Example: read a csv file and create a list of hash for bulk provisioning:
@@ -977,7 +1086,7 @@ ascli config echo @csvt:@file:test.csv
 
 Example: create a hash and include values from preset named "config" of config file in this hash
 
-```javascript
+```bash
 ascli config echo @incps:@json:'{"hello":true,"incps":["config"]}'
 ```
 
@@ -985,7 +1094,7 @@ ascli config echo @incps:@json:'{"hello":true,"incps":["config"]}'
 {"version"=>"0.9", "hello"=>true}
 ```
 
-Note that `@incps:@json:'{"incps":["config"]}'` or `@incps:@ruby:'{"incps"=>["config"]}'` is equivalent to: `@preset:config`
+> **Note:** `@incps:@json:'{"incps":["config"]}'` or `@incps:@ruby:'{"incps"=>["config"]}'` are equivalent to: `@preset:config`
 
 ### <a id="native"></a>Structured Value
 
@@ -1027,7 +1136,7 @@ ascli config folder
 C:\Users\Kenji\.aspera\ascli
 ```
 
-When OAuth is used (AoC, Faspex4 apiv4, Faspex5) `ascli` keeps a cache of generated bearer tokens in `[config folder]/persist_store` by default.
+When OAuth is used (AoC, Faspex4 api v4, Faspex5) `ascli` keeps a cache of generated bearer tokens in `[config folder]/persist_store` by default.
 Option `cache_tokens` (**yes**/no) allows to control if Oauth tokens are cached on file system, or generated for each request.
 The command `config flush_tokens` deletes all existing tokens.
 Tokens are kept on disk for a maximum of 30 minutes (`TOKEN_CACHE_EXPIRY_SEC`) and garbage collected after that.
@@ -1061,7 +1170,7 @@ ascli config preset set|delete|show|initialize|update <option preset>
 The command `update` allows the easy creation of [option preset](#lprt) by simply providing the options in their command line format, e.g. :
 
 ```bash
-ascli config preset update demo_server --url=ssh://demo.asperasoft.com:33001 --username=asperaweb --password=_pass_here_ --ts=@json:'{"precalculate_job_size":true}'
+ascli config preset update demo_server --url=ssh://demo.asperasoft.com:33001 --username=asperaweb --password=my_password_here --ts=@json:'{"precalculate_job_size":true}'
 ```
 
 - This creates a [option preset](#lprt) `demo_server` with all provided options.
@@ -1069,13 +1178,13 @@ ascli config preset update demo_server --url=ssh://demo.asperasoft.com:33001 --u
 The command `set` allows setting individual options in a [option preset](#lprt).
 
 ```bash
-ascli config preset set demo_server password _pass_here_
+ascli config preset set demo_server password my_password_here
 ```
 
 The command `initialize`, like `update` allows to set several parameters at once, but it deletes an existing configuration instead of updating it, and expects a [*Structured Value*](#native).
 
-```javascript
-ascli config preset initialize demo_server @json:'{"url":"ssh://demo.asperasoft.com:33001","username":"asperaweb","password":"_pass_here_","ts":{"precalculate_job_size":true}}'
+```bash
+ascli config preset initialize demo_server @json:'{"url":"ssh://demo.asperasoft.com:33001","username":"asperaweb","password":"my_pass_here","ts":{"precalculate_job_size":true}}'
 ```
 
 A full terminal based overview of the configuration can be displayed using:
@@ -1097,6 +1206,8 @@ If necessary, the configuration file can opened in a text editor with:
 ascli config open
 ```
 
+> **Note:** this starts the editor specified by env var `EDITOR` if defined.
+
 Older format for commands are still supported:
 
 ```bash
@@ -1115,7 +1226,7 @@ This preset name is reserved and contains an array of key-value , where the key
 
 When a plugin is invoked, the preset associated with the name of the plugin is loaded, unless the option --no-default (or -N) is used.
 
-Note that special plugin name: `config` can be associated with a preset that is loaded initially, typically used for default values.
+> **Note:** Special plugin name: `config` can be associated with a preset that is loaded initially, typically used for default values.
 
 Operations on this preset are done using regular `config` operations:
 
@@ -1127,13 +1238,13 @@ ascli config preset set default _plugin_name_ _default_preset_for_plugin_
 ascli config preset get default _plugin_name_
 ```
 
-```javascript
+```json
 "_default_preset_for_plugin_"
 ```
 
-#### <a id="lplugconf"></a>Special Plugin: config
+#### <a id="config"></a>Plugin: `config`: CLI Configuration
 
-Plugin `config` (not to be confused with Option preset config) is used to configure `ascli` but it also contains global options.
+Plugin `config` is used to configure `ascli` and also contains global options.
 
 When `ascli` starts, it looks for the `default` Option preset and if there is a value for `config`, if so, it loads the option values for any plugin used.
 
@@ -1197,7 +1308,7 @@ cli_default:
 demo_server:
   url: ssh://demo.asperasoft.com:33001
   username: asperaweb
-  password: _pass_here_
+  password: my_password_here
 ```
 
 We can see here:
@@ -1272,13 +1383,13 @@ ascli config preset unset cli_default interactive
 Example: Define options using command line:
 
 ```bash
-ascli -N --url=_url_here_ --password=_pass_here_ --username=_name_here_ node --show-config
+ascli -N --url=_url_here_ --password=my_password_here --username=_name_here_ node --show-config
 ```
 
 Example: Define options using a hash:
 
-```javascript
-ascli -N --preset=@json:'{"url":"_url_here_","password":"_pass_here_","username":"_name_here_"}' node --show-config
+```bash
+ascli -N --preset=@json:'{"url":"_url_here_","password":"my_password_here","username":"_name_here_"}' node --show-config
 ```
 
 #### Shares Examples
@@ -1288,7 +1399,7 @@ only username/password and url are required (either on command line, or from con
 Those can usually be provided on the command line:
 
 ```bash
-ascli shares repo browse / --url=https://10.25.0.6 --username=john --password=_pass_here_
+ascli shares repo browse / --url=https://10.25.0.6 --username=john --password=my_password_here
 ```
 
 This can also be provisioned in a config file:
@@ -1298,19 +1409,19 @@ This can also be provisioned in a config file:
 ```bash
 ascli config preset set shares06 url https://10.25.0.6
 ascli config preset set shares06 username john
-ascli config preset set shares06 password _pass_here_
+ascli config preset set shares06 password my_password_here
 ```
 
 This can also be done with one single command:
 
-```javascript
-ascli config preset init shares06 @json:'{"url":"https://10.25.0.6","username":"john","password":"_pass_here_"}'
+```bash
+ascli config preset init shares06 @json:'{"url":"https://10.25.0.6","username":"john","password":"my_password_here"}'
 ```
 
 or
 
 ```bash
-ascli config preset update shares06 --url=https://10.25.0.6 --username=john --password=_pass_here_
+ascli config preset update shares06 --url=https://10.25.0.6 --username=john --password=my_password_here
 ```
 
 - Define this [option preset](#lprt) as the default [option preset](#lprt) for the specified plugin (`shares`)
@@ -1347,20 +1458,20 @@ The vault is used with options `vault` and `vault_password`.
 
 `vault_password` specifies the password for the vault.
 Although it can be specified on command line, for security reason you can hide the value.
-For example it can be specified on command line like this:
+For example it can be securely specified on command line like this:
 
 ```bash
 export ASCLI_VAULT_PASSWORD
 read -s ASCLI_VAULT_PASSWORD
 ```
 
-#### Vault: System keychain
+#### Vault: System key chain
 
-> **macOS only**
+> **Note:** **macOS only**
 
-It is possible to manage secrets in macOS keychain (only read supported currently).
+It is possible to manage secrets in macOS key chain (only read supported currently).
 
-```json
+```bash
 --vault=@json:'{"type":"system","name":"ascli"}'
 ```
 
@@ -1368,11 +1479,11 @@ It is possible to manage secrets in macOS keychain (only read supported currentl
 
 It is possible to store and use secrets encrypted in a file.
 
-```json
+```bash
 --vault=@json:'{"type":"file","name":"vault.bin"}'
 ```
 
-`name` is the file path, absolute or relative to the config folder `ASCLI__HOME`.
+`name` is the file path, absolute or relative to the config folder `ASCLI_HOME`.
 
 #### Vault: Operations
 
@@ -1386,7 +1497,7 @@ Then secrets can be manipulated using commands:
 - `delete`
 
 ```bash
-ascli conf vault create mylabel @json:'{"password":"__value_here__","description":"for this account"}'
+ascli conf vault create mylabel @json:'{"password":"my_password_here","description":"for this account"}'
 ```
 
 #### <a id="config_finder"></a>Configuration Finder
@@ -1395,6 +1506,24 @@ When a secret is needed by a sub command, the command can search for existing co
 
 The lookup is done by comparing the service URL and username (or access key).
 
+#### Securing passwords and secrets
+
+A passwords can be saved in clear in a [option preset](#lprt) together with other account information (URL, username, etc...).
+Example:
+
+```bash
+`ascli` conf preset update myconf --url=... --username=... --password=...
+```
+
+For a more secure storage one can do:
+
+```bash
+`ascli` conf preset update myconf --url=... --username=... --password=@val:@vault:myconf.password
+`ascli` conf vault create myconf @json:'{"password":"my_password_here"}'
+```
+
+> **Note:** use `@val:` in front of `@vault:` so that the extended value is not evaluated.
+
 ### <a id="private_key"></a>Private Key
 
 Some applications allow the user to be authenticated using a private key (Server, AoC, Faspex5, ...).
@@ -1413,9 +1542,9 @@ Typically, in `$HOME/.ssh` or `$HOME/.aspera/ascli`:
 PRIVKEYFILE=~/.aspera/ascli/my_private_key
 ```
 
-Several methods can be used to generate a key pair:
+Several methods can be used to generate a key pair.
 
-- `ascli`
+#### `ascli` for key generation
 
 The generated key is of type RSA, by default: 4096 bit.
 For convenience, the public key is also extracted with extension `.pub`.
@@ -1425,7 +1554,7 @@ The key is not passphrase protected.
 ascli config genkey ${PRIVKEYFILE} 4096
 ```
 
-- `ssh-keygen`
+#### `ssh-keygen`
 
 Both private and public keys are generated, option `-N` is for passphrase.
 
@@ -1433,24 +1562,27 @@ Both private and public keys are generated, option `-N` is for passphrase.
 ssh-keygen -t rsa -b 4096 -m PEM -N '' -f ${PRIVKEYFILE}
 ```
 
-- `openssl`
+#### `openssl`
 
 To generate a private key pair with a passphrase the following can be used on any system:
-
+<!-- spellchecker: disable -->
 ```bash
 openssl genrsa -passout pass:_passphrase_here_ -out ${PRIVKEYFILE}.protected 4096
 openssl rsa -pubout -in ${PRIVKEYFILE} -out ${PRIVKEYFILE}.pub
 ```
+<!-- spellchecker: enable -->
 
 `openssl` is sometimes compiled to support option `-nodes` (no DES, i.e. no passphrase, e.g. on macOS).
 In that case, add option `-nodes` instead of `-passout pass:_passphrase_here_` to generate a key without passphrase.
 
 If option `-nodes` is not available, the passphrase can be removed using this method:
 
+<!-- spellchecker: disable -->
 ```bash
 openssl rsa -passin pass:_passphrase_here_ -in ${PRIVKEYFILE}.protected -out ${PRIVKEYFILE}
 rm -f ${PRIVKEYFILE}.protected
 ```
+<!-- spellchecker: enable -->
 
 To change (or add) the passphrase for a key do:
 
@@ -1494,9 +1626,9 @@ ascli conf plugin list
 
 #### <a id="createownplugin"></a>Create your own plugin
 
-By default plugins are looked-up in folders specifed by (multi-value) option `plugin_folder`:
+By default plugins are looked-up in folders specified by (multi-value) option `plugin_folder`:
 
-```javascript
+```bash
 ascli --show-config --select=@json:'{"key":"plugin_folder"}'
 ```
 
@@ -1545,7 +1677,7 @@ Available loggers: `stdout`, `stderr`, `syslog`.
 
 Available levels: `debug`, `info`, `warn`, `error`.
 
-Note that when using the `direct` agent (`ascp`), additional transfer logs can be activated using `ascp` option `EX_ascp_args`, see [`direct`](#agt_direct).
+> **Note:** When using the `direct` agent (`ascp`), additional transfer logs can be activated using `ascp` options and `ascp_args`, see [`direct`](#agt_direct).
 
 Examples:
 
@@ -1591,7 +1723,7 @@ Like any other option, those can be set either on command line, or in config fil
 
 Example:
 
-```javascript
+```bash
 ascli aoc admin res package list --http-options=@json:'{"read_timeout":10.0}'
 ```
 
@@ -1623,9 +1755,9 @@ Refer to the following sections.
 There are two possibilities to define an HTTP proxy to be used when Ruby HTTP is used.
 
 The `http_proxy` environment variable (**lower case**, preferred) can be set to the URL of the proxy, e.g. `http://myproxy.org.net:3128`.
-Refer to [Ruby findproxy](https://rubyapi.org/3.0/o/uri/generic#method-i-find_proxy).
+Refer to [Ruby find proxy](https://rubyapi.org/3.0/o/uri/generic#method-i-find_proxy).
 
-> Note: Ruby expects a URL and `myproxy.org.net:3128` alone is **not** accepted.
+> **Note:** Ruby expects a URL and `myproxy.org.net:3128` alone is **not** accepted.
 
 ```bash
 export http_proxy=http://proxy.example.com:3128
@@ -1678,8 +1810,7 @@ ascli --proxy-credentials=@list::__username_here__:__password_here__ ...
 
 ### Proxy for Legacy Aspera HTTP/S Fallback
 
-To specify a proxy for legacy HTTP fallback, set the [*transfer-spec*](#transferspec) parameter: `EX_http_proxy_url` (only supported with the `direct` agent).
-(It is also possible to use `EX_ascp_args` and native options in `direct`)
+Only supported with the `direct` agent: To specify a proxy for legacy HTTP fallback, use `ascp` native option `-x` and `ascp_args`: `--transfer-info=@json:'{"ascp_args":["-x","url_here"]}'`. Alternatively, set the [*transfer-spec*](#transferspec) parameter: `EX_http_proxy_url`.
 
 ### FASP proxy (forward) for transfers
 
@@ -1687,9 +1818,10 @@ To specify a FASP proxy (forward), set the [*transfer-spec*](#transferspec) para
 
 ### <a id="client"></a>FASP configuration
 
-The `config` plugin also allows specification for the use of a local FASP client. It provides the following commands for `ascp` subcommand:
+The `config` plugin also allows specification for the use of a local FASP **client**.
+It provides the following commands for `ascp` subcommand:
 
-- `show` : shows the path of ascp used
+- `show` : shows the path of `ascp` used
 - `use` : list,download connect client versions available on internet
 - `products` : list Aspera transfer products available locally
 - `connect` : list,download connect client versions available on internet
@@ -1718,9 +1850,9 @@ ascli config ascp info
 
 #### Selection of `ascp` location for [`direct`](#agt_direct) agent
 
-By default, `ascli` uses any found local product with ascp, including SDK.
+By default, `ascli` uses any found local product with `ascp`, including SDK.
 
-To temporarily use an alternate ascp path use option `ascp_path` (`--ascp-path=`)
+To temporarily use an alternate `ascp` path use option `ascp_path` (`--ascp-path=`)
 
 For a permanent change, the command `config ascp use` sets the same parameter for the global default.
 
@@ -1771,11 +1903,11 @@ ascli config ascp products list
 
 #### Selection of local client for `ascp` for [`direct`](#agt_direct) agent
 
-If no ascp is selected, this is equivalent to using option: `--use-product=FIRST`.
+If no `ascp` is selected, this is equivalent to using option: `--use-product=FIRST`.
 
-Using the option use_product finds the ascp binary of the selected product.
+Using the option use_product finds the `ascp` binary of the selected product.
 
-To permanently use the ascp of a product:
+To permanently use the `ascp` of a product:
 
 ```bash
 ascli config ascp products use 'Aspera Connect'
@@ -1821,16 +1953,16 @@ ascli config ascp connect version 'Aspera Connect for Mac Intel' download enclos
 ```
 
 ```output
-Time: 00:00:02 ======================================================================= 100% 27766 KB/sec Time: 00:00:02
+Time: 00:00:02 =========================================================== 100% 27766 KB/sec Time: 00:00:02
 Downloaded: IBMAsperaConnectInstaller-3.11.2.63.dmg
 ```
 
-### <a id="agents"></a>Transfer Agents
+### <a id="agents"></a>Transfer Clients: Agents
 
 Some of the actions on Aspera Applications lead to file transfers (upload and download) using the FASP protocol (`ascp`).
 
 When a transfer needs to be started, a [*transfer-spec*](#transferspec) has been internally prepared.
-This [*transfer-spec*](#transferspec) will be executed by a transfer client, here called "Transfer Agent".
+This [*transfer-spec*](#transferspec) will be executed by a transfer client, here called **Transfer Agent**.
 
 There are currently 3 agents:
 
@@ -1840,15 +1972,15 @@ There are currently 3 agents:
 - [`httpgw`](#agt_httpgw) : use of an Aspera HTTP Gateway
 - [`trsdk`](#agt_trsdk) : use of Aspera Transfer SDK
 
-Note that all transfer operation are seen from the point of view of the agent.
-For instance, a node agent making an "upload", or "package send" operation,
+> **Note:** All transfer operations are seen from the point of view of the agent.
+For example, a node agent executing an "upload", or "package send" operation
 will effectively push files to the related server from the agent node.
 
-`ascli` standardizes on the use of a [*transfer-spec*](#transferspec) instead of *raw* ascp options to provide parameters for a transfer session, as a common method for those three Transfer Agents.
+`ascli` standardizes on the use of a [*transfer-spec*](#transferspec) instead of *native* `ascp` options to provide parameters for a transfer session, as a common method for those three Transfer Agents.
 
 #### <a id="agt_direct"></a>Direct
 
-The `direct` agent directly executes a local ascp.
+The `direct` agent directly executes a local `ascp`.
 This is the default agent for `ascli`.
 This is equivalent to option `--transfer=direct`.
 `ascli` will detect locally installed Aspera products, including SDK, and use `ascp` from that component.
@@ -1856,18 +1988,18 @@ Refer to section [FASP](#client).
 
 The `transfer_info` option accepts the following optional parameters to control multi-session, Web Socket Session and Resume policy:
 
-<table>
-<tr><th>Name</th><th>Type</th><th>Description</th></tr>
-<tr><td>wss</td><td>Bool</td><td>Web Socket Session<br/>Enable use of web socket session in case it is available<br/>Default: false</td></tr>
-<tr><td>spawn_timeout_sec</td><td>Float</td><td>Multi session<br/>Verification time that ascp is running<br/>Default: 3</td></tr>
-<tr><td>spawn_delay_sec</td><td>Float</td><td>Multi session<br/>Delay between startup of sessions<br/>Default: 2</td></tr>
-<tr><td>multi_incr_udp</td><td>Bool</td><td>Multi Session<br/>Increment UDP port on multi-session<br/>If true, each session will have a different UDP port starting at `fasp_port` (or default 33001)<br/>Else, each session will use `fasp_port` (or `ascp` default)<br/>Default: true</td></tr>
-<tr><td>resume</td><td>Hash</td><td>Resume<br/>parameters<br/>See below</td></tr>
-<tr><td>resume.iter_max</td><td>int</td><td>Resume<br/>Max number of retry on error<br/>Default: 7</td></tr>
-<tr><td>resume.sleep_initial</td><td>int</td><td>Resume<br/>First Sleep before retry<br/>Default: 2</td></tr>
-<tr><td>resume.sleep_factor</td><td>int</td><td>Resume<br/>Multiplier of sleep period between attempts<br/>Default: 2</td></tr>
-<tr><td>resume.sleep_max</td><td>int</td><td>Resume<br/>Default: 60</td></tr>
-</table>
+| Name                 | Type  | Description |
+|----------------------|-------|-------------|
+| wss                  | Bool  | Web Socket Session<br/>Enable use of web socket session in case it is available<br/>Default: true |
+| ascp_args            | Array | Array of strings with native ascp arguments<br/>Use this instead of deprecated `EX_ascp_args`.<br/>Default: [] |
+| spawn_timeout_sec    | Float | Multi session<br/>Verification time that `ascp` is running<br/>Default: 3 |
+| spawn_delay_sec      | Float | Multi session<br/>Delay between startup of sessions<br/>Default: 2 |
+| multi_incr_udp       | Bool  | Multi Session<br/>Increment UDP port on multi-session<br/>If true, each session will have a different UDP port starting at `fasp_port` (or default 33001)<br/>Else, each session will use `fasp_port` (or `ascp` default)<br/>Default: true |
+| resume               | Hash  | Resume<br/>parameters<br/>See below |
+| resume.iter_max      | int   | Resume<br/>Max number of retry on error<br/>Default: 7 |
+| resume.sleep_initial | int   | Resume<br/>First Sleep before retry<br/>Default: 2 |
+| resume.sleep_factor  | int   | Resume<br/>Multiplier of sleep period between attempts<br/>Default: 2 |
+| resume.sleep_max     | int   | Resume<br/>Default: 60 |
 
 In case of transfer interruption, the agent will **resume** a transfer up to `iter_max` time.
 Sleep between iterations is:
@@ -1885,40 +2017,40 @@ ascli config ascp errors
 
 Examples:
 
-```javascript
+```bash
 ascli ... --transfer-info=@json:'{"wss":true,"resume":{"iter_max":20}}'
 ascli ... --transfer-info=@json:'{"spawn_delay_sec":2.5,"multi_incr_udp":false}'
 ```
 
-Note that the `direct` agent supports additional `transfer_spec` parameters starting with `EX_` (extended).
-In particular the field, `EX_ascp_args` which is a list of additional command line options to `ascp`.
+> **Note:** The `direct` agent supports additional `transfer_spec` parameters starting with `EX_` (extended).
+But it is preferred to use the option `transfer_info` with parameter `ascp_args`.
 
-This can be useful to activate logging using option `-L` of ascp.
-For example the option `--ts=@json:'{"EX_ascp_args":["-DDL-"]}'` will activate debug level 2 for `ascp` (`DD`), and display those logs on the terminal (`-`).
+This can be useful to activate logging using option `-L` of `ascp`.
+For example the option `--transfer-info=@json:'{"ascp_args":["-DDL-"]}'` will activate debug level 2 for `ascp` (`DD`), and display those logs on the terminal (`-`).
 This is useful if the transfer fails.
-To store ascp logs in file `aspera-scp-transfer.log` in a folder, use `--ts=@json:'{"EX_ascp_args":["-L","/path/to/folder"]}'`.
+To store `ascp` logs in file `aspera-scp-transfer.log` in a folder, use `--transfer-info=@json:'{"ascp_args":["-L","/path/to/folder"]}'`.
 
-> Implementation note: when transfer agent [`direct`](#agt_direct) is used, the list of files to transfer is provided to `ascp` using either `--file-list` or `--file-pair-list` and a file list (or pair) file generated in a temporary folder. (unless `--file-list` or `--file-pair-list` is provided in option `ts` in `EX_ascp_args`).
+> **Note:** When transfer agent [`direct`](#agt_direct) is used, the list of files to transfer is provided to `ascp` using either `--file-list` or `--file-pair-list` and a file list (or pair) file generated in a temporary folder. (unless `--file-list` or `--file-pair-list` is provided using `transfer_info` parameter `ascp_args`).
 
 In addition to standard methods described in section [File List](#file_list), it is possible to specify the list of file using those additional methods:
 
 - Using the pseudo [*transfer-spec*](#transferspec) parameter `EX_file_list`
 
-```javascript
---sources=@ts --ts=@json:'{"EX_file_list":"filelist.txt"}'
+```bash
+--sources=@ts --ts=@json:'{"EX_file_list":"file_list.txt"}'
 ```
 
-- Using the pseudo [*transfer-spec*](#transferspec) parameter `EX_ascp_args`
+- Using option `transfer_info` parameter `ascp_args`
 
-```javascript
---sources=@ts --ts=@json:'{"EX_ascp_args":["--file-list","myfilelist"]}'
+```bash
+--sources=@ts --transfer-info=@json:'{"ascp_args":["--file-list","myfilelist"]}'
 ```
 
-> File lists is shown here, there are also similar options for file pair lists.
-
-> Those 2 additional methods avoid the creation of a copy of the file list: if the standard options `--sources=@lines:@file:... --src-type=...` are used, then the file is list read and parsed, and a new file list is created in a temporary folder.
-
-> Those methods have limitations: they apply **only** to the [`direct`](#agt_direct) transfer agent (i.e. local `ascp`) and not for Aspera on Cloud.
+> **Note:** File lists is shown here, there are also similar options for file pair lists.
+>
+> **Note:** Those 2 additional methods avoid the creation of a copy of the file list: if the standard options `--sources=@lines:@file:... --src-type=...` are used, then the file is list read and parsed, and a new file list is created in a temporary folder.
+>
+> **Note:** Those methods have limitations: they apply **only** to the [`direct`](#agt_direct) transfer agent (i.e. local `ascp`) and not for Aspera on Cloud.
 
 #### <a id="agt_connect"></a>IBM Aspera Connect Client GUI
 
@@ -1930,17 +2062,16 @@ By specifying option: `--transfer=node`, the CLI will start transfers in an Aspe
 Transfer Server using the Node API, either on a local or remote node.
 Parameters provided in option `transfer_info` are:
 
-<table>
-<tr><th>Name</th><th>Type</th><th>Description</th></tr>
-<tr><td>url</td><td>string</td><td>URL of the node API</br>Mandatory</td></tr>
-<tr><td>username</td><td>string</td><td>node api user or access key</br>Mandatory</td></tr>
-<tr><td>password</td><td>string</td><td>password, secret or bearer token</br>Mandatory</td></tr>
-<tr><td>root_id</td><td>string</td><td>password or secret</br>Mandatory only for bearer token</td></tr>
-</table>
+| Name | Type | Description |
+|------|------|-------------|
+| url | string | URL of the node API</br>Mandatory |
+| username | string | node api user or access key</br>Mandatory |
+| password | string | password, secret or bearer token</br>Mandatory |
+| root_id | string | password or secret</br>Mandatory only for bearer token |
 
 Like any other option, `transfer_info` can get its value from a pre-configured [option preset](#lprt) :
-`--transfer-info=@preset:<psetname>` or be specified using the extended value syntax :
-`--transfer-info=@json:'{"url":"https://...","username":"theuser","password":"_pass_here_"}'`
+`--transfer-info=@preset:_name_here_` or be specified using the extended value syntax :
+`--transfer-info=@json:'{"url":"https://...","username":"_user_here_","password":"my_password_here"}'`
 
 If `transfer_info` is not specified and a default node has been configured (name in `node` for section `default`) then this node is used by default.
 
@@ -1952,24 +2083,23 @@ If it possible to send using a HTTP gateway, in case FASP is not allowed.
 
 Parameters provided in option `transfer_info` are:
 
-<table>
-<tr><th>Name</th><th>Type</th><th>Description</th></tr>
-<tr><td>url</td><td>string</td><td>URL of the HTTP GW</br>Mandatory</td></tr>
-<tr><td>upload_bar_refresh_sec</td><td>float</td><td>Refresh rate for upload progress bar</td></tr>
-<tr><td>upload_chunksize</td><td>int</td><td>Size in bytes of chunks for upload</td></tr>
-</table>
+| Name                   | Type   | Description                           |
+|------------------------|--------|---------------------------------------|
+| url                    | string | URL of the HTTP GW</br>Mandatory      |
+| upload_bar_refresh_sec | float  | Refresh rate for upload progress bar  |
+| upload_chunk_size      | int    | Size in bytes of chunks for upload    |
 
 Example:
 
-```javascript
+```bash
 ascli faspex package recv --id=323 --transfer=httpgw --transfer-info=@json:'{"url":"https://asperagw.example.com:9443/aspera/http-gwy/v1"}'
 ```
 
-> The gateway only supports transfers authorized with a token.
+> **Note:** The gateway only supports transfers authorized with a token.
 
 #### <a id="agt_trsdk"></a>Transfer SDK
 
-Another possibility is to use the Transfer SDK daemon (asperatransferd).
+Another possibility is to use the Transfer SDK daemon (`asperatransferd`).
 
 By default it will listen on local port `55002` on `127.0.0.1`.
 
@@ -1981,11 +2111,12 @@ gem install grpc
 ```
 
 On Windows the compilation may fail for various reasons (3.1.1):
-
+<!-- spellchecker: disable -->
 - `cannot find -lx64-ucrt-ruby310`
    &rarr; copy the file `[Ruby main dir]\lib\libx64-ucrt-ruby310.dll.a` to `[Ruby main dir]\lib\libx64-ucrt-ruby310.a` (remove the dll extension)
 - `conflicting types for 'gettimeofday'`
   &rarr; edit the file `[Ruby main dir]/include/ruby-[version]/ruby/win32.h` and change the signature of `gettimeofday` to `gettimeofday(struct timeval *, void *)` ,i.e. change `struct timezone` to `void`
+<!-- spellchecker: enable -->
 
 ### <a id="transferspec"></a>Transfer Specification
 
@@ -2002,7 +2133,9 @@ is described in a [*transfer-spec*](#transferspec) (Transfer Specification), suc
 
 If needed, it is possible to modify or add any of the supported [*transfer-spec*](#transferspec) parameter using the `ts` option. The `ts` option accepts a [Structured Value](#native) containing one or several [*transfer-spec*](#transferspec) parameters. Multiple `ts` options on command line are cumulative.
 
-It is possible to specify ascp options when the `transfer` option is set to [`direct`](#agt_direct) using the special [*transfer-spec*](#transferspec) parameter: `EX_ascp_args`. Example: `--ts=@json:'{"EX_ascp_args":["-l","100m"]}'`. This is especially useful for ascp command line parameters not supported yet in the transfer spec.
+It is possible to specify `ascp` options when the `transfer` option is set to [`direct`](#agt_direct) using `transfer_info` option parameter: `ascp_args`.
+Example: `--transfer-info=@json:'{"ascp_args":["-l","100m"]}'`.
+This is especially useful for `ascp` command line parameters not supported in the transfer spec.
 
 The use of a [*transfer-spec*](#transferspec) instead of `ascp` parameters has the advantage of:
 
@@ -2018,13 +2151,13 @@ All standard [*transfer-spec*](#transferspec) parameters can be specified.
 
 References:
 
-- [Aspera Node API Documentation](https://developer.ibm.com/apis/catalog?search=%22aspera%20node%20api%22)&rarr;/opt/transfers
-- [Aspera Transfer SDK Documentation](https://developer.ibm.com/apis/catalog?search=%22aspera%20transfer%20sdk%22)&rarr;Guides&rarr;API Ref&rarr;Transfer Spec V1
+- [Aspera Node API Documentation](https://developer.ibm.com/apis/catalog?search=%22aspera%20node%20api%22) &rarr; /opt/transfers
+- [Aspera Transfer SDK Documentation](https://developer.ibm.com/apis/catalog?search=%22aspera%20transfer%20sdk%22) &rarr; Guides &rarr; API Ref &rarr; Transfer Spec V1
 - [Aspera Connect SDK](https://d3gcli72yxqn2z.cloudfront.net/connect/v4/asperaweb-4.js) &rarr; search `The parameters for starting a transfer.`
 
 Parameters can be displayed with commands:
 
-```javascript
+```bash
 ascli config ascp spec
 ascli config ascp spec --select=@json:'{"d":"Y"}' --fields=-d,n,c
 ```
@@ -2039,91 +2172,91 @@ Columns:
 
 Fields with EX_ prefix are extensions to transfer agent [`direct`](#agt_direct). (only in `ascli`).
 
-<table><tr><th>Field</th><th>Type</th><th>D</th><th>N</th><th>C</th><th>Description</th></tr>
-<tr><td>EX_ascp_args</td><td>array</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Add native command line arguments to ascp</td></tr>
-<tr><td>EX_at_rest_password</td><td>string</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>DEPRECATED: Prefer to use standard parameter: content_protection_password<br/>(env:ASPERA_SCP_FILEPASS)</td></tr>
-<tr><td>EX_file_list</td><td>string</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>source file list</td></tr>
-<tr><td>EX_file_pair_list</td><td>string</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>source file pair list</td></tr>
-<tr><td>EX_http_proxy_url</td><td>string</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Specify the proxy server address used by HTTP Fallback<br/>(-x {string})</td></tr>
-<tr><td>EX_http_transfer_jpeg</td><td>int</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>HTTP transfers as JPEG file<br/>(-j {int})</td></tr>
-<tr><td>EX_license_text</td><td>string</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>License file text override.<br/>By default ascp looks for license file near executable.<br/>(env:ASPERA_SCP_LICENSE)</td></tr>
-<tr><td>EX_no_read</td><td>bool</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>no read source<br/>(--no-read)</td></tr>
-<tr><td>EX_no_write</td><td>bool</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>no write on destination<br/>(--no-write)</td></tr>
-<tr><td>EX_proxy_password</td><td>string</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Password used for Aspera proxy server authentication.<br/>May be overridden by password in URL EX_fasp_proxy_url.<br/>(env:ASPERA_PROXY_PASS)</td></tr>
-<tr><td>EX_ssh_key_paths</td><td>array</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Use public key authentication for SSH and specify the private key file paths<br/>(-i {array})</td></tr>
-<tr><td>apply_local_docroot</td><td>bool</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>(--apply-local-docroot)</td></tr>
-<tr><td>authentication</td><td>string</td><td>&nbsp;</td><td>&nbsp;</td><td>Y</td><td>value=token for SSH bypass keys, else password asked if not provided.</td></tr>
-<tr><td>cipher</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>In transit encryption type.<br/>Allowed values: none, aes-128, aes-192, aes-256, aes-128-cfb, aes-192-cfb, aes-256-cfb, aes-128-gcm, aes-192-gcm, aes-256-gcm<br/>(-c (conversion){enum})</td></tr>
-<tr><td>cipher_allowed</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>returned by node API. Valid literals include "aes-128" and "none".</td></tr>
-<tr><td>content_protection</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>Enable client-side encryption at rest. (CSEAR, content protection)<br/>Allowed values: encrypt, decrypt<br/>(--file-crypt {enum})</td></tr>
-<tr><td>content_protection_password</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>Specifies CSEAR password. (content protection)<br/>(env:ASPERA_SCP_FILEPASS)</td></tr>
-<tr><td>cookie</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>Metadata for transfer specified by application<br/>(env:ASPERA_SCP_COOKIE)</td></tr>
-<tr><td>create_dir</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>Specifies whether to create new directories.<br/>(-d)</td></tr>
-<tr><td>delete_before_transfer</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>Before transfer, delete files that exist at the destination but not at the source.<br/>The source and destination arguments must be directories that have matching names.<br/>Objects on the destination that have the same name but different type or size as objects<br/>on the source are not deleted.<br/>(--delete-before-transfer)</td></tr>
-<tr><td>delete_source</td><td>bool</td><td>Y</td><td>Y</td><td>&nbsp;</td><td>Remove SRC files after transfer success<br/>(--remove-after-transfer)</td></tr>
-<tr><td>destination_root</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>Destination root directory.</td></tr>
-<tr><td>dgram_size</td><td>int</td><td>Y</td><td>Y</td><td>Y</td><td>UDP datagram size in bytes<br/>(-Z {int})</td></tr>
-<tr><td>direction</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>Direction of transfer (on client side)<br/>Allowed values: send, receive<br/>(--mode (conversion){enum})</td></tr>
-<tr><td>exclude_newer_than</td><td>int</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>skip src files with mtime > arg<br/>(--exclude-newer-than {int})</td></tr>
-<tr><td>exclude_older_than</td><td>int</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>skip src files with mtime < arg<br/>(--exclude-older-than {int})</td></tr>
-<tr><td>fasp_port</td><td>int</td><td>Y</td><td>Y</td><td>Y</td><td>Specifies fasp (UDP) port.<br/>(-O {int})</td></tr>
-<tr><td>file_checksum</td><td>string</td><td>Y</td><td>Y</td><td>&nbsp;</td><td>Enable checksum reporting for transferred files by specifying the hash to use.<br/>Allowed values: sha-512, sha-384, sha-256, sha1, md5, none</td></tr>
-<tr><td>http_fallback</td><td>bool<br/>string</td><td>Y</td><td>Y</td><td>Y</td><td>When true(1), attempts to perform an HTTP transfer if a FASP transfer cannot be performed.<br/>(-y (conversion){bool}|{string})</td></tr>
-<tr><td>http_fallback_port</td><td>int</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Specifies http port when no cipher is used<br/>(-t {int})</td></tr>
-<tr><td>https_fallback_port</td><td>int</td><td>Y</td><td>Y</td><td>Y</td><td>Specifies https port when cipher is used<br/>(-t {int})</td></tr>
-<tr><td>lock_min_rate</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>&nbsp;</td></tr>
-<tr><td>lock_min_rate_kbps</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>&nbsp;</td></tr>
-<tr><td>lock_rate_policy</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>&nbsp;</td></tr>
-<tr><td>lock_target_rate</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>&nbsp;</td></tr>
-<tr><td>lock_target_rate_kbps</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>&nbsp;</td></tr>
-<tr><td>min_rate_cap_kbps</td><td>int</td><td>Y</td><td>Y</td><td>Y</td><td>&nbsp;</td></tr>
-<tr><td>min_rate_kbps</td><td>int</td><td>Y</td><td>Y</td><td>Y</td><td>Set the minimum transfer rate in kilobits per second.<br/>(-m {int})</td></tr>
-<tr><td>move_after_transfer</td><td>string</td><td>Y</td><td>Y</td><td>&nbsp;</td><td>The relative path to which the files will be moved after the transfer at the source side. Available as of 3.8.0.<br/>(--move-after-transfer {string})</td></tr>
-<tr><td>multi_session</td><td>int</td><td>Y</td><td>Y</td><td>Y</td><td>Use multi-session transfer. max 128.<br/>Each participant on one host needs an independent UDP (-O) port.<br/>Large files are split between sessions only when transferring with resume_policy=none.<br/></td></tr>
-<tr><td>multi_session_threshold</td><td>int</td><td>Y</td><td>Y</td><td>&nbsp;</td><td>Split files across multiple ascp sessions if their size in bytes is greater than or equal to the specified value.<br/>(0=no file is split)<br/>(--multi-session-threshold {int})</td></tr>
-<tr><td>overwrite</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>Overwrite destination files with the source files of the same name.<br/>Allowed values: never, always, diff, older, diff+older<br/>(--overwrite {enum})</td></tr>
-<tr><td>password</td><td>string</td><td>&nbsp;</td><td>Y</td><td>&nbsp;</td><td>Password for local Windows user when transfer user associated with node api user is not the same as the one running asperanoded.<br/>Allows impersonating the transfer user and have access to resources (e.g. network shares).<br/>Windows only, node api only.</td></tr>
-<tr><td>paths</td><td>array</td><td>Y</td><td>Y</td><td>Y</td><td>Array of path to the source (required) and a path to the destination (optional).</td></tr>
-<tr><td>precalculate_job_size</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>Specifies whether to precalculate the job size.<br/>(--precalculate-job-size)</td></tr>
-<tr><td>preserve_access_time</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>(--preserve-access-time)</td></tr>
-<tr><td>preserve_acls</td><td>string</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Preserve access control lists.<br/>Allowed values: none, native, metafile<br/>(--preserve-acls {enum})</td></tr>
-<tr><td>preserve_creation_time</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>(--preserve-creation-time)</td></tr>
-<tr><td>preserve_file_owner_gid</td><td>bool</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Preserve the group ID for a file owner<br/>(--preserve-file-owner-gid)</td></tr>
-<tr><td>preserve_file_owner_uid</td><td>bool</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Preserve the user ID for a file owner<br/>(--preserve-file-owner-uid)</td></tr>
-<tr><td>preserve_modification_time</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>(--preserve-modification-time)</td></tr>
-<tr><td>preserve_remote_acls</td><td>string</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Preserve remote access control lists.<br/>Allowed values: none, native, metafile<br/>(--remote-preserve-acls {enum})</td></tr>
-<tr><td>preserve_source_access_time</td><td>bool</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Preserve the time logged for when the source file was accessed<br/>(--preserve-source-access-time)</td></tr>
-<tr><td>preserve_times</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>(--preserve-times)</td></tr>
-<tr><td>proxy</td><td>string</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Specify the address of the Aspera high-speed proxy server.<br/>dnat(s)://[user[:password]@]server:port<br/>Default ports for DNAT and DNATS protocols are 9091 and 9092.<br/>Password, if specified here, overrides the value of environment variable ASPERA_PROXY_PASS.<br/>(--proxy {string})</td></tr>
-<tr><td>rate_policy</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>The transfer rate policy to use when sharing bandwidth.<br/>Allowed values: low, fair, high, fixed<br/>(--policy {enum})</td></tr>
-<tr><td>rate_policy_allowed</td><td>string</td><td>&nbsp;</td><td>&nbsp;</td><td>Y</td><td>Specifies most aggressive rate policy that is allowed.<br/>Returned by node API.<br/>Allowed values: low, fair, high, fixed</td></tr>
-<tr><td>remote_host</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>IP or fully qualified domain name of the remote server<br/>(--host {string})</td></tr>
-<tr><td>remote_password</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>SSH session password<br/>(env:ASPERA_SCP_PASS)</td></tr>
-<tr><td>remote_user</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>Remote user. Default value is "xfer" on node or connect.<br/>(--user {string})</td></tr>
-<tr><td>remove_after_transfer</td><td>bool</td><td>Y</td><td>Y</td><td>&nbsp;</td><td>Remove SRC files after transfer success<br/>(--remove-after-transfer)</td></tr>
-<tr><td>remove_empty_directories</td><td>bool</td><td>Y</td><td>Y</td><td>&nbsp;</td><td>Specifies whether to remove empty directories.<br/>(--remove-empty-directories)</td></tr>
-<tr><td>remove_empty_source_directory</td><td>bool</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Remove empty source subdirectories and remove the source directory itself, if empty<br/>(--remove-empty-source-directory)</td></tr>
-<tr><td>remove_skipped</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>Must also have remove_after_transfer set to true, Defaults to false, if true, skipped files will be removed as well.<br/>(--remove-skipped)</td></tr>
-<tr><td>resume_policy</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>If a transfer is interrupted or fails to finish, resume without re-transferring the whole files.<br/>Allowed values: none, attrs, sparse_csum, full_csum<br/>(-k (conversion){enum})</td></tr>
-<tr><td>retry_duration</td><td>string<br/>int</td><td>&nbsp;</td><td>Y</td><td>Y</td><td>Specifies how long to wait before retrying transfer. (e.g. "5min")</td></tr>
-<tr><td>source_root</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>Path to be prepended to each source path.<br/>This is either a conventional path or it can be a URI but only if there is no root defined.<br/>(--source-prefix64 (conversion){string})</td></tr>
-<tr><td>source_root_id</td><td>string</td><td>&nbsp;</td><td>Y</td><td>&nbsp;</td><td>The file ID of the source root directory. Required when using Bearer token auth for the source node.</td></tr>
-<tr><td>src_base</td><td>string</td><td>Y</td><td>Y</td><td>&nbsp;</td><td>Specify the prefix to be stripped off from each source object.<br/>The remaining portion of the source path is kept intact at the destination.<br/>Special care must be taken when used with cloud storage.<br/>(--src-base64 (conversion){string})</td></tr>
-<tr><td>ssh_port</td><td>int</td><td>Y</td><td>Y</td><td>Y</td><td>Specifies SSH (TCP) port. Default: local:22, other:33001<br/>(-P {int})</td></tr>
-<tr><td>ssh_private_key</td><td>string</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>Private key used for SSH authentication.<br/>Shall look like: -----BEGIN RSA PRIV4TE KEY-----\nMII...<br/>Note the JSON encoding: \n for newlines.<br/>(env:ASPERA_SCP_KEY)</td></tr>
-<tr><td>ssh_private_key_passphrase</td><td>string</td><td>Y</td><td>&nbsp;</td><td>&nbsp;</td><td>The passphrase associated with the transfer user's SSH private key. Available as of 3.7.2.<br/>(env:ASPERA_SCP_PASS)</td></tr>
-<tr><td>sshfp</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>Check it against server SSH host key fingerprint<br/>(--check-sshfp {string})</td></tr>
-<tr><td>symlink_policy</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>Handle source side symbolic links<br/>Allowed values: follow, copy, copy+force, skip<br/>(--symbolic-links {enum})</td></tr>
-<tr><td>tags</td><td>hash</td><td>Y</td><td>Y</td><td>Y</td><td>Metadata for transfer as JSON<br/>(--tags64 (conversion){hash})</td></tr>
-<tr><td>target_rate_cap_kbps</td><td>int</td><td>&nbsp;</td><td>&nbsp;</td><td>Y</td><td>Returned by upload/download_setup node API.</td></tr>
-<tr><td>target_rate_kbps</td><td>int</td><td>Y</td><td>Y</td><td>Y</td><td>Specifies desired speed for the transfer.<br/>(-l {int})</td></tr>
-<tr><td>target_rate_percentage</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>&nbsp;</td></tr>
-<tr><td>title</td><td>string</td><td>&nbsp;</td><td>Y</td><td>Y</td><td>Title of the transfer</td></tr>
-<tr><td>token</td><td>string</td><td>Y</td><td>Y</td><td>Y</td><td>Authorization token: Bearer, Basic or ATM (Also arg -W)<br/>(env:ASPERA_SCP_TOKEN)</td></tr>
-<tr><td>use_ascp4</td><td>bool</td><td>Y</td><td>Y</td><td>&nbsp;</td><td>specify version of protocol</td></tr>
-<tr><td>wss_enabled</td><td>bool</td><td>Y</td><td>Y</td><td>Y</td><td>&nbsp;</td></tr>
-<tr><td>wss_port</td><td>int</td><td>Y</td><td>Y</td><td>Y</td><td>TCP port used for websocket service feed.</td></tr>
-</table>
+| Field | Type | D | N | C | Description |
+|-------|------|---|---|---|-------------|
+| EX_ascp_args | array | Y | &nbsp; | &nbsp; | Add native command line arguments to ascp |
+| EX_at_rest_password | string | Y | &nbsp; | &nbsp; | DEPRECATED: Prefer to use standard parameter: content_protection_password<br/>(env:ASPERA_SCP_FILEPASS) |
+| EX_file_list | string | Y | &nbsp; | &nbsp; | source file list |
+| EX_file_pair_list | string | Y | &nbsp; | &nbsp; | source file pair list |
+| EX_http_proxy_url | string | Y | &nbsp; | &nbsp; | Specify the proxy server address used by HTTP Fallback<br/>(-x {string}) |
+| EX_http_transfer_jpeg | int | Y | &nbsp; | &nbsp; | HTTP transfers as JPEG file<br/>(-j {int}) |
+| EX_license_text | string | Y | &nbsp; | &nbsp; | License file text override.<br/>By default ascp looks for license file near executable.<br/>(env:ASPERA_SCP_LICENSE) |
+| EX_no_read | bool | Y | &nbsp; | &nbsp; | no read source<br/>(--no-read) |
+| EX_no_write | bool | Y | &nbsp; | &nbsp; | no write on destination<br/>(--no-write) |
+| EX_proxy_password | string | Y | &nbsp; | &nbsp; | Password used for Aspera proxy server authentication.<br/>May be overridden by password in URL EX_fasp_proxy_url.<br/>(env:ASPERA_PROXY_PASS) |
+| EX_ssh_key_paths | array | Y | &nbsp; | &nbsp; | Use public key authentication for SSH and specify the private key file paths<br/>(-i {array}) |
+| apply_local_docroot | bool | Y | &nbsp; | &nbsp; | (--apply-local-docroot) |
+| authentication | string | &nbsp; | &nbsp; | Y | value=token for SSH bypass keys, else password asked if not provided. |
+| cipher | string | Y | Y | Y | In transit encryption type.<br/>Allowed values: none, aes-128, aes-192, aes-256, aes-128-cfb, aes-192-cfb, aes-256-cfb, aes-128-gcm, aes-192-gcm, aes-256-gcm<br/>(-c (conversion){enum}) |
+| cipher_allowed | string | Y | Y | Y | returned by node API. Valid literals include "aes-128" and "none". |
+| content_protection | string | Y | Y | Y | Enable client-side encryption at rest. (CSEAR, content protection)<br/>Allowed values: encrypt, decrypt<br/>(--file-crypt {enum}) |
+| content_protection_password | string | Y | Y | Y | Specifies CSEAR password. (content protection)<br/>(env:ASPERA_SCP_FILEPASS) |
+| cookie | string | Y | Y | Y | Metadata for transfer specified by application<br/>(env:ASPERA_SCP_COOKIE) |
+| create_dir | bool | Y | Y | Y | Specifies whether to create new directories.<br/>(-d) |
+| delete_before_transfer | bool | Y | Y | Y | Before transfer, delete files that exist at the destination but not at the source.<br/>The source and destination arguments must be directories that have matching names.<br/>Objects on the destination that have the same name but different type or size as objects<br/>on the source are not deleted.<br/>(--delete-before-transfer) |
+| delete_source | bool | Y | Y | &nbsp; | Remove SRC files after transfer success<br/>(--remove-after-transfer) |
+| destination_root | string | Y | Y | Y | Destination root directory. |
+| dgram_size | int | Y | Y | Y | UDP datagram size in bytes<br/>(-Z {int}) |
+| direction | string | Y | Y | Y | Direction of transfer (on client side)<br/>Allowed values: send, receive<br/>(--mode (conversion){enum}) |
+| exclude_newer_than | int | Y | &nbsp; | &nbsp; | skip src files with mtime > arg<br/>(--exclude-newer-than {int}) |
+| exclude_older_than | int | Y | &nbsp; | &nbsp; | skip src files with mtime < arg<br/>(--exclude-older-than {int}) |
+| fasp_port | int | Y | Y | Y | Specifies fasp (UDP) port.<br/>(-O {int}) |
+| file_checksum | string | Y | Y | &nbsp; | Enable checksum reporting for transferred files by specifying the hash to use.<br/>Allowed values: sha-512, sha-384, sha-256, sha1, md5, none |
+| http_fallback | bool<br/>string | Y | Y | Y | When true(1), attempts to perform an HTTP transfer if a FASP transfer cannot be performed.<br/>(-y (conversion){bool}|{string}) |
+| http_fallback_port | int | Y | &nbsp; | &nbsp; | Specifies http port when no cipher is used<br/>(-t {int}) |
+| https_fallback_port | int | Y | Y | Y | Specifies https port when cipher is used<br/>(-t {int}) |
+| lock_min_rate | bool | Y | Y | Y | &nbsp; |
+| lock_min_rate_kbps | bool | Y | Y | Y | &nbsp; |
+| lock_rate_policy | bool | Y | Y | Y | &nbsp; |
+| lock_target_rate | bool | Y | Y | Y | &nbsp; |
+| lock_target_rate_kbps | bool | Y | Y | Y | &nbsp; |
+| min_rate_cap_kbps | int | Y | Y | Y | &nbsp; |
+| min_rate_kbps | int | Y | Y | Y | Set the minimum transfer rate in kilobits per second.<br/>(-m {int}) |
+| move_after_transfer | string | Y | Y | &nbsp; | The relative path to which the files will be moved after the transfer at the source side. Available as of 3.8.0.<br/>(--move-after-transfer {string}) |
+| multi_session | int | Y | Y | Y | Use multi-session transfer. max 128.<br/>Each participant on one host needs an independent UDP (-O) port.<br/>Large files are split between sessions only when transferring with resume_policy=none.<br/> |
+| multi_session_threshold | int | Y | Y | &nbsp; | Split files across multiple ascp sessions if their size in bytes is greater than or equal to the specified value.<br/>(0=no file is split)<br/>(--multi-session-threshold {int}) |
+| overwrite | string | Y | Y | Y | Overwrite destination files with the source files of the same name.<br/>Allowed values: never, always, diff, older, diff+older<br/>(--overwrite {enum}) |
+| password | string | &nbsp; | Y | &nbsp; | Password for local Windows user when transfer user associated with node api user is not the same as the one running asperanoded.<br/>Allows impersonating the transfer user and have access to resources (e.g. network shares).<br/>Windows only, node api only. |
+| paths | array | Y | Y | Y | Array of path to the source (required) and a path to the destination (optional). |
+| precalculate_job_size | bool | Y | Y | Y | Specifies whether to precalculate the job size.<br/>(--precalculate-job-size) |
+| preserve_access_time | bool | Y | Y | Y | (--preserve-access-time) |
+| preserve_acls | string | Y | &nbsp; | &nbsp; | Preserve access control lists.<br/>Allowed values: none, native, metafile<br/>(--preserve-acls {enum}) |
+| preserve_creation_time | bool | Y | Y | Y | (--preserve-creation-time) |
+| preserve_file_owner_gid | bool | Y | &nbsp; | &nbsp; | Preserve the group ID for a file owner<br/>(--preserve-file-owner-gid) |
+| preserve_file_owner_uid | bool | Y | &nbsp; | &nbsp; | Preserve the user ID for a file owner<br/>(--preserve-file-owner-uid) |
+| preserve_modification_time | bool | Y | Y | Y | (--preserve-modification-time) |
+| preserve_remote_acls | string | Y | &nbsp; | &nbsp; | Preserve remote access control lists.<br/>Allowed values: none, native, metafile<br/>(--remote-preserve-acls {enum}) |
+| preserve_source_access_time | bool | Y | &nbsp; | &nbsp; | Preserve the time logged for when the source file was accessed<br/>(--preserve-source-access-time) |
+| preserve_times | bool | Y | Y | Y | (--preserve-times) |
+| proxy | string | Y | &nbsp; | &nbsp; | Specify the address of the Aspera high-speed proxy server.<br/>dnat(s)://[user[:password]@]server:port<br/>Default ports for DNAT and DNATS protocols are 9091 and 9092.<br/>Password, if specified here, overrides the value of environment variable ASPERA_PROXY_PASS.<br/>(--proxy {string}) |
+| rate_policy | string | Y | Y | Y | The transfer rate policy to use when sharing bandwidth.<br/>Allowed values: low, fair, high, fixed<br/>(--policy {enum}) |
+| rate_policy_allowed | string | &nbsp; | &nbsp; | Y | Specifies most aggressive rate policy that is allowed.<br/>Returned by node API.<br/>Allowed values: low, fair, high, fixed |
+| remote_host | string | Y | Y | Y | IP or fully qualified domain name of the remote server<br/>(--host {string}) |
+| remote_password | string | Y | Y | Y | SSH session password<br/>(env:ASPERA_SCP_PASS) |
+| remote_user | string | Y | Y | Y | Remote user. Default value is "xfer" on node or connect.<br/>(--user {string}) |
+| remove_after_transfer | bool | Y | Y | &nbsp; | Remove SRC files after transfer success<br/>(--remove-after-transfer) |
+| remove_empty_directories | bool | Y | Y | &nbsp; | Specifies whether to remove empty directories.<br/>(--remove-empty-directories) |
+| remove_empty_source_directory | bool | Y | &nbsp; | &nbsp; | Remove empty source subdirectories and remove the source directory itself, if empty<br/>(--remove-empty-source-directory) |
+| remove_skipped | bool | Y | Y | Y | Must also have remove_after_transfer set to true, Defaults to false, if true, skipped files will be removed as well.<br/>(--remove-skipped) |
+| resume_policy | string | Y | Y | Y | If a transfer is interrupted or fails to finish, resume without re-transferring the whole files.<br/>Allowed values: none, attrs, sparse_csum, full_csum<br/>(-k (conversion){enum}) |
+| retry_duration | string<br/>int | &nbsp; | Y | Y | Specifies how long to wait before retrying transfer. (e.g. "5min") |
+| source_root | string | Y | Y | Y | Path to be prepended to each source path.<br/>This is either a conventional path or it can be a URI but only if there is no root defined.<br/>(--source-prefix64 (conversion){string}) |
+| source_root_id | string | &nbsp; | Y | &nbsp; | The file ID of the source root directory. Required when using Bearer token auth for the source node. |
+| src_base | string | Y | Y | &nbsp; | Specify the prefix to be stripped off from each source object.<br/>The remaining portion of the source path is kept intact at the destination.<br/>Special care must be taken when used with cloud storage.<br/>(--src-base64 (conversion){string}) |
+| ssh_port | int | Y | Y | Y | Specifies SSH (TCP) port. Default: local:22, other:33001<br/>(-P {int}) |
+| ssh_private_key | string | Y | &nbsp; | &nbsp; | Private key used for SSH authentication.<br/>Shall look like: -----BEGIN RSA PRIV4TE KEY-----&sol;nMII...<br/>Note the JSON encoding: &sol;n for newlines.<br/>(env:ASPERA_SCP_KEY) |
+| ssh_private_key_passphrase | string | Y | &nbsp; | &nbsp; | The passphrase associated with the transfer user's SSH private key. Available as of 3.7.2.<br/>(env:ASPERA_SCP_PASS) |
+| sshfp | string | Y | Y | Y | Check it against server SSH host key fingerprint<br/>(--check-sshfp {string}) |
+| symlink_policy | string | Y | Y | Y | Handle source side symbolic links<br/>Allowed values: follow, copy, copy+force, skip<br/>(--symbolic-links {enum}) |
+| tags | hash | Y | Y | Y | Metadata for transfer as JSON<br/>(--tags64 (conversion){hash}) |
+| target_rate_cap_kbps | int | &nbsp; | &nbsp; | Y | Returned by upload/download_setup node API. |
+| target_rate_kbps | int | Y | Y | Y | Specifies desired speed for the transfer.<br/>(-l {int}) |
+| target_rate_percentage | string | Y | Y | Y | &nbsp; |
+| title | string | &nbsp; | Y | Y | Title of the transfer |
+| token | string | Y | Y | Y | Authorization token: Bearer, Basic or ATM (Also arg -W)<br/>(env:ASPERA_SCP_TOKEN) |
+| use_ascp4 | bool | Y | Y | &nbsp; | specify version of protocol |
+| wss_enabled | bool | Y | Y | Y | Server has Web Socket service enabled |
+| wss_port | int | Y | Y | Y | TCP port used for websocket service feed |
 
 #### Destination folder for transfers
 
@@ -2167,7 +2300,7 @@ So, by default, the list of files to transfer will be simply specified on the co
 
 - an [Extended Value](#extended) with type **Array of String**
 
-  > Note: extended values can be tested with the command `conf echo`
+  > **Note:** extended values can be tested with the command `conf echo`
 
   Examples:
 
@@ -2188,7 +2321,7 @@ So, by default, the list of files to transfer will be simply specified on the co
 
   - Using JSON array
 
-    ```javascript
+    ```bash
     --sources=@json:'["file1","file2"]'
     ```
 
@@ -2209,13 +2342,13 @@ Examples:
 
   - Using transfer spec
 
-  ```javascript
+  ```bash
   --sources=@ts --ts=@json:'{"paths":[{"source":"file1"},{"source":"file2"}]}'
   ```
 
 The option `src_type` allows specifying if the list specified in option `sources` is a simple file list or if it is a file pair list.
 
-> Note: Option `src_type` is not used if option `sources` is set to `@ts`
+> **Note:** Option `src_type` is not used if option `sources` is set to `@ts`
 
 Supported values for `src_type` are:
 
@@ -2228,15 +2361,15 @@ Example: Source file `200KB.1` is renamed `sample1` on destination:
 ascli server upload --src-type=pair ~/Documents/Samples/200KB.1 /Upload/sample1
 ```
 
-> Note there are some specific rules to specify file list when using "Aspera on Cloud", refer to the AoC plugin section.
+> **Note:** There are some specific rules to specify a file list when using **Aspera on Cloud**, refer to the AoC plugin section.
 
 #### <a id="multisession"></a>Support of multi-session
 
-Multi session, i.e. starting a transfer of a file set using multiple sessions (one ascp process per session) is supported on "direct" and "node" agents, not yet on connect.
+Multi session, i.e. starting a transfer of a file set using multiple sessions (one `ascp` process per session) is supported on "direct" and "node" agents, not yet on connect.
 
 - when agent=node :
 
-```javascript
+```bash
 --ts=@json:'{"multi_session":10,"multi_session_threshold":1}'
 ```
 
@@ -2244,7 +2377,7 @@ Multi-session is directly supported by the node daemon.
 
 - when agent=direct :
 
-```javascript
+```bash
 --ts=@json:'{"multi_session":5,"multi_session_threshold":1,"resume_policy":"none"}'
 ```
 
@@ -2256,7 +2389,7 @@ When multi-session is used, one separate UDP port is used per session (refer to
 
 #### Content protection
 
-Also known as Client-side encryption at reast (CSEAR), content protection allows a client to send files to a server
+Also known as Client-side encryption at rest (CSEAR), content protection allows a client to send files to a server
 which will store them encrypted (upload), and decrypt files as they are being downloaded from a server, both
 using a passphrase, only known by users sharing files. Files stay encrypted on server side.
 
@@ -2267,45 +2400,43 @@ activating CSEAR consists in using transfer spec parameters:
 
 Example: parameter to download a faspex package and decrypt on the fly
 
-```javascript
---ts=@json:'{"content_protection":"decrypt","content_protection_password":"_pass_here_"}'
-```
-
-Note that up to version 4.6.0, the following parameters should be used for agent `direct`:
-
-```javascript
---ts=@json:'{"EX_ascp_args":["--file-crypt=decrypt"],"EX_at_rest_password":"_secret_here_"}'
+```bash
+--ts=@json:'{"content_protection":"decrypt","content_protection_password":"my_password_here"}'
 ```
 
 #### Transfer Spec Examples
 
 - Change target rate
 
-```javascript
+```bash
 --ts=@json:'{"target_rate_kbps":500000}'
 ```
 
 - Override the FASP SSH port to a specific TCP port:
 
-```javascript
+```bash
 --ts=@json:'{"ssh_port":33002}'
 ```
 
 - Force http fallback mode:
 
-```javascript
+```bash
 --ts=@json:'{"http_fallback":"force"}'
 ```
 
 - Activate progress when not activated by default on server
 
-```javascript
+```bash
 --ts=@json:'{"precalculate_job_size":true}'
 ```
 
-### <a id="scheduling"></a>Lock for exclusive execution
+### <a id="scheduling"></a>Scheduling
+
+It is useful to configure automated scheduled execution.
+
+#### <a id="locking"></a>Locking for exclusive execution
 
-In some conditions, it may be desirable to ensure that `ascli` is not executed several times in parallel.
+It is also useful to ensure that `ascli` is not executed several times in parallel.
 
 For instance when `ascli` is executed automatically on a schedule basis, one generally desire that a new execution is not started if a previous execution is still running because an on-going operation may last longer than the scheduling period:
 
@@ -2339,6 +2470,18 @@ The first instance will sleep 30 seconds, the second one will immediately exit l
 WARN -- : Another instance is already running (Address already in use - bind(2) for "127.0.0.1" port 12345).
 ```
 
+#### <a id="scheduler"></a>Scheduler
+
+`ascli` does not provide an internal scheduler.
+
+Instead, use the service provided by the Operating system:
+
+- Windows: [Task Scheduler](https://docs.microsoft.com/en-us/windows/win32/taskschd/task-scheduler-start-page)
+- Linux/Unix: [cron](https://www.man7.org/linux/man-pages/man5/crontab.5.html)
+- etc...
+
+Linux also provides `anacron`, if tasks are hourly or daily.
+
 ### "Proven&ccedil;ale"
 
 `ascp`, the underlying executable implementing Aspera file transfer using FASP, has a capability to not only access the local file system (using system's `open`,`read`,`write`,`close` primitives), but also to do the same operations on other data storage such as S3, Hadoop and others. This mechanism is call *PVCL*. Several *PVCL* adapters are available, some are embedded in `ascp`
@@ -2396,7 +2539,7 @@ where:
 - `filename` is the name that will be assigned to the file on the destination
 - `filesize` is the number of bytes that will be sent (in decimal).
 
-Note: characters `?` and `&` are shell special characters (wildcard and backround), so `faux` file specification on command line should be protected (using quotes or `\`). If not, the shell may give error: `no matches found` or equivalent.
+Note: characters `?` and `&` are shell special characters (wildcard and background), so `faux` file specification on command line should be protected (using quotes or `\`). If not, the shell may give error: `no matches found` or equivalent.
 
 For all sizes, a suffix can be added (case insensitive) to the size: k,m,g,t,p,e (values are power of 2, e.g. 1M is 2<sup>20</sup>, i.e. 1 mebibyte, not megabyte). The maximum allowed value is 8*2<sup>60</sup>. Very large `faux` file sizes (petabyte range and above) will likely fail due to lack of destination storage unless destination is `faux://`.
 
@@ -2431,7 +2574,7 @@ The sequence parameter is applied as follows:
 
 - If `seq` is `sequential` then each file size is:
 
-  - `size + ((fileindex - 1) * inc)`
+  - `size + ((file_index - 1) * inc)`
   - Where first file is index 1
   - So file1 is `size` bytes, file2 is `size + inc` bytes, file3 is `size + inc * 2` bytes, etc.
   - As with `random`, `inc` will be adjusted if `size + (count * inc)` is not less then 8*2<sup>60</sup>.
@@ -2465,7 +2608,7 @@ ascli server upload "faux:///mydir?file=testfile&count=1m&size=0&inc=2&seq=seque
 ```text
 ascli -h
 NAME
-        ascli -- a command line tool for Aspera Applications (v4.10.0)
+        ascli -- a command line tool for Aspera Applications (v4.12.0)
 
 SYNOPSIS
         ascli COMMANDS [OPTIONS] [ARGS]
@@ -2513,9 +2656,8 @@ OPTIONS: global
     -w, --warnings                   check for language warnings
         --ui=ENUM                    method to start browser: text, [graphical]
         --log-level=ENUM             Log level: debug, info, [warn], error, fatal, unknown
-        --logger=ENUM                log method: [stderr], stdout, syslog
+        --logger=ENUM                logging method: [stderr], stdout, syslog
         --lock-port=VALUE            prevent dual execution of a command, e.g. in cron
-        --query=VALUE                additional filter for API calls (extended value) (some commands)
         --http-options=VALUE         options for http socket (extended value)
         --insecure=ENUM              do not validate HTTPS certificate: no, [yes]
         --once-only=ENUM             process only new items (some commands): [no], yes
@@ -2523,8 +2665,9 @@ OPTIONS: global
         --cache-tokens=ENUM          save and reuse Oauth tokens: no, [yes]
 
 COMMAND: config
-SUBCOMMANDS: list overview id preset open documentation genkey gem plugin flush_tokens echo wizard export_to_cli detect coffee ascp email_test smtp_settings proxy_check folder file check_update initdemo vault
+SUBCOMMANDS: ascp check_update coffee detect documentation echo email_test export_to_cli file flush_tokens folder gem genkey id initdemo list lookup open overview plugin preset proxy_check secure smtp_settings vault wizard
 OPTIONS:
+        --query=VALUE                additional filter for API calls (extended value) (some commands)
         --value=VALUE                extended value for create, update, list filter
         --property=VALUE             name of property to set
         --id=VALUE                   resource identifier (modify,delete,show)
@@ -2552,26 +2695,26 @@ OPTIONS:
         --notif-template=VALUE       Email ERB template for notification of transfers
         --version-check-days=VALUE   Period in days to check new version (zero to disable)
         --plugin-folder=VALUE        Folder where to find additional plugins
-        --ts=VALUE                   override transfer spec values (Hash, use @json: prefix), current={"create_dir"=>true}
-        --local-resume=VALUE         set resume policy (Hash, use @json: prefix), current=
-        --to-folder=VALUE            destination folder for transfered files
-        --sources=VALUE              how list of transfered files is provided (@args,@ts,Array)
-        --src-type=ENUM              type of file list: list, pair
-        --transfer=ENUM              type of transfer agent: direct, node, connect, httpgw, trsdk
-        --transfer-info=VALUE        parameters for transfer agent
-        --progress=ENUM              type of progress bar: none, native, multi
+        --ts=VALUE                   Override transfer spec values (Hash, e.g. use @json: prefix), current={"create_dir"=>true}
+        --to-folder=VALUE            Destination folder for transferred files
+        --sources=VALUE              How list of transferred files is provided (@args,@ts,Array)
+        --src-type=ENUM              Type of file list: list, pair
+        --transfer=ENUM              Type of transfer agent: direct, node, connect, httpgw, trsdk
+        --transfer-info=VALUE        Parameters for transfer agent
+        --progress=ENUM              Type of progress bar: none, native, multi
 
 
 COMMAND: shares
-SUBCOMMANDS: health repository admin
+SUBCOMMANDS: admin health repository
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://org.asperafiles.com
         --username=VALUE             username to log in
         --password=VALUE             user's password
+        --type=ENUM                  Type of user/group for operations: any, local, ldap, saml
 
 
 COMMAND: node
-SUBCOMMANDS: postprocess stream transfer cleanup forward access_key watch_folder service async sync central asperabrowser basic_token browse upload download api_details health events space info license mkdir mklink mkfile rename delete search
+SUBCOMMANDS: access_key api_details asperabrowser async basic_token browse central delete download events health info license mkdir mkfile mklink rename search service space stream sync transfer upload watch_folder
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://org.asperafiles.com
         --username=VALUE             username to log in
@@ -2579,11 +2722,13 @@ OPTIONS:
         --validator=VALUE            identifier of validator (optional for central)
         --asperabrowserurl=VALUE     URL for simple aspera web ui
         --sync-name=VALUE            sync name
+        --path=VALUE                 file or folder path for gen4 operation "file"
         --token-type=ENUM            Type of token used for transfers: aspera, basic, hybrid
+        --default-ports=ENUM         use standard FASP ports or get from node api (gen4): [no], yes
 
 
 COMMAND: orchestrator
-SUBCOMMANDS: health info workflow plugins processes
+SUBCOMMANDS: health info plugins processes workflow
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://org.asperafiles.com
         --username=VALUE             username to log in
@@ -2612,7 +2757,7 @@ OPTIONS:
 
 
 COMMAND: ats
-SUBCOMMANDS: cluster access_key api_key aws_trust_policy
+SUBCOMMANDS: access_key api_key aws_trust_policy cluster
 OPTIONS:
         --ibm-api-key=VALUE          IBM API key, see https://cloud.ibm.com/iam/apikeys
         --instance=VALUE             ATS instance in ibm cloud
@@ -2624,7 +2769,7 @@ OPTIONS:
 
 
 COMMAND: faspex5
-SUBCOMMANDS: health version user bearer_token package admin
+SUBCOMMANDS: admin bearer_token gateway health package postprocessing shared_folders user version
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://org.asperafiles.com
         --username=VALUE             username to log in
@@ -2632,9 +2777,10 @@ OPTIONS:
         --client-id=VALUE            OAuth client identifier
         --client-secret=VALUE        OAuth client secret
         --redirect-uri=VALUE         OAuth redirect URI for web authentication
-        --auth=ENUM                  OAuth type of authentication: web, jwt, boot
+        --auth=ENUM                  OAuth type of authentication: boot, web, jwt
         --private-key=VALUE          OAuth JWT RSA private key PEM value (prefix file path with @file:)
         --passphrase=VALUE           RSA private key passphrase
+        --shared-folder=VALUE        Shared folder source for package files
 
 
 COMMAND: cos
@@ -2643,14 +2789,14 @@ OPTIONS:
         --bucket=VALUE               Bucket name
         --endpoint=VALUE             Storage endpoint url
         --apikey=VALUE               Storage API key
-        --crn=VALUE                  Ressource instance id
+        --crn=VALUE                  Resource instance id
         --service-credentials=VALUE  IBM Cloud service credentials (Hash)
         --region=VALUE               Storage region
         --identity=VALUE             Authentication url (https://iam.cloud.ibm.com/identity)
 
 
 COMMAND: faspex
-SUBCOMMANDS: health package source me dropbox v4 address_book login_methods
+SUBCOMMANDS: address_book dropbox health login_methods me package source v4
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://org.asperafiles.com
         --username=VALUE             username to log in
@@ -2664,7 +2810,7 @@ OPTIONS:
 
 
 COMMAND: preview
-SUBCOMMANDS: scan events trevents check test
+SUBCOMMANDS: check events scan test trevents
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://org.asperafiles.com
         --username=VALUE             username to log in
@@ -2677,7 +2823,7 @@ OPTIONS:
         --skip-folders=VALUE         list of folder to skip
         --case=VALUE                 basename of output for for test
         --scan-path=VALUE            subpath in folder id to start scan in (default=/)
-        --scan-id=VALUE              forder id in storage to start scan in, default is access key main folder id
+        --scan-id=VALUE              folder id in storage to start scan in, default is access key main folder id
         --mimemagic=ENUM             use Mime type detection of gem mimemagic: [no], yes
         --overwrite=ENUM             when to overwrite result file: always, never, [mtime]
         --file-access=ENUM           how to read and write files in repository: [local], remote
@@ -2699,38 +2845,46 @@ OPTIONS:
 
 
 COMMAND: sync
-SUBCOMMANDS: start admin
+SUBCOMMANDS: admin start
 OPTIONS:
-        --parameters=VALUE           extended value for session set definition
-        --session-name=VALUE         name of session to use for admin commands, by default first one
+        --sync-info=VALUE            Information for sync instance and sessions (Hash)
+        --sync-session=VALUE         Name of session to use for admin commands. default: first in parameters
 
 
 COMMAND: aoc
-SUBCOMMANDS: reminder servers bearer_token organization tier_restrictions user packages files admin automation gateway
+SUBCOMMANDS: admin automation bearer_token files gateway organization packages reminder servers tier_restrictions user
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://org.asperafiles.com
         --username=VALUE             username to log in
         --password=VALUE             user's password
         --auth=ENUM                  OAuth type of authentication: web, jwt
         --operation=ENUM             client operation for transfers: push, pull
-        --client-id=VALUE            OAuth API client identifier in application
-        --client-secret=VALUE        OAuth API client passcode
+        --client-id=VALUE            OAuth API client identifier
+        --client-secret=VALUE        OAuth API client secret
         --redirect-uri=VALUE         OAuth API client redirect URI
         --private-key=VALUE          OAuth JWT RSA private key PEM value (prefix file path with @file:)
-        --passphrase=VALUE           RSA private key passphrase
-        --workspace=VALUE            name of workspace
-        --name=VALUE                 resource name
-        --path=VALUE                 file or folder path
-        --link=VALUE                 public link to shared resource
-        --new-user-option=VALUE      new user creation option for unknown package recipients
-        --from-folder=VALUE          share to share source folder
         --scope=VALUE                OAuth scope for AoC API calls
-        --default-ports=ENUM         use standard FASP ports or get from node api: [no], yes
-        --validate-metadata=ENUM     validate shared inbox metadata: [no], yes
+        --passphrase=VALUE           RSA private key passphrase
+        --workspace=VALUE            Name of workspace
+        --name=VALUE                 Resource name (prefer to use keyword name)
+        --link=VALUE                 Public link to shared resource
+        --new-user-option=VALUE      New user creation option for unknown package recipients
+        --from-folder=VALUE          Source folder for Folder-to-Folder transfer
+        --validate-metadata=ENUM     Validate shared inbox metadata: [no], yes
+
+COMMAND: node
+SUBCOMMANDS: access_key api_details asperabrowser async basic_token browse central delete download events health info license mkdir mkfile mklink rename search service space stream sync transfer upload watch_folder
+OPTIONS:
+        --validator=VALUE            identifier of validator (optional for central)
+        --asperabrowserurl=VALUE     URL for simple aspera web ui
+        --sync-name=VALUE            sync name
+        --path=VALUE                 file or folder path for gen4 operation "file"
+        --token-type=ENUM            Type of token used for transfers: aspera, basic, hybrid
+        --default-ports=ENUM         use standard FASP ports or get from node api (gen4): [no], yes
 
 
 COMMAND: server
-SUBCOMMANDS: health download upload browse delete rename ls rm mv du info mkdir cp df md5sum
+SUBCOMMANDS: browse cp delete df download du health info ls md5sum mkdir mv rename rm sync upload
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://org.asperafiles.com
         --username=VALUE             username to log in
@@ -2740,7 +2894,7 @@ OPTIONS:
 
 
 COMMAND: console
-SUBCOMMANDS: transfer health
+SUBCOMMANDS: health transfer
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://org.asperafiles.com
         --username=VALUE             username to log in
@@ -2751,7 +2905,7 @@ OPTIONS:
 
 ```
 
-Note that actions and parameter values can be written in short form.
+> **Note:** commands and parameter values can be written in short form.
 
 ### Bulk creation and deletion of resources
 
@@ -2759,7 +2913,7 @@ Bulk creation and deletion of resources are possible using option `bulk` (yes,no
 In that case, the operation expects an Array of Hash instead of a simple Hash using the [Extended Value Syntax](#extended).
 This option is available only for some of the resources: if you need it: try and see if the entities you try to create or delete support this option.
 
-## <a id="aoc"></a>Plugin: Aspera on Cloud
+## <a id="aoc"></a>Plugin: `aoc`: IBM Aspera on Cloud
 
 Aspera on Cloud uses the more advanced Oauth v2 mechanism for authentication (HTTP Basic authentication is not supported).
 
@@ -2802,7 +2956,7 @@ ascli config wizard --value=aoc
 
 ### <a id="aocmanual"></a>Configuration: using manual setup
 
-> If you used the wizard (recommended): skip this section.
+> **Note:** If you used the wizard (recommended): skip this section.
 
 #### Configuration details
 
@@ -2826,12 +2980,12 @@ If you use the built-in client_id and client_secret, skip this and do not set th
 
 Else you can use a specific OAuth API client_id, the first step is to declare `ascli` in Aspera on Cloud using the admin interface.
 
-(official documentation: <https://ibmaspera.com/help/admin/organization/registering_an_api_client> ).
+([AoC documentation: Registering an API Client](https://ibmaspera.com/help/admin/organization/registering_an_api_client) ).
 
 Let's start by a registration with web based authentication (auth=web):
 
 - Open a web browser, log to your instance: e.g. `https://myorg.ibmaspera.com/`
-- Go to Apps&rarr;Admin&rarr;Organization&rarr;Integrations
+- Go to Apps &rarr; Admin &rarr; Organization &rarr; Integrations
 - Click "Create New"
   - Client Name: `ascli`
   - Redirect URIs: `http://localhost:12345`
@@ -2850,13 +3004,15 @@ If you did not use the wizard, you can also manually create a [option preset](#l
 
 Lets create an [option preset](#lprt) called: `my_aoc_org` using `ask` interactive input (client info from previous step):
 
+<!-- spellchecker: disable -->
 ```bash
 ascli config preset ask my_aoc_org url client_id client_secret
 option: url> https://myorg.ibmaspera.com/
-option: client_id> my_BJbQiFw
-option: client_secret> yFS1mu-crbKuQhGFtfhYuoRW...
+option: client_id> my_client_id_here
+option: client_secret> my_client_secret_here
 updated: my_aoc_org
 ```
+<!-- spellchecker: enable -->
 
 (This can also be done in one line using the command `config preset update my_aoc_org --url=...`)
 
@@ -2882,7 +3038,7 @@ If you are not using the built-in client_id and secret, JWT needs to be authoriz
 - Graphically
 
   - Open a web browser, log to your instance: `https://myorg.ibmaspera.com/`
-  - Go to Apps&rarr;Admin&rarr;Organization&rarr;Integrations
+  - Go to Apps &rarr; Admin &rarr; Organization &rarr; Integrations
   - Click on the previously created application
   - select tab : "JSON Web Token Auth"
   - Modify options if necessary, for instance: activate both options in section "Settings"
@@ -2902,7 +3058,7 @@ ascli aoc admin res client list
 :............:...............:
 ```
 
-```javascript
+```bash
 ascli aoc admin res client modify my_BJbQiFw @json:'{"jwt_grant_enabled":true,"explicit_authorization_required":false}'
 ```
 
@@ -3037,25 +3193,25 @@ Examples:
 
 - List users with `laurent` in name:
 
-```javascript
+```bash
 ascli aoc admin res user list --query=--query=@json:'{"q":"laurent"}'
 ```
 
 - List users who logged-in before a date:
 
-```javascript
+```bash
 ascli aoc admin res user list --query=@json:'{"q":"last_login_at:<2018-05-28"}'
 ```
 
 - List external users and sort in reverse alphabetical order using name:
 
-```javascript
+```bash
 ascli aoc admin res user list --query=@json:'{"member_of_any_workspace":false,"sort":"-name"}'
 ```
 
 Refer to the AoC API for full list of query parameters, or use the browser in developer mode with the web UI.
 
-Note the option `select` can also be used to further refine selection, refer to [section earlier](#option_select).
+> **Note:** The option `select` can also be used to further refine selection, refer to [section earlier](#option_select).
 
 #### <a id="res_select"></a>Selecting a resource
 
@@ -3111,7 +3267,7 @@ If the command returns an error, example:
 
 Well, remove the offending parameters and try again.
 
-Note that some properties that are shown in the web UI, such as membership, are not listed directly in the resource, but instead another resource is created to link a user and its group: `group_membership`
+> **Note:** Some properties that are shown in the web UI, such as membership, are not listed directly in the resource, but instead another resource is created to link a user and its group: `group_membership`
 
 #### Access Key secrets
 
@@ -3120,7 +3276,7 @@ The secret is provided using the `secret` option.
 For example in a command like:
 
 ```bash
-ascli aoc admin res node --id=123 --secret="secret1" v3 info
+ascli aoc admin res node --id=123 --secret="my_secret_here" v3 info
 ```
 
 It is also possible to store secrets in the [secret vault](#vault) and then automatically find the related secret using the [config finder](#config_finder).
@@ -3155,7 +3311,7 @@ The environment provided contains the following additional variable:
 
 Example:
 
-```javascript
+```bash
 ascli aoc admin analytics transfers --once-only=yes --lock-port=12345 \
 --query=@json:'{"status":"completed","direction":"receive"}' \
 --notif-to=active --notif-template=@file:mytemplate.erb
@@ -3167,7 +3323,7 @@ Options:
 - `query` filter (on API call)
 - `notify` send an email as specified by template, this could be places in a file with the `@file` modifier.
 
-Note this must not be executed in less than 5 minutes because the analytics interface accepts only a period of time between 5 minutes and 6 months. The period is [date of previous execution]..[now].
+> **Note:** This must not be executed in less than 5 minutes because the analytics interface accepts only a period of time between 5 minutes and 6 months. The period is [date of previous execution]..[now].
 
 #### Transfer: Using specific transfer ports
 
@@ -3180,7 +3336,7 @@ Refer to section "Examples" of [ATS](#ats) and substitute command `ats` with `ao
 
 #### Example: Bulk creation of users
 
-```javascript
+```bash
 ascli aoc admin res user create --bulk=yes @json:'[{"email":"dummyuser1@example.com"},{"email":"dummyuser2@example.com"}]'
 ```
 
@@ -3195,7 +3351,9 @@ ascli aoc admin res user create --bulk=yes @json:'[{"email":"dummyuser1@example.
 
 #### Example: Find with filter and delete
 
-```javascript
+<!-- spellchecker: disable -->
+
+```bash
 ascli aoc admin res user list --query='@json:{"q":"dummyuser"}' --fields=id,email
 ```
 
@@ -3216,7 +3374,7 @@ thelist=$(ascli aoc admin res user list --query='@json:{"q":"dummyuser"}' --fiel
 echo $thelist
 ```
 
-```javascript
+```json
 ["113501","354061"]
 ```
 
@@ -3233,6 +3391,8 @@ ascli aoc admin res user --bulk=yes --id=@json:"$thelist" delete
 :.......:.........:
 ```
 
+<!-- spellchecker: enable -->
+
 #### Example: <a id="deactuser"></a>Find deactivated users since more than 2 years
 
 ```ruby
@@ -3273,11 +3433,11 @@ ascli aoc admin res node --secret=_secret_ v3 transfer list --value=@json:'[["q"
 
 Examples of query (TODO: cleanup):
 
-```javascript
+```json
 {"q":"type(file_upload OR file_delete OR file_download OR file_rename OR folder_create OR folder_delete OR folder_share OR folder_share_via_public_link)","sort":"-date"}
 ```
 
-```javascript
+```json
 {"tag":"aspera.files.package_id=LA8OU3p8w"}
 ```
 
@@ -3289,7 +3449,7 @@ ascli aoc admin res node --secret=_secret_ v3 events
 
 #### Example: Display members of a workspace
 
-```javascript
+```bash
 ascli aoc admin res workspace_membership list --fields=member_type,manager,member.email --query=@json:'{"embed":"member","inherited":false,"workspace_id":11363,"sort":"name"}'
 ```
 
@@ -3308,7 +3468,7 @@ ascli aoc admin res workspace_membership list --fields=member_type,manager,membe
 
 Other query parameters:
 
-```javascript
+```json
 {"workspace_membership_through":true,"include_indirect":true}
 ```
 
@@ -3354,7 +3514,7 @@ ascli aoc admin res workspace_membership create --bulk=yes @json:@file:ws2_membe
 
 #### Example: Get users who did not log since a date
 
-```javascript
+```bash
 ascli aoc admin res user list --fields=email --query=@json:'{"q":"last_login_at:<2018-05-28"}'
 ```
 
@@ -3369,7 +3529,7 @@ ascli aoc admin res user list --fields=email --query=@json:'{"q":"last_login_at:
 
 #### Example: List "Limited" users
 
-```javascript
+```bash
 ascli aoc admin res user list --fields=email --select=@json:'{"member_of_any_workspace":false}'
 ```
 
@@ -3449,13 +3609,15 @@ Then, create two shared folders located in two regions, in your files home, in a
 
 Then, transfer between those:
 
-```javascript
+```bash
 ascli -Paoc_show aoc files transfer --from-folder='IBM Cloud SJ' --to-folder='AWS Singapore' 100GB.file --ts=@json:'{"target_rate_kbps":"1000000","multi_session":10,"multi_session_threshold":1}'
 ```
 
 #### Example: create registration key to register a node
 
-```javascript
+<!-- spellchecker: disable -->
+
+```bash
 ascli aoc admin res client create @json:'{"data":{"name":"laurentnode","client_subject_scopes":["alee","aejd"],"client_subject_enabled":true}}' --fields=token --format=csv
 ```
 
@@ -3480,6 +3642,8 @@ ascli aoc admin res client list --fields=id --format=csv|ascli aoc admin res cli
 +-----+---------+
 ```
 
+<!-- spellchecker: enable -->
+
 #### Example: Create a Node
 
 AoC nodes as actually composed with two related entities:
@@ -3489,7 +3653,8 @@ AoC nodes as actually composed with two related entities:
 
 The web UI allows creation of both entities in one shot.
 For more flexibility, `ascli` allows this in two separate steps.
-Note that when selecting "Use existing access key" in the web UI, this actually skips access key creation (first step).
+
+> **Note:** When selecting "Use existing access key" in the web UI, this actually skips access key creation (first step).
 
 So, for example, the creation of a node using ATS in IBM Cloud looks like (see other example in this manual):
 
@@ -3497,13 +3662,13 @@ So, for example, the creation of a node using ATS in IBM Cloud looks like (see o
 
   The creation options are the ones of ATS API, refer to the [section on ATS](#ats_params) for more details and examples.
 
-  ```javascript
+  ```bash
   ascli aoc admin ats access_key create --cloud=softlayer --region=eu-de --params=@json:'{"storage":{"type":"ibm-s3","bucket":"mybucket","credentials":{"access_key_id":"mykey","secret_access_key":"mysecret"},"path":"/"}}'
   ```
 
   Once executed, the access key `id` and `secret`, randomly generated by the node api, is displayed.
   
-  > Note: Once returned by the API, the secret will not be available anymore, so store this preciously. ATS secrets can only be reset by asking to IBM support.
+  > **Note:** Once returned by the API, the secret will not be available anymore, so store this preciously. ATS secrets can only be reset by asking to IBM support.
 
 - Create the AoC node entity
 
@@ -3515,17 +3680,18 @@ So, for example, the creation of a node using ATS in IBM Cloud looks like (see o
 
   Then use the returned address for the `url` key to actually create the AoC Node entity:
 
-  ```javascript
-  ascli aoc admin res node create @json:'{"name":"myname","access_key":"*accesskeyid*","ats_access_key":true,"ats_storage_type":"ibm-s3","url":"https://ats-sl-fra-all.aspera.io"}'
+  ```bash
+  ascli aoc admin res node create @json:'{"name":"myname","access_key":"myaccesskeyid","ats_access_key":true,"ats_storage_type":"ibm-s3","url":"https://ats-sl-fra-all.aspera.io"}'
   ```
 
 Creation of a node with a self-managed node is similar, but the command `aoc admin ats access_key create` is replaced with `node access_key create` on the private node itself.
 
 ### List of files to transfer
 
-Source files are provided as a list with the `sources` option. Refer to section [File list](#file_list)
+Source files are provided as a list with the `sources` option.
+Refer to section [File list](#file_list)
 
-Note the special case when the source files are located on "Aspera on Cloud" (i.e. using access keys and the `file id` API).
+> **Note:** A special case is when the source files are located on **Aspera on Cloud** (i.e. using access keys and the `file id` API).
 
 Source files are located on "Aspera on cloud", when :
 
@@ -3565,46 +3731,54 @@ Notes:
 
 #### Example: Send a package with one file to two users, using their email
 
-```javascript
-ascli aoc package send --value=@json:'{"name":"my title","note":"my note","recipients":["laurent.martin.aspera@fr.ibm.com","other@example.com"]}' my_file.dat
+```bash
+ascli aoc packages send --value=@json:'{"name":"my title","note":"my note","recipients":["laurent.martin.aspera@fr.ibm.com","other@example.com"]}' my_file.dat
 ```
 
 #### Example: Send a package to a shared inbox with metadata
 
-```javascript
-ascli aoc package send --workspace=eudemo --value=@json:'{"name":"my pack title","recipients":["Shared Inbox With Meta"],"metadata":{"Project Id":"123","Type":"Opt2","CheckThose":["Check1","Check2"],"Optional Date":"2021-01-13T15:02:00.000Z"}}' ~/Documents/Samples/200KB.1
+```bash
+ascli aoc packages send --workspace=eudemo --value=@json:'{"name":"my pack title","recipients":["Shared Inbox With Meta"],"metadata":{"Project Id":"123","Type":"Opt2","CheckThose":["Check1","Check2"],"Optional Date":"2021-01-13T15:02:00.000Z"}}' ~/Documents/Samples/200KB.1
 ```
 
 It is also possible to use identifiers and API parameters:
 
-```javascript
-ascli aoc package send --workspace=eudemo --value=@json:'{"name":"my pack title","recipients":[{"type":"dropbox","id":"12345"}],"metadata":[{"input_type":"single-text","name":"Project Id","values":["123"]},{"input_type":"single-dropdown","name":"Type","values":["Opt2"]},{"input_type":"multiple-checkbox","name":"CheckThose","values":["Check1","Check2"]},{"input_type":"date","name":"Optional Date","values":["2021-01-13T15:02:00.000Z"]}]}' ~/Documents/Samples/200KB.1
+```bash
+ascli aoc packages send --workspace=eudemo --value=@json:'{"name":"my pack title","recipients":[{"type":"dropbox","id":"12345"}],"metadata":[{"input_type":"single-text","name":"Project Id","values":["123"]},{"input_type":"single-dropdown","name":"Type","values":["Opt2"]},{"input_type":"multiple-checkbox","name":"CheckThose","values":["Check1","Check2"]},{"input_type":"date","name":"Optional Date","values":["2021-01-13T15:02:00.000Z"]}]}' ~/Documents/Samples/200KB.1
 ```
 
 #### Example: List packages in a given shared inbox
 
 When user packages are listed, the following query is used:
 
-```javascript
+```json
 {"archived":false,"exclude_dropbox_packages":true,"has_content":true,"received":true}
 ```
 
-To list packages in a shared inbox, the query has to be specified with withe the shared inbox by name or its identifier. Additionnal parameters can be specified, as supported by the API (to find out available filters, consult the API definition, or use the web interface in developer mode). The current workspace is added unless specified in the query.
+To list packages in a shared inbox, the query has to be specified with withe the shared inbox by name or its identifier.
+Additional parameters can be specified, as supported by the API (to find out available filters, consult the API definition, or use the web interface in developer mode).
+The current workspace is added unless specified in the query.
 
 Using shared inbox name:
 
-```javascript
+```bash
 ascli aoc packages list --query=@json:'{"dropbox_name":"My Shared Inbox","archived":false,"received":true,"has_content":true,"exclude_dropbox_packages":false,"include_draft":false,"sort":"-received_at"}'
 ```
 
 Using shared inbox identifier: first retrieve the id of the shared inbox, and then list packages with the appropriate filter.
 
 ```bash
-shbxid=$(ascli aoc packages shared_inboxes show name 'My Shared Inbox' --format=csv --display=data --fields=id --transpose-single=no)
+shared_box_id=$(ascli aoc packages shared_inboxes show name 'My Shared Inbox' --format=csv --display=data --fields=id --transpose-single=no)
 ```
 
-```javascript
-ascli aoc packages list --query=@json:'{"dropbox_id":"'$shbxid'","archived":false,"received":true,"has_content":true,"exclude_dropbox_packages":false,"include_draft":false,"sort":"-received_at"}'
+```bash
+ascli aoc packages list --query=@json:'{"dropbox_id":"'$shared_box_id'","archived":false,"received":true,"has_content":true,"exclude_dropbox_packages":false,"include_draft":false,"sort":"-received_at"}'
+```
+
+#### Example: Receive all packages from a given shared inbox
+
+```bash
+ascli aoc packages recv ALL --workspace=_workspace_ --once-only=yes --lock-port=12345 --query=@json:'{"dropbox_name":"_shared_inbox_name_","archived":false,"received":true,"has_content":true,"exclude_dropbox_packages":false,"include_draft":false}' --ts=@json:'{"resume_policy":"sparse_csum","target_rate_kbps":50000}'
 ```
 
 #### Example: Send a package with files from the Files app
@@ -3629,7 +3803,7 @@ ascli aoc files browse /src_folder
 Let's send a package with the file `10M.dat` from subfolder /src_folder in a package:
 
 ```bash
-ascli aoc files node_info /src_folder --format=json --display=data | ascli aoc package send --value=@json:'{"name":"test","recipients":["laurent.martin.aspera@fr.ibm.com"]}' 10M.dat --transfer=node --transfer-info=@json:@stdin:
+ascli aoc files node_info /src_folder --format=json --display=data | ascli aoc packages send --value=@json:'{"name":"test","recipients":["laurent.martin.aspera@fr.ibm.com"]}' 10M.dat --transfer=node --transfer-info=@json:@stdin:
 ```
 
 #### <a id="aoccargo"></a>Receive new packages only (Cargo)
@@ -3644,19 +3818,28 @@ ascli aoc packages recv --id=ALL --once-only=yes --lock-port=12345
 - `--once-only=yes` keeps memory of any downloaded package in persistency files located in the configuration folder
 - `--lock-port=12345` ensures that only one instance is started at the same time, to avoid running two downloads in parallel
 
-Typically, one would execute this command on a regular basis, using the method of your choice:
-
-- Windows: [Task Scheduler](https://docs.microsoft.com/en-us/windows/win32/taskschd/task-scheduler-start-page)
-- Linux/Unix: [cron](https://www.man7.org/linux/man-pages/man5/crontab.5.html)
-- etc...
+Typically, one would execute this command on a regular basis, using the method of your choice: see [Scheduler](#scheduler).
 
 ### Files
 
-Folder sharing app.
+The Files application presents a **Home** folder to users in a given workspace.
+Files located here are either user's files, or shared folders.
 
 #### Download Files
 
-Download of files is straightforward using command: `aoc files download`
+The general download command is:
+
+```bash
+ascli aoc files download <source folder path> <source filename 1> ...
+```
+
+I.e. the first argument is the source folder, and the following arguments are the source file names in this folder.
+
+If a single file or folder is to be downloaded, then a single argument can be provided.
+
+```bash
+ascli aoc files download <single file path>
+```
 
 #### Shared folders
 
@@ -3756,36 +3939,35 @@ f["type"].eql?("file") and (DateTime.now-DateTime.parse(f["modified_time"]))<100
 - Find files older than 1 year on a given node and store in file list
 
 ```bash
-ascli aoc admin res node --name='my node name' --secret='_secret_here_' v4 find / --fields=path --value='exec:f["type"].eql?("file") and (DateTime.now-DateTime.parse(f["modified_time"]))<100' --format=csv > my_file_list.txt
+ascli aoc admin res node --name='my node name' --secret='my_secret_here' v4 find / --fields=path --value='exec:f["type"].eql?("file") and (DateTime.now-DateTime.parse(f["modified_time"]))<100' --format=csv > my_file_list.txt
 ```
 
 - Delete the files, one by one
 
 ```bash
-cat my_file_list.txt|while read path;do echo ascli aoc admin res node --name='my node name' --secret='_secret_here_' v4 delete "$path" ;done
+cat my_file_list.txt|while read path;do echo ascli aoc admin res node --name='my node name' --secret='my_secret_here' v4 delete "$path" ;done
 ```
 
 - Delete the files in bulk
 
 ```bash
-cat my_file_list.txt | ascli aoc admin res node --name='my node name' --secret='_secret_here_' v3 delete @lines:@stdin:
+cat my_file_list.txt | ascli aoc admin res node --name='my node name' --secret='my_secret_here' v3 delete @lines:@stdin:
 ```
 
 ### AoC sample commands
 
 ```bash
-aoc -N remind --username=my_aoc_user_email
-aoc -N servers
 aoc admin analytics transfers --query=@json:'{"status":"completed","direction":"receive"}' --notif-to=my_recipient_email --notif-template=@ruby:'%Q{From: <%=from_name%> <<%=from_email%>>\nTo: <<%=to%>>\nSubject: <%=ev["files_completed"]%> files received\n\n<%=ev.to_yaml%>}'
 aoc admin ats access_key create --cloud=aws --region=my_aws_bucket_region --params=@json:'{"id":"ak_aws","name":"my test key AWS","storage":{"type":"aws_s3","bucket":"my_aws_bucket_name","credentials":{"access_key_id":"my_aws_bucket_key","secret_access_key":"my_aws_bucket_secret"},"path":"/"}}'
-aoc admin ats access_key create --cloud=softlayer --region=my_icos_bucket_region --params=@json:'{"id":"akibmcloud","secret":"somesecret","name":"my test key","storage":{"type":"ibm-s3","bucket":"my_icos_bucket_name","credentials":{"access_key_id":"my_icos_bucket_key","secret_access_key":"my_icos_bucket_secret"},"path":"/"}}'
-aoc admin ats access_key delete akibmcloud
+aoc admin ats access_key create --cloud=softlayer --region=my_icos_bucket_region --params=@json:'{"id":"ak1ibmcloud","secret":"my_secret_here","name":"my test key","storage":{"type":"ibm-s3","bucket":"my_icos_bucket_name","credentials":{"access_key_id":"my_icos_bucket_key","secret_access_key":"my_icos_bucket_secret"},"path":"/"}}'
+aoc admin ats access_key delete ak1ibmcloud
 aoc admin ats access_key list --fields=name,id
-aoc admin ats access_key node akibmcloud --secret=somesecret browse /
+aoc admin ats access_key node ak1ibmcloud --secret=my_secret_here browse /
 aoc admin ats cluster clouds
 aoc admin ats cluster list
 aoc admin ats cluster show --cloud=aws --region=eu-west-1
 aoc admin ats cluster show 1f412ae7-869a-445c-9c05-02ad16813be2
+aoc admin auth_providers list
 aoc admin res application list
 aoc admin res client list
 aoc admin res client_access_key list
@@ -3806,14 +3988,15 @@ aoc admin res self show
 aoc admin res short_link list
 aoc admin res user list
 aoc admin res workspace_membership list
-aoc admin resource node --name=my_aoc_ak_name --secret=my_aoc_ak_secret v3 access_key create --value=@json:'{"id":"testsub1","storage":{"path":"/folder1"}}'
-aoc admin resource node --name=my_aoc_ak_name --secret=my_aoc_ak_secret v3 events
-aoc admin resource node --name=my_aoc_ak_name --secret=my_aoc_ak_secret v4 browse /
-aoc admin resource node --name=my_aoc_ak_name --secret=my_aoc_ak_secret v4 delete /folder1
-aoc admin resource node --name=my_aoc_ak_name --secret=my_aoc_ak_secret v4 mkdir /folder1
-aoc admin resource node v3 name my_aoc_ak_name --secret=my_aoc_ak_secret access_key delete testsub1
+aoc admin resource node --name=my_aoc_ak_name --secret=my_aoc_ak_secret do browse /
+aoc admin resource node --name=my_aoc_ak_name --secret=my_aoc_ak_secret do delete /folder1
+aoc admin resource node --name=my_aoc_ak_name --secret=my_aoc_ak_secret do mkdir /folder1
+aoc admin resource node --name=my_aoc_ak_name --secret=my_aoc_ak_secret do v3 access_key create --value=@json:'{"id":"testsub1","storage":{"path":"/folder1"}}'
+aoc admin resource node --name=my_aoc_ak_name --secret=my_aoc_ak_secret do v3 events
+aoc admin resource node do name my_aoc_ak_name --secret=my_aoc_ak_secret v3 access_key delete testsub1
 aoc admin resource workspace list
 aoc admin resource workspace_membership list --fields=ALL --query=@json:'{"page":1,"per_page":50,"embed":"member","inherited":false,"workspace_id":11363,"sort":"name"}'
+aoc admin subscription
 aoc automation workflow action my_wf_id create --value=@json:'{"name":"toto"}'
 aoc automation workflow create --value=@json:'{"name":"test_workflow"}'
 aoc automation workflow delete my_wf_id
@@ -3825,10 +4008,11 @@ aoc faspex
 aoc files bearer /
 aoc files bearer_token_node / --cache-tokens=no
 aoc files browse /
-aoc files browse / -N --link=my_aoc_publink_folder
+aoc files browse / --link=my_aoc_publink_folder
 aoc files delete /testsrc
 aoc files download --transfer=connect /200KB.1
-aoc files file permission --path=/ascli_test list
+aoc files file modify --path=my_aoc_test_folder
+aoc files file permission --path=my_aoc_test_folder list
 aoc files file show --path=/200KB.1
 aoc files file show my_file_id
 aoc files find / --value='\.partial$'
@@ -3838,33 +4022,39 @@ aoc files rename /somefolder testdst
 aoc files short_link create --to-folder=/testdst --value=private
 aoc files short_link create --to-folder=/testdst --value=public
 aoc files short_link list --value=@json:'{"purpose":"shared_folder_auth_link"}'
+aoc files sync admin status --to-folder=/testdst --sync-info=@json:'{"sessions":[{"name":"s2","direction":"pull","local_dir":"syncdir","reset":true}]}'
+aoc files sync start --to-folder=/testdst --sync-info=@json:'{"sessions":[{"name":"s2","direction":"pull","local_dir":"syncdir","reset":true}]}'
 aoc files transfer --from-folder=/testsrc --to-folder=/testdst testfile.bin
+aoc files upload --to-folder=/ testfile.bin --link=my_aoc_publink_folder
 aoc files upload --to-folder=/testsrc testfile.bin
-aoc files upload -N --to-folder=/ testfile.bin --link=my_aoc_publink_folder
 aoc files upload Test.pdf --transfer=node --transfer-info=@json:@stdin:
 aoc files v3 info
-aoc org -N --link=my_aoc_publink_recv_from_aocuser
+aoc gateway --value=https://localhost:12345/aspera/faspex & jobs -p
+aoc org --link=my_aoc_publink_recv_from_aocuser
 aoc organization
 aoc packages browse "my_package_id" /contents
 aoc packages list
 aoc packages list --query=@json:'{"dropbox_name":"my_aoc_shbx_name","sort":"-received_at","archived":false,"received":true,"has_content":true,"exclude_dropbox_packages":false}'
 aoc packages recv "my_package_id" --to-folder=.
 aoc packages recv ALL --to-folder=. --once-only=yes --lock-port=12345
+aoc packages recv ALL --to-folder=. --once-only=yes --lock-port=12345 --query=@json:'{"dropbox_name":"my_aoc_shbx_name","archived":false,"received":true,"has_content":true,"exclude_dropbox_packages":false,"include_draft":false}' --ts=@json:'{"resume_policy":"sparse_csum","target_rate_kbps":50000}'
 aoc packages send --value=@json:'{"name":"Important files delivery","recipients":["my_email_external_user"]}' --new-user-option=@json:'{"package_contact":true}' testfile.bin
 aoc packages send --value=@json:'{"name":"Important files delivery","recipients":["my_email_internal_user"],"note":"my note"}' testfile.bin
+aoc packages send --value=@json:'{"name":"Important files delivery"}' testfile.bin --link=my_aoc_publink_send_aoc_user --password=my_aoc_publink_send_use_pass
+aoc packages send --value=@json:'{"name":"Important files delivery"}' testfile.bin --link=my_aoc_publink_send_shd_inbox
 aoc packages send --workspace="my_aoc_shbx_ws" --value=@json:'{"name":"Important files delivery","recipients":["my_aoc_shbx_name"],"metadata":[{"input_type":"single-text","name":"Project Id","values":["123"]},{"input_type":"single-dropdown","name":"Type","values":["Opt2"]},{"input_type":"multiple-checkbox","name":"CheckThose","values":["Check1","Check2"]},{"input_type":"date","name":"Optional Date","values":["2021-01-13T15:02:00.000Z"]}]}' testfile.bin
 aoc packages send --workspace="my_aoc_shbx_ws" --value=@json:'{"name":"Important files delivery","recipients":["my_aoc_shbx_name"],"metadata":{"Project Id":"456","Type":"Opt2","CheckThose":["Check1","Check2"],"Optional Date":"2021-01-13T15:02:00.000Z"}}' testfile.bin
 aoc packages send --workspace="my_aoc_shbx_ws" --value=@json:'{"name":"Important files delivery","recipients":["my_aoc_shbx_name"]}' testfile.bin
-aoc packages send -N --value=@json:'{"name":"Important files delivery"}' testfile.bin --link=my_aoc_publink_send_aoc_user --password=my_aoc_publink_send_use_pass
-aoc packages send -N --value=@json:'{"name":"Important files delivery"}' testfile.bin --link=my_aoc_publink_send_shd_inbox
 aoc packages shared_inboxes list
+aoc remind --username=my_aoc_user_email
+aoc servers
 aoc user profile modify @json:'{"name":"dummy change"}'
 aoc user profile show
 aoc user workspaces current
 aoc user workspaces list
 ```
 
-## <a id="ats"></a>Plugin: Aspera Transfer Service
+## <a id="ats"></a>Plugin: `ats`: IBM Aspera Transfer Service
 
 ATS is usable either :
 
@@ -3875,10 +4065,12 @@ ATS is usable either :
 ### IBM Cloud ATS : creation of api key
 
 This section is about using ATS with an IBM cloud subscription.
-If you are using ATS as part of AoC, then authentication is thropugh AoC, not IBM Cloud.
+If you are using ATS as part of AoC, then authentication is through AoC, not IBM Cloud.
 
 First get your IBM Cloud APIkey. For instance, it can be created using the IBM Cloud web interface, or using command line:
 
+<!-- spellchecker: disable -->
+
 ```bash
 ibmcloud iam api-key-create mykeyname -d 'my sample key'
 ```
@@ -3892,7 +4084,7 @@ Please preserve the API key! It cannot be retrieved after it's created.
 Name          mykeyname
 Description   my sample key
 Created At    2019-09-30T12:17+0000
-API Key       my_secret_api_key_here_8f8d9fdakjhfsashjk678
+API Key       my_secret_api_key_here
 Locked        false
 UUID          ApiKey-05b8fadf-e7fe-4bc4-93a9-6fd348c5ab1f
 ```
@@ -3902,10 +4094,14 @@ References:
 - [https://console.bluemix.net/docs/iam/userid_keys.html#userapikey](https://console.bluemix.net/docs/iam/userid_keys.html#userapikey)
 - [https://ibm.ibmaspera.com/helpcenter/transfer-service](https://ibm.ibmaspera.com/helpcenter/transfer-service)
 
+<!-- spellchecker: enable -->
+
 Then, to register the key by default for the ats plugin, create a preset. Execute:
 
+<!-- spellchecker: disable -->
+
 ```bash
-ascli config preset update my_ibm_ats --ibm-api-key=my_secret_api_key_here_8f8d9fdakjhfsashjk678
+ascli config preset update my_ibm_ats --ibm-api-key=my_secret_api_key_here
 ```
 
 ```bash
@@ -3942,36 +4138,39 @@ ascli ats api_key create
 ascli config preset update my_ibm_ats --ats-key=ats_XXXXXXXXXXXXXXXXXXXXXXXX --ats-secret=YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY
 ```
 
+<!-- spellchecker: enable -->
+
 ### <a id="ats_params"></a>ATS Access key creation parameters
 
-When creating an ATS access key, the option `params` must contain an extended value with the creation parameters. Those asre directly the parameters expected by the [ATS API](https://developer.ibm.com/apis/catalog?search=%22Aspera%20ATS%20API%22).
+When creating an ATS access key, the option `params` must contain an extended value with the creation parameters.
+Those are directly the parameters expected by the [ATS API](https://developer.ibm.com/apis/catalog?search=%22Aspera%20ATS%20API%22).
 
 ### Misc. Examples
 
 Example: create access key on IBM Cloud (softlayer):
 
-```javascript
-ascli ats access_key create --cloud=softlayer --region=ams --params=@json:'{"storage":{"type":"softlayer_swift","container":"_container_name_","credentials":{"api_key":"_secret_here_","username":"_name_:_usr_name_"},"path":"/"},"id":"_optional_id_","name":"_optional_name_"}'
+```bash
+ascli ats access_key create --cloud=softlayer --region=ams --params=@json:'{"storage":{"type":"softlayer_swift","container":"_container_name_","credentials":{"api_key":"my_secret_here","username":"_name_:_usr_name_"},"path":"/"},"id":"_optional_id_","name":"_optional_name_"}'
 ```
 
 Example: create access key on AWS:
 
-```javascript
-ascli ats access_key create --cloud=aws --region=eu-west-1 --params=@json:'{"id":"testkey3","name":"laurent key AWS","storage":{"type":"aws_s3","bucket":"my-bucket","credentials":{"access_key_id":"AKIA_MY_API_KEY","secret_access_key":"_secret_here_"},"path":"/laurent"}}'
+```bash
+ascli ats access_key create --cloud=aws --region=eu-west-1 --params=@json:'{"id":"myaccesskey","name":"laurent key AWS","storage":{"type":"aws_s3","bucket":"my-bucket","credentials":{"access_key_id":"_access_key_id_here_","secret_access_key":"my_secret_here"},"path":"/laurent"}}'
 ```
 
 Example: create access key on Azure SAS:
 
-```javascript
-ascli ats access_key create --cloud=azure --region=eastus --params=@json:'{"id":"testkeyazure","name":"laurent key azure","storage":{"type":"azure_sas","credentials":{"shared_access_signature":"https://containername.blob.core.windows.net/blobname?sr=c&..."},"path":"/"}}'
+```bash
+ascli ats access_key create --cloud=azure --region=eastus --params=@json:'{"id":"myaccesskey","name":"laurent key azure","storage":{"type":"azure_sas","credentials":{"shared_access_signature":"https://containername.blob.core.windows.net/blobname?sr=c&..."},"path":"/"}}'
 ```
 
 (Note that the blob name is mandatory after server address and before parameters. and that parameter sr=c is mandatory.)
 
 Example: create access key on Azure:
 
-```javascript
-ascli ats access_key create --cloud=azure --region=eastus --params=@json:'{"id":"testkeyazure","name":"laurent key azure","storage":{"type":"azure","credentials":{"account":"myaccount","key":"myaccesskey","storage_endpoint":"myblob"},"path":"/"}}'
+```bash
+ascli ats access_key create --cloud=azure --region=eastus --params=@json:'{"id":"myaccesskey","name":"laurent key azure","storage":{"type":"azure","credentials":{"account":"myaccount","key":"myaccesskey","storage_endpoint":"myblob"},"path":"/"}}'
 ```
 
 delete all my access keys:
@@ -3985,13 +4184,15 @@ The parameters provided to ATS for access key creation are the ones of [ATS API]
 ### ATS sample commands
 
 ```bash
-ats access_key cluster akibmcloud --secret=somesecret
+ats access_key cluster ak2ibmcloud --secret=my_secret_here
 ats access_key create --cloud=aws --region=my_aws_bucket_region --params=@json:'{"id":"ak_aws","name":"my test key AWS","storage":{"type":"aws_s3","bucket":"my_aws_bucket_name","credentials":{"access_key_id":"my_aws_bucket_key","secret_access_key":"my_aws_bucket_secret"},"path":"/"}}'
-ats access_key create --cloud=softlayer --region=my_icos_bucket_region --params=@json:'{"id":"akibmcloud","secret":"somesecret","name":"my test key","storage":{"type":"ibm-s3","bucket":"my_icos_bucket_name","credentials":{"access_key_id":"my_icos_bucket_key","secret_access_key":"my_icos_bucket_secret"},"path":"/"}}'
+ats access_key create --cloud=softlayer --region=my_icos_bucket_region --params=@json:'{"id":"ak2ibmcloud","secret":"my_secret_here","name":"my test key","storage":{"type":"ibm-s3","bucket":"my_icos_bucket_name","credentials":{"access_key_id":"my_icos_bucket_key","secret_access_key":"my_icos_bucket_secret"},"path":"/"}}'
+ats access_key delete ak2ibmcloud
 ats access_key delete ak_aws
-ats access_key delete akibmcloud
+ats access_key entitlement ak2ibmcloud
 ats access_key list --fields=name,id
-ats access_key node akibmcloud browse / --secret=somesecret
+ats access_key node ak2ibmcloud browse / --secret=my_secret_here
+ats access_key show ak2ibmcloud
 ats api_key create
 ats api_key instances
 ats api_key list
@@ -4001,17 +4202,21 @@ ats cluster show --cloud=aws --region=eu-west-1
 ats cluster show 1f412ae7-869a-445c-9c05-02ad16813be2
 ```
 
-## Plugin: IBM Aspera High Speed Transfer Server (transfer)
+## <a id="server"></a>Plugin: `server`: IBM Aspera High Speed Transfer Server (SSH)
 
-This plugin uses SSH as a session protocol (using commands `ascp` and `ascmd`) and does not use the node API.
+The `server` plugin is used for operations on Aspera HSTS using SSH authentication.
 It is the legacy way of accessing an Aspera Server, often used for server to server transfers.
-Modern mode is to use the node API and transfer tokens.
+An SSH session is established, authenticated with either a password or an SSH private key,
+then commands `ascp` (for transfers) and `ascmd` (for file operations) are executed.
+
+> **Note:** The URL to be provided is usually: `ssh://_server_address_:33001`
 
 ### Server sample commands
 
 ```bash
-server -N -Ptst_server_bykey -Plocal_user br /
+server br /
 server browse /
+server browse NEW_SERVER_FOLDER/testfile.bin
 server browse folder_1/target_hot
 server cp NEW_SERVER_FOLDER/testfile.bin folder_1/200KB.2
 server delete NEW_SERVER_FOLDER
@@ -4027,34 +4232,39 @@ server md5sum NEW_SERVER_FOLDER/testfile.bin
 server mkdir NEW_SERVER_FOLDER --logger=stdout
 server mkdir folder_1/target_hot
 server mv folder_1/200KB.2 folder_1/to.delete
+server sync admin status --sync-info=@json:'{"name":"sync2","local":{"path":"syncdir"}}'
+server sync admin status --sync-session=mysync --sync-info=@json:'{"sessions":[{"name":"mysync","local_dir":"syncdir"}]}'
+server sync start --sync-info=@json:'{"name":"sync2","local":{"path":"syncdir"},"remote":{"path":"'"NEW_SERVER_FOLDER"'"},"reset":true,"quiet":false}'
+server sync start --sync-info=@json:'{"sessions":[{"name":"mysync","direction":"pull","remote_dir":"'"NEW_SERVER_FOLDER"'","local_dir":"syncdir","reset":true}]}'
 server upload --sources=@ts --ts=@json:'{"EX_ascp_args":["--file-list","'"filelist.txt"'"]}' --to-folder=NEW_SERVER_FOLDER 
 server upload --sources=@ts --ts=@json:'{"EX_ascp_args":["--file-pair-list","'"filepairlist.txt"'"]}'
 server upload --sources=@ts --ts=@json:'{"EX_file_list":"'"filelist.txt"'"}' --to-folder=NEW_SERVER_FOLDER
 server upload --sources=@ts --ts=@json:'{"EX_file_pair_list":"'"filepairlist.txt"'"}'
 server upload --sources=@ts --ts=@json:'{"paths":[{"source":"testfile.bin","destination":"NEW_SERVER_FOLDER/othername"}]}'
 server upload --src-type=pair --sources=@json:'["testfile.bin","NEW_SERVER_FOLDER/othername"]'
-server upload --src-type=pair testfile.bin NEW_SERVER_FOLDER/othername --notif-to=my_recipient_email
-server upload --src-type=pair testfile.bin folder_1/with_options --ts=@json:'{"cipher":"aes-192-gcm","content_protection":"encrypt","content_protection_password":"_secret_here_","cookie":"biscuit","create_dir":true,"delete_before_transfer":false,"delete_source":false,"exclude_newer_than":1,"exclude_older_than":10000,"fasp_port":33001,"http_fallback":false,"multi_session":0,"overwrite":"diff+older","precalculate_job_size":true,"preserve_access_time":true,"preserve_creation_time":true,"rate_policy":"fair","resume_policy":"sparse_csum","symlink_policy":"follow"}'
+server upload --src-type=pair testfile.bin NEW_SERVER_FOLDER/othername --notif-to=my_recipient_email --transfer-info=@json:'{"ascp_args":["-l","10m"]}'
+server upload --src-type=pair testfile.bin folder_1/with_options --ts=@json:'{"cipher":"aes-192-gcm","content_protection":"encrypt","content_protection_password":"my_secret_here","cookie":"biscuit","create_dir":true,"delete_before_transfer":false,"delete_source":false,"exclude_newer_than":1,"exclude_older_than":10000,"fasp_port":33001,"http_fallback":false,"multi_session":0,"overwrite":"diff+older","precalculate_job_size":true,"preserve_access_time":true,"preserve_creation_time":true,"rate_policy":"fair","resume_policy":"sparse_csum","symlink_policy":"follow"}'
 server upload --to-folder=folder_1/target_hot --lock-port=12345 --ts=@json:'{"EX_ascp_args":["--remove-after-transfer","--remove-empty-directories","--exclude-newer-than=-8","--src-base","source_hot"]}' source_hot
-server upload testfile.bin --to-folder=NEW_SERVER_FOLDER --ts=@json:'{"multi_session":3,"multi_session_threshold":1,"resume_policy":"none","target_rate_kbps":1500}' --transfer-info=@json:'{"spawn_delay_sec":2.5}' --progress=multi
+server upload testfile.bin --to-folder=NEW_SERVER_FOLDER --ts=@json:'{"multi_session":3,"multi_session_threshold":1,"resume_policy":"none","target_rate_kbps":1500}' --transfer-info=@json:'{"spawn_delay_sec":2.5,"multi_incr_udp":false}' --progress=multi
 ```
 
 ### Authentication on Server with SSH session
 
-If SSH is the session control protocol (i.e. not WSS), then following session authentication methods are supported:
+If SSH is the session protocol (by default i.e. not WSS), then following session authentication methods are supported:
 
-- SSH password
-- SSH keys (Multiple SSH key paths can be provided.)
+- `password`: SSH password
+- `ssh_keys`: SSH keys (Multiple SSH key paths can be provided.)
 
-If username is not provided, the default transfer user `xfer` is used.
+If `username` is not provided then the default transfer user `xfer` is used.
 
-If no SSH password or key is provided and a transfer token is provided in transfer spec (option `ts`), then standard SSH bypass keys are used. Example:
+If no SSH password or key is provided and a transfer token is provided in transfer spec (option `ts`), then standard SSH bypass keys are used.
+Example:
 
-```javascript
-ascli server --url=ssh://... --ts=@json:'{"token":"Basic abc123"}'
+```bash
+ascli server --url=ssh://_server_address_:33001 ... --ts=@json:'{"token":"Basic _token_here_"}'
 ```
 
-> Note: If you need to use the Aspera public keys, then specify an empty token: `--ts=@json:'{"token":""}'` : Aspera public SSH keys will be used, but the protocol will ignore the empty token.
+> **Note:** If you need to use the Aspera public keys, then specify an empty token: `--ts=@json:'{"token":""}'` : Aspera public SSH keys will be used, but the protocol will ignore the empty token.
 
 The value of the `ssh_keys` option can be a single value or an array.
 Each value is a **path** to a private key and is expanded (`~` is replaced with the user's home folder).
@@ -4067,10 +4277,17 @@ ascli server --ssh-keys=@list:,~/.ssh/id_rsa
 ascli server --ssh-keys=@json:'["~/.ssh/id_rsa"]'
 ```
 
-For non-transfer related command (browse, delete), the ruby SSH client library `Net::SSH` is used and provides several options settable using option `ssh_options`.
-For a list of SSH client options, refer to the ruby documentation of [Net::SSH](http://net-ssh.github.io/net-ssh/Net/SSH.html).
+For file operation command (browse, delete), the ruby SSH client library `Net::SSH` is used and provides several options settable using option `ssh_options`.
+
+For a list of SSH client options, refer to the ruby documentation of [Net::SSH](http://net-ssh.github.io/net-ssh/Net/SSH.html#method-c-start).
+
+Some of the 50 available SSH options:
 
-By default the SSH library expect that a local ssh-agent is running.
+- `verbose`
+- `use_agent`
+- `passphrase`
+
+By default the SSH library will check if a local `ssh-agent` is running.
 
 On Linux, if you get an error message such as:
 
@@ -4084,20 +4301,31 @@ or on Windows:
 ERROR -- net.ssh.authentication.agent: could not connect to ssh-agent: pageant process not running
 ```
 
-This means that you don't have such an SSH agent running, then:
+This means that your environment suggessts to use an agent but you don't have such an SSH agent running, then:
 
-- check env var: `SSH_AGENT_SOCK`
-- check if the SSH key is protected with a passphrase (then, use the `passphrase` SSH option)
-- [check the manual](https://net-ssh.github.io/ssh/v1/chapter-2.html#s2)
+- Check env var: `SSH_AGENT_SOCK`
+- Check your file: `$HOME/.ssh/config`
+- Check if the SSH key is protected with a passphrase (then, use the `passphrase` SSH option)
+- [Check the Ruby SSH manual](https://www.rubydoc.info/github/net-ssh/net-ssh/Net%2FSSH.start)
 - To disable the use of `ssh-agent`, use the option `ssh_options` like this:
 
 ```bash
-ascli server --ssh-options=@ruby:'{use_agent: false}' ...
+ascli server --ssh-options=@json:'{"use_agent": false}' ...
 ```
 
-This can also be set as default using a global preset.
+> **Note:** This can also be set using a preset.
+
+### Other session channels for `server`
+
+URL schemes `local` and `https` are also supported (mainly for testing purpose).
+(`--url=local:` , `--url=https://...`)
+
+- `local` will execute `ascmd` locally, instead of using an SSH connection.
+- `https` will use Web Socket Session: This requires the use of a transfer token. For example a `Basic` token can be used.
 
-### Example
+As, most of the time, SSH is used, if an `http` scheme is provided without token, the plugin will fallback to SSH and port 33001.
+
+### Examples: `server`
 
 One can test the `server` application using the well known demo server:
 
@@ -4109,7 +4337,7 @@ ascli server download /aspera-test-dir-large/200MB
 
 `initdemo` creates a [option preset](#lprt) `demoserver` and set it as default for plugin `server`.
 
-## Plugin: IBM Aspera High Speed Transfer Server (node)
+## <a id="node"></a>Plugin: `node`: IBM Aspera High Speed Transfer Server Node
 
 This plugin gives access to capabilities provided by HSTS node API.
 
@@ -4127,17 +4355,17 @@ For transfers, it is possible to control how transfer is authorized using option
 - `hybrid` : same as `aspera`, but token is replaced with basic token like `basic`
 - `basic` : transfer spec is created like this:
 
-```javascript
+```json
 {
-  "remote_host": address of node url,
+  "remote_host": "<address of node url>",
   "remote_user": "xfer",
   "ssh_port": 33001,
   "token": "Basic <base 64 encoded user/pass>",
-  "direction": send/receive
+  "direction": "[send|receive]"
 }
 ```
 
-Note that the port is assumed to be the default SSH port `33001` and transfer user is assumed to be `xfer`.
+> **Note:** the port is assumed to be the default Aspera SSH port `33001` and transfer user is assumed to be `xfer`.
 
 ### Central
 
@@ -4157,8 +4385,8 @@ It is possible to start a FASPStream session using the node API:
 
 Use the "node stream create" command, then arguments are provided as a [*transfer-spec*](#transferspec).
 
-```javascript
-ascli node stream create --ts=@json:'{"direction":"send","source":"udp://233.3.3.4:3000?loopback=1&ttl=2","destination":"udp://233.3.3.3:3001/","remote_host":"localhost","remote_user":"stream","remote_password":"_pass_here_"}' --preset=stream
+```bash
+ascli node stream create --ts=@json:'{"direction":"send","source":"udp://233.3.3.4:3000?loopback=1&ttl=2","destination":"udp://233.3.3.3:3001/","remote_host":"localhost","remote_user":"stream","remote_password":"my_pass_here"}' --preset=stream
 ```
 
 ### Watchfolder
@@ -4170,17 +4398,21 @@ Refer to [Aspera documentation](https://download.asperasoft.com/download/docs/en
 - Start watchd and watchfolderd services running as a system user having access to files
 - configure a watchfolder to define automated transfers
 
-```javascript
+<!-- spellchecker: disable -->
+
+```bash
 ascli node service create @json:'{"id":"mywatchd","type":"WATCHD","run_as":{"user":"user1"}}'
 ascli node service create @json:'{"id":"mywatchfolderd","type":"WATCHFOLDERD","run_as":{"user":"user1"}}'
 ascli node watch_folder create @json:'{"id":"mywfolder","source_dir":"/watch1","target_dir":"/","transport":{"host":"10.25.0.4","user":"user1","pass":"mypassword"}}'
 ```
 
+<!-- spellchecker: enable -->
+
 ### Out of Transfer File Validation
 
 Follow the Aspera Transfer Server configuration to activate this feature.
 
-```javascript
+```bash
 ascli node central file list --validator=ascli --data=@json:'{"file_transfer_filter":{"max_result":1}}'
 ```
 
@@ -4192,7 +4424,7 @@ ascli node central file list --validator=ascli --data=@json:'{"file_transfer_fil
 :..............:..............:............:......................................:
 ```
 
-```javascript
+```bash
 ascli node central file update --validator=ascli --data=@json:'{"files":[{"session_uuid": "1a74444c-...","file_id": "084fb181-...","status": "completed"}]}'
 ```
 
@@ -4202,35 +4434,42 @@ updated
 
 ### Example: SHOD to ATS
 
-Scenario: Access to a "Shares on Demand" (SHOD) server on AWS is provided by a partner.
+Scenario: Access to a **Shares on Demand** (SHOD) server on AWS is provided by a partner.
 We need to transfer files from this third party SHOD instance into our Azure BLOB storage.
-Simply create an "Aspera Transfer Service" instance, which provides access to the node API.
-Then create a configuration for the "SHOD" instance in the configuration file: in section "shares", a configuration named: awsshod.
-Create another configuration for the Azure ATS instance: in section "node", named azureats.
+Simply create an **Aspera Transfer Service** instance, which provides access to the node API.
+Then create a configuration for the **SHOD** instance in the configuration file: in section "shares", a configuration named: aws_shod.
+Create another configuration for the Azure ATS instance: in section "node", named azure_ats.
 Then execute the following command:
 
 ```bash
-ascli node download /share/sourcefile --to-folder=/destinationfolder --preset=awsshod --transfer=node --transfer-info=@preset:azureats
+ascli node download /share/sourcefile --to-folder=/destination_folder --preset=aws_shod --transfer=node --transfer-info=@preset:azure_ats
 ```
 
 This will get transfer information from the SHOD instance and tell the Azure ATS instance to download files.
 
 ### Create access key
 
-```javascript
-ascli node access_key create --value=@json:'{"id":"eudemo-sedemo","secret":"mystrongsecret","storage":{"type":"local","path":"/data/asperafiles"}}'
+```bash
+ascli node access_key create --value=@json:'{"id":"myaccesskey","secret":"my_secret_here","storage":{"type":"local","path":"/data/mydir"}}'
 ```
 
 ### Node sample commands
 
 ```bash
-node -N -Ptst_node_preview access_key create --value=@json:'{"id":"aoc_1","storage":{"type":"local","path":"/"}}'
-node -N -Ptst_node_preview access_key delete aoc_1
-node -Pnode_srv access_key do my_aoc_ak_name br /
-node -Pnode_srv access_key list
-node -Pnode_srv service create @json:'{"id":"service1","type":"WATCHD","run_as":{"user":"user1"}}'
-node -Pnode_srv service delete service1
-node -Pnode_srv service list
+node access_key create --value=@json:'{"id":"aoc_1","storage":{"type":"local","path":"/"}}'
+node access_key delete aoc_1
+node access_key do my_aoc_ak_name browse /
+node access_key do my_aoc_ak_name delete /folder2
+node access_key do my_aoc_ak_name delete testfile1
+node access_key do my_aoc_ak_name download testfile1 --to-folder=.
+node access_key do my_aoc_ak_name file show --path=/testfile1
+node access_key do my_aoc_ak_name file show 1
+node access_key do my_aoc_ak_name find /
+node access_key do my_aoc_ak_name mkdir /folder1
+node access_key do my_aoc_ak_name node_info /
+node access_key do my_aoc_ak_name rename /folder1 folder2
+node access_key do my_aoc_ak_name upload 'faux:///testfile1?1k' --default_ports=no
+node access_key list
 node api_details
 node async bandwidth 1
 node async counters 1
@@ -4241,7 +4480,7 @@ node async show ALL
 node basic_token
 node browse / -r
 node delete /todelete
-node delete @list:,/todelete,/tdlink,/delfile
+node delete @list:,folder_1/todelete,folder_1/tdlink,folder_1/delfile
 node delete folder_1/10MB.1
 node delete testfile.bin
 node download testfile.bin --to-folder=.
@@ -4249,11 +4488,14 @@ node download testfile.bin --to-folder=. --token-type=hybrid
 node health
 node info --fpac='function FindProxyForURL(url,host){return "DIRECT"}'
 node license
-node mkdir /todelete
-node mkfile /delfile1 "hello world"
-node mklink /todelete /tdlink
-node rename / delfile1 delfile
+node mkdir folder_1/todelete
+node mkfile folder_1/delfile1 "hello world"
+node mklink folder_1/todelete folder_1/tdlink
+node rename folder_1 delfile1 delfile
 node search / --value=@json:'{"sort":"mtime"}'
+node service create @json:'{"id":"service1","type":"WATCHD","run_as":{"user":"user1"}}'
+node service delete service1
+node service list
 node space /
 node sync bandwidth my_syncid
 node sync counters my_syncid
@@ -4267,13 +4509,13 @@ node sync state my_syncid
 node sync stop my_syncid
 node sync summary my_syncid
 node transfer list --value=@json:'{"active_only":true}'
-node upload --to-folder="folder_1" --sources=@ts --ts=@json:'{"paths":[{"source":"/aspera-test-dir-small/10MB.1"}],"precalculate_job_size":true}' --transfer=node --transfer-info=@json:'{"url":"my_node_url","username":"my_node_user","password":"my_node_pass"}'
+node upload --to-folder="folder_1" --sources=@ts --ts=@json:'{"paths":[{"source":"/aspera-test-dir-small/10MB.1"}],"precalculate_job_size":true}' --transfer=node --transfer-info=@json:'{"url":"my_node_url","username":"my_node_user","password":"my_node_pass_here"}'
 node upload --username=my_aoc_ak_name --password=my_aoc_ak_secret testfile.bin --token-type=basic
 node upload testfile.bin --to-folder=folder_1 --ts=@json:'{"target_rate_cap_kbps":10000}'
 node upload testfile.bin --to-folder=folder_1 --ts=@json:'{"target_rate_cap_kbps":10000}' --token-type=hybrid
 ```
 
-## Plugin: IBM Aspera Faspex5
+## <a id="faspex5"></a>Plugin: `faspex5`: IBM Aspera Faspex v5
 
 IBM Aspera's newer self-managed application.
 
@@ -4285,7 +4527,7 @@ IBM Aspera's newer self-managed application.
 
 ### Faspex 5 JWT authentication
 
-This is the **recomended** method to use.
+This is the **recommended** method to use.
 
 For `jwt`, create an API client in Faspex with JWT support:
 
@@ -4301,12 +4543,12 @@ Then use these options:
 ```text
 --auth=jwt
 --client-id=_client_id_here_
---client-secret=_secret_here_
+--client-secret=my_secret_here
 --username=_username_here_
 --private-key=@file:.../path/to/key.pem
 ```
 
-> The `private_key` option must contain the PEM value of the private key which can be read from a file using the modifier: `@file:`, e.g. `@file:/path/to/key.pem`.
+> **Note:** The `private_key` option must contain the PEM value of the private key which can be read from a file using the modifier: `@file:`, e.g. `@file:/path/to/key.pem`.
 
 ### Faspex 5 web authentication
 
@@ -4323,7 +4565,7 @@ Then use options:
 ```text
 --auth=web
 --client-id=_client_id_here_
---client-secret=_secret_here_
+--client-secret=my_secret_here
 --redirect-uri=https://127.0.0.1:8888
 ```
 
@@ -4342,18 +4584,28 @@ Use this token as password and use `--auth=boot`.
 ascli conf id f5boot update --url=https://localhost/aspera/faspex --auth=boot --password=_token_here_
 ```
 
+### Faspex 5 packages
+
+The `value` option provided to command `faspex5 package send` is the same as for the Faspex 5 API: `POST /packages`.
+
+In addition, `ascli` adds some convenience: the field `recipients` is normally an Array of Hash, each with field `name` and optionally `recipient_type`, but it is also possible to provide an Array of String, with simply a recipient name.
+Then `ascli` will lookup existing contacts, and if a single match is found will use it, and set the `name` and `recipient_type` accordingly.
+
+> **Note:** The lookup is case insensitive and on partial matches.
+
 ### Faspex 5 sample commands
 
 Most commands are directly REST API calls.
-Parameters to commandsa are carried through option `value`, as extended value.
+Parameters to commands are carried through option `value`, as extended value.
 Usually using JSON format with prefix `@json:`.
 
-> The API is listed in [Faspex 5 API Reference](https://developer.ibm.com/apis/catalog?search="faspex+5") under **IBM Aspera Faspex API**.
+> **Note:** The API is listed in [Faspex 5 API Reference](https://developer.ibm.com/apis/catalog?search="faspex+5") under **IBM Aspera Faspex API**.
 
 ```bash
 faspex5 admin res accounts list
 faspex5 admin res contacts list
 faspex5 admin res jobs list
+faspex5 admin res metadata_profiles list
 faspex5 admin res node list --value=@json:'{"type":"received","subtype":"mypackages"}'
 faspex5 admin res oauth_clients list
 faspex5 admin res registrations list
@@ -4361,37 +4613,114 @@ faspex5 admin res saml_configs list
 faspex5 admin res shared_inboxes list
 faspex5 admin res workgroups list
 faspex5 bearer_token
+faspex5 gateway --value=https://localhost:12345/aspera/faspex &\
 faspex5 health
 faspex5 package list --value=@json:'{"mailbox":"inbox","state":["released"]}'
 faspex5 package receive "my_package_id" --to-folder=.  --ts=@json:'{"content_protection_password":"abc123_yo"}'
-faspex5 package send --value=@json:'{"title":"test title","recipients":[{"name":"my_f5_user"}]}' testfile.bin --ts=@json:'{"content_protection_password":"_content_prot_here_"}'
+faspex5 package send --value=@json:'{"title":"test title","recipients":["my_shinbox"],"metadata":{"Options":"Opt1","TextInput":"example text"}}' testfile.bin
+faspex5 package send --value=@json:'{"title":"test title","recipients":[{"name":"my_f5_user"}]}' testfile.bin --ts=@json:'{"content_protection_password":"my_passphrase_here"}'
+faspex5 package show "my_package_id"
+faspex5 postprocessing --value=@json:'{"url":"https://localhost:8443/domain","processing":{"script_folder":"tests"},"certificate":{"key":"../local/k","cert":"../local/c","chain":"../local/ch"}}' &\
+faspex5 user profile modify @json:'{"preference":{"connect_disabled":false}}'
+faspex5 user profile show
 ```
 
 Other examples:
 
+- Send a package with metadata
+
+The interface is the one of the API (Refer to API documentation, or look at request in browser):
+
+```bash
+ascli faspex5 package send --value=@json:'{"title":"test title","recipients":["ascli shared inbox"],"metadata":{"Confidential":"Yes","Drop menu":"Option 1"}}' 'faux:///test1?k1'
+```
+
+Basically, add the field `metadata`, with one key per metadata and the value is directly the metadata value.
+
 - List all shared inboxes
 
-```javascript
+```bash
 ascli faspex5 admin res shared list --value=@json:'{"all":true}' --fields=id,name
 ```
 
 - Create Metadata profile
 
-```javascript
+```bash
 ascli faspex5 admin res metadata_profiles create --value=@json:'{"name":"the profile","default":false,"title":{"max_length":200,"illegal_chars":[]},"note":{"max_length":400,"illegal_chars":[],"enabled":false},"fields":[{"ordering":0,"name":"field1","type":"text_area","require":true,"illegal_chars":[],"max_length":100},{"ordering":1,"name":"fff2","type":"option_list","require":false,"choices":["opt1","opt2"]}]}'
 ```
 
 - Create a Shared inbox with specific metadata profile
 
-```javascript
+```bash
 ascli faspex5 admin res shared create --value=@json:'{"name":"the shared inbox","metadata_profile_id":1}'
 ```
 
-## Plugin: IBM Aspera Faspex (4.x)
+- List content in Shared folder and send package from remote source
+
+```bash
+ascli faspex5 shared_folders list
+```
+
+```bash
+ascli faspex5 shared_folders br 3 /folder
+```
+
+```bash
+ascli faspex5 package send --value=@json:'{"title":"hello","recipients":[{"name":"_recipient_here_"}]}' --shared-folder=3 /folder/file
+```
+
+### Faspex 4-style postprocessing script with Faspex 5
+
+`ascli` provides command `postprocessing` in plugin `faspex5` to emulate Faspex 4 postprocessing.
+It implements Faspex 5 web hooks, and calls a local script with the same environment as Faspex 4.
+
+It is invoked like this:
+
+```bash
+ascli faspex5 postprocessing --value=@json:'{"url":"http://localhost:8080/processing"}'
+```
+
+The following parameters are supported:
+
+| parameter                  | type    | default                | description                                         |
+|----------------------------|---------|------------------------|-----------------------------------------------------|
+| url                        | string  | http://localhost:8080  | Defines the base url on which requests are listened |
+| certificate                | hash    | nil                    | used to define certificate if https is used         |
+| certificate.key            | string  | nil                    | path to private key file                            |
+| certificate.cert           | string  | nil                    | path to certificate                                 |
+| certificate.chain          | string  | nil                    | path to intermediary certificates                   |
+| processing                 | hash    | nil                    | behaviour of post processing                        |
+| processing.script_folder   | string  | .                      | prefix added to script path                         |
+| processing.fail_on_error   | bool    | false                  | if true and process exit with non zero, then fail   |
+| processing.timeout_seconds | integer | 60                     | processing script is killed if takes more time      |
+
+Parameter `url` defines:
+
+- if http or https is used
+- the local port
+- the "domain", i.e. main path of url
+
+When a request is received the following happens:
+
+- the processor get the path of the url called
+- it removes the "domain
+- it pre-prends it with the value of `script_folder`
+- it executes the script
+- upon success, a success code is returned
+
+In Faspex 5, configure like this:
+
+`Webhook endpoint URI` : `http://localhost:8080/processing/script1.sh`
+
+Then, the postprocessing script executed will be `script1.sh`.
+
+Environment variables at set to the values provided by the web hook which are the same as Faspex 4 postprocessing.
+
+## <a id="faspex"></a>Plugin: `faspex`: IBM Aspera Faspex v4
 
 Notes:
 
-- The command "v4" requires the use of APIv4, refer to the Faspex Admin manual on how to activate.
+- The command `v4` requires the use of APIv4, refer to the Faspex Admin manual on how to activate.
 - For full details on Faspex API, refer to: [Reference on Developer Site](https://developer.ibm.com/apis/catalog/?search=faspex)
 
 ### Listing Packages
@@ -4427,7 +4756,7 @@ If no parameter `max` or `pmax` is provided, then all packages will be listed in
 
 #### Example: list packages in dropbox
 
-```javascript
+```bash
 ascli faspex package list --box=inbox --recipient='*my_dropbox' --query=@json:'{"max":20,"pmax":2,"count":20}'
 ```
 
@@ -4449,8 +4778,8 @@ ascli faspex package recv --link=faspe://...
 If the package is in a specific **dropbox**/**workgroup**, add option `recipient` for both the `list` and `recv` commands.
 
 ```bash
-ascli faspex package list --recipient='*thedropboxname'
-ascli faspex package recv 125 --recipient='*thedropboxname'
+ascli faspex package list --recipient='*dropbox_name'
+ascli faspex package recv 125 --recipient='*dropbox_name'
 ```
 
 if `id` is set to `ALL`, then all packages are downloaded, and if option `once_only`is used, then a persistency file is created to keep track of already downloaded packages.
@@ -4462,7 +4791,7 @@ The contents of `delivery_info` is directly the contents of the `send` v3 [API o
 
 Example:
 
-```javascript
+```bash
 ascli faspex package send --delivery-info=@json:'{"title":"my title","recipients":["laurent.martin.aspera@fr.ibm.com"]}' --url=https://faspex.corp.com/aspera/faspex --username=foo --password=bar /tmp/file1 /home/bar/file2
 ```
 
@@ -4480,7 +4809,7 @@ Like for any transfer, a notification can be sent by email using parameters: `no
 
 Example:
 
-```javascript
+```bash
 ascli faspex package send --delivery-info=@json:'{"title":"test pkg 1","recipients":["aspera.user1@gmail.com"]}' ~/Documents/Samples/200KB.1 --notif-to=aspera.user1@gmail.com --notif-template=@ruby:'%Q{From: <%=from_name%> <<%=from_email%>>\nTo: <<%=to%>>\nSubject: Package sent: <%=ts["tags"]["aspera"]["faspex"]["metadata"]["_pkg_name"]%> files received\n\nTo user: <%=ts["tags"]["aspera"]["faspex"]["recipients"].first["email"]%>}'
 ```
 
@@ -4490,7 +4819,7 @@ In this example the notification template is directly provided on command line.
 
 Example:
 
-```javascript
+```bash
 ascli faspex v4 dropbox create --value=@json:'{"dropbox":{"e_wg_name":"test1","e_wg_desc":"test1"}}'
 ascli faspex v4 dropbox list
 ascli faspex v4 dropbox delete --id=36
@@ -4510,17 +4839,17 @@ my_faspex_conf:
   username: admin
   password: MyUserPassword
   storage:
-    testlaurent:
+    my_storage:
       node: "@preset:my_faspex_node"
-      path: /myfiles
+      path: /mydir
 my_faspex_node:
   url: https://10.25.0.3:9092
   username: node_faspex
   password: MyNodePassword
 ```
 
-In this example, a faspex storage named "testlaurent" exists in Faspex, and is located
-under the docroot in "/myfiles" (this must be the same as configured in Faspex).
+In this example, a faspex storage named `my_storage` exists in Faspex, and is located
+under the docroot in `/mydir` (this must be the same as configured in Faspex).
 The node configuration name is "my_faspex_node" here.
 
 Note: the v4 API provides an API for nodes and shares.
@@ -4570,18 +4899,25 @@ faspex v4 wmembership list
 faspex v4 workgroup list
 ```
 
-## Plugin: IBM Aspera Shares
+## <a id="shares"></a>Plugin: `shares`: IBM Aspera Shares v1
 
 Aspera Shares supports the "node API" for the file transfer part. (Shares 1 and 2)
 
 ### Shares 1 sample commands
 
 ```bash
-shares admin share list
-shares admin share user_permissions 1
-shares admin user app_authorizations 1
+shares admin group list
+shares admin node list
+shares admin share list --fields=-status,status_message
+shares admin share user_permissions 1 list
+shares admin user add --type=ldap --value=the_name
+shares admin user app_authorizations 1 modify --value=@json:'{"app_login":true}'
+shares admin user app_authorizations 1 show
+shares admin user import --type=saml --value=@json:'{"id":"the_id","name_id":"the_name"}'
 shares admin user list
-shares admin user share_permissions 1
+shares admin user share_permissions 1 list
+shares admin user share_permissions 1 show 1
+shares health
 shares repository browse /
 shares repository delete my_shares_upload/testfile.bin
 shares repository download --to-folder=. my_shares_upload/testfile.bin
@@ -4590,7 +4926,7 @@ shares repository upload --to-folder=my_shares_upload testfile.bin
 shares repository upload --to-folder=my_shares_upload testfile.bin --transfer=httpgw --transfer-info=@json:'{"url":"https://my_http_gw_fqdn/aspera/http-gwy"}'
 ```
 
-## Plugin: Console
+## <a id="console"></a>Plugin: `console`: IBM Aspera Console
 
 ### Console sample commands
 
@@ -4601,11 +4937,12 @@ console transfer smart list
 console transfer smart sub my_job_id @json:'{"source":{"paths":["my_file_name"]},"source_type":"user_selected"}'
 ```
 
-## Plugin: Orchestrator
+## <a id="orchestrator"></a>Plugin: `orchestrator`:IBM Aspera Orchestrator
 
 ### Orchestrator sample commands
 
 ```bash
+orchestrator health
 orchestrator info
 orchestrator plugins
 orchestrator processes
@@ -4619,13 +4956,15 @@ orchestrator workflow status ALL
 orchestrator workflow status my_orch_workflow_id
 ```
 
-## Plugin: IBM Cloud Object Storage
+## <a id="cos"></a>Plugin: `cos`: IBM Cloud Object Storage
 
 The IBM Cloud Object Storage provides the possibility to execute transfers using FASP.
 It uses the same transfer service as Aspera on Cloud, called Aspera Transfer Service (ATS).
 Available ATS regions: [https://status.aspera.io](https://status.aspera.io)
 
-There are two possibilities to provide credentials. If you already have the endpoint, apikey and CRN, use the first method. If you don't have credentials but have access to the IBM Cloud console, then use the second method.
+There are two possibilities to provide credentials.
+If you already have the endpoint, apikey and CRN, use the first method.
+If you don't have credentials but have access to the IBM Cloud console, then use the second method.
 
 ### Using endpoint, apikey and Resource Instance ID (CRN)
 
@@ -4647,9 +4986,17 @@ Then, jump to the transfer example.
 
 ### Using service credential file
 
-If you are the COS administrator and don't have yet the credential: Service credentials are directly created using the IBM cloud web ui. Navigate to:
+If you are the COS administrator and don't have yet the credential:
+Service credentials are directly created using the IBM cloud Console (web UI).
+Navigate to:
 
-Navigation Menu &rarr; Resource List &rarr; Storage &rarr; Cloud Object Storage &rarr; Service Credentials &rarr; &lt;select or create credentials&gt; &rarr; view credentials &rarr; copy
+- &rarr; Navigation Menu
+- &rarr; [Resource List](https://cloud.ibm.com/resources)
+- &rarr; [Storage](https://cloud.ibm.com/objectstorage)
+- &rarr; Select your storage instance
+- &rarr; Service Credentials
+- &rarr; New credentials (Leave default role: Writer, no special options)
+- &rarr; Copy to clipboard
 
 Then save the copied value to a file, e.g. : `$HOME/cos_service_creds.json`
 
@@ -4657,29 +5004,33 @@ or using the IBM Cloud CLI:
 
 ```bash
 ibmcloud resource service-keys
-ibmcloud resource service-key aoclaurent --output JSON|jq '.[0].credentials'>$HOME/service_creds.json
+ibmcloud resource service-key _service_key_name_here_ --output JSON|jq '.[0].credentials'>$HOME/service_creds.json
 ```
 
 (if you don't have `jq` installed, extract the structure as follows)
 
 It consists in the following structure:
 
-```javascript
+<!-- spellchecker: disable -->
+
+```json
 {
-  "apikey": "_api_key_here_",
+  "apikey": "my_api_key_here",
   "cos_hmac_keys": {
-    "access_key_id": "_access_key_here_",
-    "secret_access_key": "_secret_here_"
+    "access_key_id": "my_access_key_here",
+    "secret_access_key": "my_secret_here"
   },
   "endpoints": "https://control.cloud-object-storage.cloud.ibm.com/v2/endpoints",
-  "iam_apikey_description": "my description _here_ ...",
-  "iam_apikey_name": "my key name _here_",
+  "iam_apikey_description": "my_description_here",
+  "iam_apikey_name": "my_key_name_here",
   "iam_role_crn": "crn:v1:bluemix:public:iam::::serviceRole:Writer",
   "iam_serviceid_crn": "crn:v1:bluemix:public:iam-identity::a/xxxxxxx.....",
   "resource_instance_id": "crn:v1:bluemix:public:cloud-object-storage:global:a/xxxxxxx....."
 }
 ```
 
+<!-- spellchecker: enable -->
+
 The field `resource_instance_id` is for option `crn`
 
 The field `apikey` is for option `apikey`
@@ -4710,31 +5061,43 @@ ascli cos node info
 ascli cos node upload 'faux:///sample1G?1g'
 ```
 
-Note: we generate a dummy file `sample1G` of size 2GB using the `faux` PVCL (man ascp and section above), but you can of course send a real file by specifying a real file instead.
+Note: we generate a dummy file `sample1G` of size 2GB using the `faux` PVCL (man `ascp` and section above), but you can of course send a real file by specifying a real file instead.
 
 ### COS sample commands
 
 ```bash
-cos -N --bucket=my_icos_bucket_name --endpoint=my_icos_bucket_endpoint --apikey=my_icos_bucket_apikey --crn=my_icos_resource_instance_id node info
-cos -N --bucket=my_icos_bucket_name --region=my_icos_bucket_region --service-credentials=@json:@file:service_creds.json node info
+cos --bucket=my_icos_bucket_name --endpoint=my_icos_bucket_endpoint --apikey=my_icos_bucket_apikey --crn=my_icos_resource_instance_id node info
+cos --bucket=my_icos_bucket_name --region=my_icos_bucket_region --service-credentials=@json:@file:service_creds.json node info
 cos node access_key show self
 cos node download testfile.bin --to-folder=.
 cos node info
 cos node upload testfile.bin
 ```
 
-## Plugin: IBM Aspera Sync
+## <a id="async"></a>Plugin: `async`: IBM Aspera Sync
 
 A basic plugin to start an "async" using `ascli`.
-The main advantage is the possibility to start from ma configuration file, using `ascli` standard options.
+The main advantage over bare `async` command line is the possibility to use a configuration file, using `ascli` standard options.
+
+Also, the `sync` command is also made available through the `server sync` and `aoc files sync` commands.
+In this case, some of the `sync` parameters are fill from parameters of the related plugin.
+
+> **Note:** All `sync` commands require an `async` enabled license and availability of the `async` executable (and `asyncadmin`).
+>
+> **Note:** Two JSON syntax are supported for option `sync_info`.
+> The first is same sync payload as specified on the `async` option `--conf` or in the latest node API, this is the preferred syntax and allows a single session definition.
+> The second (legacy) is specific to `ascli` and allows definition of multiple sync sessions in a single command, although usually only one sync session is defined.
+
+Documentation on Async node API can be found on [IBM Developer Portal](https://developer.ibm.com/apis/catalog?search=%22aspera%20sync%20api%22).
 
 ### Sync sample commands
 
 ```bash
-sync start --parameters=@json:'{"sessions":[{"name":"test","reset":true,"remote_dir":"/sync_test","local_dir":"contents","host":"my_remote_host","tcp_port":33001,"user":"my_remote_user","private_key_path":"my_local_user_key"}]}'
+sync admin status --sync-info=@json:'{"sessions":[{"name":"test","local_dir":"contents"}]}'
+sync start --sync-info=@json:'{"instance":{"quiet":true},"sessions":[{"name":"test","reset":true,"remote_dir":"/sync_test","local_dir":"contents","host":"my_remote_host","tcp_port":33001,"user":"my_remote_user","private_key_paths":["my_local_user_key"]}]}'
 ```
 
-## Plugin: Preview
+## <a id="preview"></a>Plugin: `preview`: Preview generator for AoC
 
 The `preview` generates thumbnails (office, images, video) and video previews on storage for use primarily in the Aspera on Cloud application.
 It uses the **node API** of Aspera HSTS and requires use of Access Keys and it's **storage root**.
@@ -4831,6 +5194,7 @@ dnf install unoconv
 
 - Amazon Linux
 
+<!-- spellchecker: disable -->
 ```bash
 amazon-linux-extras enable libreoffice
 yum clean metadata
@@ -4839,6 +5203,7 @@ wget https://raw.githubusercontent.com/unoconv/unoconv/master/unoconv
 mv unoconv /usr/bin
 chmod a+x /usr/bin/unoconv
 ```
+<!-- spellchecker: enable -->
 
 ### Configuration
 
@@ -4846,14 +5211,14 @@ The preview generator is run as a user, preferably a regular user (not root). Wh
 
 Like any `ascli` commands, parameters can be passed on command line or using a configuration [option preset](#lprt).  The configuration file must be created with the same user used to run so that it is properly used on runtime.
 
-Note that the `xfer` user has a special protected shell: `aspshell`, so changing identity requires specification of alternate shell:
+The `xfer` user has a special protected shell: `aspshell`, so changing identity requires specification of alternate shell:
 
 ```bash
 su -s /bin/bash - xfer
 
-ascli config preset update previewconf --url=https://localhost:9092 --username=my_access_key --password=my_secret --skip-types=office --lock-port=12346
+ascli config preset update mypreviewconf --url=https://localhost:9092 --username=my_access_key --password=my_secret --skip-types=office --lock-port=12346
 
-ascli config preset set default preview previewconf
+ascli config preset set default preview mypreviewconf
 ```
 
 Here we assume that Office file generation is disabled, else remove this option.
@@ -4869,11 +5234,11 @@ This shall list the contents of the storage root of the access key.
 
 ### Execution
 
-The tool intentionally supports only a "one shot" mode (no infinite loop) in order to avoid having a hanging process or using too many resources (calling REST api too quickly during the scan or event method).
-It needs to be run on a regular basis to create or update preview files. For that use your best
-reliable scheduler. For instance use "CRON" on Linux or Task Scheduler on Windows.
+The tool intentionally supports only a **one shot** mode (no infinite loop) in order to avoid having a hanging process or using too many resources (calling REST api too quickly during the scan or event method).
+It needs to be run on a regular basis to create or update preview files.
+For that use your best reliable scheduler, see [Scheduling](#scheduling).
 
-Typically, for "Access key" access, the system/transfer is `xfer`. So, in order to be consistent have generate the appropriate access rights, the generation process should be run as user `xfer`.
+Typically, for **Access key** access, the system/transfer is `xfer`. So, in order to be consistent have generate the appropriate access rights, the generation process should be run as user `xfer`.
 
 Lets do a one shot test, using the configuration previously created:
 
@@ -4889,15 +5254,16 @@ On subsequent run it reads this file and check that previews are generated for t
 
 ### Configuration for Execution in scheduler
 
-Here is an example of configuration for use with cron on Linux.
-Adapt the scripts to your own preference.
+Here is an example of configuration for use with `cron` on Linux.
+Adapt the scripts to your own needs.
 
 We assume here that a configuration preset was created as shown previously.
 
-Lets first setup a script that will be used in the scheduler and sets up the environment.
+Lets first setup a script that will be used in the scheduler and set up the environment.
 
 Example of startup script `cron_ascli`, which sets the Ruby environment and adds some timeout protection:
 
+<!-- spellchecker: disable -->
 ```bash
  #!/bin/bash
  # set a timeout protection, just in case
@@ -4906,6 +5272,7 @@ case "$*" in *trev*) tmout=10m ;; *) tmout=30m ;; esac
 rvm use 2.6 --quiet
 exec timeout ${tmout} ascli "${@}"
 ```
+<!-- spellchecker: enable -->
 
 Here the cronjob is created for user `xfer`.
 
@@ -4916,7 +5283,7 @@ crontab<<EOF
 EOF
 ```
 
-Note that the logging options are kept in the cronfile instead of conf file to allow execution on command line with output on command line.
+> **Note:** The logging options are kept here in the cronfile instead of conf file to allow execution on command line with output on command line.
 
 ### Candidate detection for creation or update (or deletion)
 
@@ -4997,12 +5364,12 @@ If the `mimemagic` gem complains about missing mime info file:
 - any OS:
 
   - Examine the error message
-  - Download the file: <https://gitlab.freedesktop.org/xdg/shared-mime-info/-/raw/master/data/freedesktop.org.xml.in>
+  - Download the file: [freedesktop.org.xml.in](https://gitlab.freedesktop.org/xdg/shared-mime-info/-/raw/master/data/freedesktop.org.xml.in)
   - move and rename this file to one of the locations expected by mimemagic as specified in the error message
 
 - Windows:
 
-  - Download the file: <https://gitlab.freedesktop.org/xdg/shared-mime-info/-/raw/master/data/freedesktop.org.xml.in>
+  - Download the file: [freedesktop.org.xml.in](https://gitlab.freedesktop.org/xdg/shared-mime-info/-/raw/master/data/freedesktop.org.xml.in)
   - Place this file in the root of Ruby (or elsewhere): `C:\RubyVV-x64\freedesktop.org.xml.in`
   - Set a global variable using `SystemPropertiesAdvanced.exe` or using `cmd` (replace `VV` with version) to the exact path of this file:
 
@@ -5057,36 +5424,36 @@ preview trevents --once-only=yes --skip-types=office --log-level=info
 Aspera CLI can send email, for that setup SMTP configuration. This is done with option `smtp`.
 
 The `smtp` option is a hash table (extended value) with the following fields:
-<table>
-<tr><th>field</th><th>default</th><th>example</th><th>description</th></tr>
-<tr><td>`server`</td><td>-</td><td>smtp.gmail.com</td><td>SMTP server address</td></tr>
-<tr><td>`tls`</td><td>true</td><td>false</td><td>use of TLS</td></tr>
-<tr><td>`port`</td><td>587 for tls<br/>25 else</td><td>587</td><td>port for service</td></tr>
-<tr><td>`domain`</td><td>domain of server</td><td>gmail.com</td><td>email domain of user</td></tr>
-<tr><td>`username`</td><td>-</td><td>john@example.com</td><td>user to authenticate on SMTP server, leave empty for open auth.</td></tr>
-<tr><td>`password`</td><td>-</td><td>MyP@ssword</td><td>password for above username</td></tr>
-<tr><td>`from_email`</td><td>username if defined</td><td>laurent.martin.l@gmail.com</td><td>address used if received replies</td></tr>
-<tr><td>`from_name`</td><td>same as email</td><td>John Wayne</td><td>display name of sender</td></tr>
-</table>
+
+| field        | default             | example                    | description                      |
+|--------------|---------------------|----------------------------|----------------------------------|
+| `server`     | -                   | smtp.gmail.com             | SMTP server address              |
+| `tls`        | true                | false                      | use of TLS                       |
+| `port`       | TLS: 587<br/>25     | 587                        | port for service                 |
+| `domain`     | domain of server    | gmail.com                  | email domain of user             |
+| `username`   | -                   | john@example.com           | user to authenticate on SMTP server, leave empty for open auth. |
+| `password`   | -                   | my_password_here           | password for above username      |
+| `from_email` | username if defined | johnny@example.com         | address used if receiver replies |
+| `from_name`  | same as email       | John Wayne                 | display name of sender           |
 
 ### Example of configuration
 
 ```bash
 ascli config preset set smtp_google server smtp.google.com
 ascli config preset set smtp_google username john@gmail.com
-ascli config preset set smtp_google password _pass_here_
+ascli config preset set smtp_google password my_password_here
 ```
 
 or
 
-```javascript
-ascli config preset init smtp_google @json:'{"server":"smtp.google.com","username":"john@gmail.com","password":"_pass_here_"}'
+```bash
+ascli config preset init smtp_google @json:'{"server":"smtp.google.com","username":"john@gmail.com","password":"my_password_here"}'
 ```
 
 or
 
 ```bash
-ascli config preset update smtp_google --server=smtp.google.com --username=john@gmail.com --password=_pass_here_
+ascli config preset update smtp_google --server=smtp.google.com --username=john@gmail.com --password=my_password_here
 ```
 
 Set this configuration as global default, for instance:
@@ -5104,9 +5471,9 @@ The template is the full SMTP message, including headers.
 
 The following variables are defined by default:
 
-- from_name
-- from_email
-- to
+- `from_name`
+- `from_email`
+- `to`
 
 Other variables are defined depending on context.
 
@@ -5154,7 +5521,7 @@ It aims at simplifying the startup of a FASP session from a programmatic stand p
 - common to Aspera Connect API (browser javascript startTransfer)
 - easy to generate by using any third party language specific JSON library
 
-Hopefully, IBM integrates this diectly in `ascp`, and this tool is made redundant.
+Hopefully, IBM integrates this directly in `ascp`, and this tool is made redundant.
 
 This makes it easy to integrate with any language provided that one can spawn a sub process, write to its STDIN, read from STDOUT, generate and parse JSON.
 
@@ -5162,50 +5529,50 @@ The tool expect one single argument: a [*transfer-spec*](#transferspec).
 
 If no argument is provided, it assumes a value of: `@json:@stdin:`, i.e. a JSON formatted [*transfer-spec*](#transferspec) on stdin.
 
-Note that if JSON is the format, one has to specify `@json:` to tell the tool to decode the hash using JSON.
+> **Note:** If JSON is the format, specify `@json:` to tell `ascli` to decode the hash using JSON syntax.
 
 During execution, it generates all low level events, one per line, in JSON format on stdout.
 
-Note that there are special "extended" [*transfer-spec*](#transferspec) parameters supported by `asession`:
+There are special "extended" [*transfer-spec*](#transferspec) parameters supported by `asession`:
 
 - `EX_loglevel` to change log level of the tool
 - `EX_file_list_folder` to set the folder used to store (exclusively, because of garbage collection) generated file lists. By default it is `[system tmp folder]/[username]_asession_filelists`
 
-Note that in addition, many "EX_" [*transfer-spec*](#transferspec) parameters are supported for the [`direct`](#agt_direct) transfer agent (used by `asession`), refer to section [*transfer-spec*](#transferspec).
+> **Note:** In addition, many "EX_" [*transfer-spec*](#transferspec) parameters are supported for the [`direct`](#agt_direct) transfer agent (used by `asession`), refer to section [*transfer-spec*](#transferspec).
 
 ### Comparison of interfaces
 
-<table>
-<tr><th>feature/tool</th><th>asession</th><th>ascp</th><th>FaspManager</th><th>Transfer SDK</th></tr>
-<tr><td>language integration</td><td>any</td><td>any</td><td>C/C++<br/>C#/.net<br/>Go<br/>Python<br/>java<br/></td><td>many</td></tr>
-<tr><td>required additional components to ascp</td><td>Ruby<br/>Aspera</td><td>-</td><td>library<br/>(headers)</td><td>daemon</td></tr>
-<tr><td>startup</td><td>JSON on stdin<br/>(standard APIs:<br/>JSON.generate<br/>Process.spawn)</td><td>command line arguments</td><td>API</td><td>daemon</td></tr>
-<tr><td>events</td><td>JSON on stdout</td><td>none by default<br/>or need to open management port<br/>and proprietary text syntax</td><td>callback</td><td>callback</td></tr>
-<tr><td>platforms</td><td>any with ruby and ascp</td><td>any with ascp (and SDK if compiled)</td><td>any with ascp</td><td>any with ascp and transfer daemon</td></tr></table>
+| feature/tool | asession | `ascp` | FaspManager | Transfer SDK |
+|--------------|----------|--------|-------------|--------------|
+| language integration | any | any | C/C++<br/>C#/.net<br/>Go<br/>Python<br/>java<br/> | many |
+| required additional components to `ascp` | Ruby<br/>Aspera | - | library<br/>(headers) | daemon |
+| startup | JSON on stdin<br/>(standard APIs:<br/>JSON.generate<br/>Process.spawn) | command line arguments | API | daemon |
+| events | JSON on stdout | none by default<br/>or need to open management port<br/>and proprietary text syntax | callback | callback |
+| platforms | any with ruby and `ascp` | any with `ascp` (and SDK if compiled) | any with `ascp` | any with `ascp` and transfer daemon |
 
 ### Simple session
 
 Create a file `session.json` with:
 
 ```json
-{"remote_host":"demo.asperasoft.com","remote_user":"asperaweb","ssh_port":33001,"remote_password":"_pass_here_","direction":"receive","destination_root":"./test.dir","paths":[{"source":"/aspera-test-dir-tiny/200KB.1"}],"resume_level":"none"}
+{"remote_host":"demo.asperasoft.com","remote_user":"asperaweb","ssh_port":33001,"remote_password":"my_password_here","direction":"receive","destination_root":"./test.dir","paths":[{"source":"/aspera-test-dir-tiny/200KB.1"}],"resume_level":"none"}
 ````
 
 Then start the session:
 
-```
+```bash
 asession < session.json
 ```
 
 ### Asynchronous commands and Persistent session
 
-`asession` also supports asynchronous commands (on the management port). Instead of the traditional text protocol as described in ascp manual, the format for commands is: one single line per command, formatted in JSON, where parameters shall be "snake" style, for example: `LongParameter` -&gt; `long_parameter`
+`asession` also supports asynchronous commands (on the management port). Instead of the traditional text protocol as described in `ascp` manual, the format for commands is: one single line per command, formatted in JSON, where parameters shall be "snake" style, for example: `LongParameter` -&gt; `long_parameter`
 
 This is particularly useful for a persistent session ( with the [*transfer-spec*](#transferspec) parameter: `"keepalive":true` )
 
-```javascript
+```json
 asession
-{"remote_host":"demo.asperasoft.com","ssh_port":33001,"remote_user":"asperaweb","remote_password":"_pass_here_","direction":"receive","destination_root":".","keepalive":true,"resume_level":"none"}
+{"remote_host":"demo.asperasoft.com","ssh_port":33001,"remote_user":"asperaweb","remote_password":"my_password_here","direction":"receive","destination_root":".","keepalive":true,"resume_level":"none"}
 {"type":"START","source":"/aspera-test-dir-tiny/200KB.2"}
 {"type":"DONE"}
 ```
@@ -5266,27 +5633,28 @@ The general idea is to rely on :
 - take advantage of `ascli` configuration capabilities and server side knowledge
 - the OS scheduler for reliability and continuous operation
 
-#### ascp features
+#### `ascp` features
 
-Interesting ascp features are found in its arguments: (see ascp manual):
+Interesting `ascp` features are found in its arguments: (see `ascp` manual):
 
-- `ascp` already takes care of sending only "new" files: option `-k 1,2,3` (`resume_policy`)
+- `ascp` already takes care of sending only **new** files: option `-k 1,2,3` (`resume_policy`)
 - `ascp` has some options to remove or move files after transfer: `--remove-after-transfer`, `--move-after-transfer`, `--remove-empty-directories` (`remove_after_transfer`, `move_after_transfer`, `remove_empty_directories`)
 - `ascp` has an option to send only files not modified since the last X seconds: `--exclude-newer-than`, `--exclude-older-than` (`exclude_newer_than`,`exclude_older_than`)
 - `--src-base` (`src_base`) if top level folder name shall not be created on destination
 
-Note that:
-
-- `ascli` takes transfer parameters exclusively as a [*transfer-spec*](#transferspec), with `--ts` parameter.
-- most, but not all, native `ascp` arguments are available as standard [*transfer-spec*](#transferspec) parameters
-- native ascp arguments can be provided with the [*transfer-spec*](#transferspec) parameter: `EX_ascp_args` (array), only for the [`direct`](#agt_direct) transfer agent (not others, like connect or node)
+> **Note:** `ascli` takes transfer parameters exclusively as a [*transfer-spec*](#transferspec), with `--ts` parameter.
+>
+> **Note:** Most, but not all, native `ascp` arguments are available as standard [*transfer-spec*](#transferspec) parameters.
+>
+> **Note:** Only for the [`direct`](#agt_direct) transfer agent (not others, like connect or node), native `ascp` arguments can be provided option `transfer_info` parameter `ascp_args`.
 
 #### server side and configuration
 
 Virtually any transfer on a "repository" on a regular basis might emulate a hot folder.
-> file detection is not based on events (inotify, etc...), but on a simple folder scan on source side.
 
-> parameters may be saved in a [option preset](#lprt) and used with `-P`.
+> **Note:** file detection is not based on events (inotify, etc...), but on a simple folder scan on source side.
+>
+> **Note:** parameters may be saved in a [option preset](#lprt) and used with `-P`.
 
 #### Scheduling
 
@@ -5295,20 +5663,34 @@ Refer to section [Scheduling](#scheduling). (on use of option `lock_port`)
 
 ### Example: upload hot folder
 
-```javascript
+```bash
 ascli server upload source_hot --to-folder=/Upload/target_hot --lock-port=12345 --ts=@json:'{"remove_after_transfer":true,"remove_empty_directories":true,"exclude_newer_than:-8,"src_base":"source_hot"}'
 ```
 
 The local folder (here, relative path: `source_hot`) is sent (upload) to an aspera server.
 Source files are deleted after transfer.
-Growing files will be sent only once they don't grow anymore (based on an 8-second cooloff period).
+Growing files will be sent only once they don't grow anymore (based on an 8-second cool-off period).
 If a transfer takes more than the execution period, then the subsequent execution is skipped (`lock_port`) preventing multiple concurrent runs.
 
-### Example: unidirectional synchronization
+### Example: unidirectional synchronization (upload) to server
 
-```javascript
-ascli server upload source_sync --to-folder=/Upload/target_sync --lock-port=12345 --ts=@json:'{"resume_policy":"sparse_csum","exclude_newer_than:-8,"src_base":"source_sync"}'
+```bash
+ascli server upload source_sync --to-folder=/Upload/target_sync --lock-port=12345 --ts=@json:'{"resume_policy":"sparse_csum","exclude_newer_than":-8,"src_base":"source_sync"}'
 ```
+
+This can also be used with other folder-based applications: Aspera on Cloud, Shares, Node:
+
+### Example: unidirectional synchronization (download) from Aspera on Cloud Files
+
+```bash
+ascli aoc files download . --to-folder=. --lock-port=12345 --progress=none --display=data \
+--ts=@json:'{"resume_policy":"sparse_csum","target_rate_kbps":50000,"exclude_newer_than":-8,"delete_before_transfer":true}'
+```
+
+> **Note:** option `delete_before_transfer` will delete files locally, if they are not present on remote side.
+>
+> **Note:** options `progress` and `display` limit output for headless operation (e.g. cron job)
+
 ## Health check and Nagios
 
 Most plugin provide a `health` command that will check the health status of the application. Example:
@@ -5342,7 +5724,7 @@ OK - [transfer:ok]
 ```
 
 ```bash
-ascli server health asctlstatus --cmd_prefix='sudo ' --format=nagios
+ascli server health asctl status --cmd_prefix='sudo ' --format=nagios
 ```
 
 ```output
@@ -5384,24 +5766,30 @@ aoc.read('self')
 
 ## Changes (Release notes)
 
-See <CHANGELOG.md>
+See [CHANGELOG.md](CHANGELOG.md)
 
 ## History
 
-When I joined Aspera, there was only one CLI: `ascp`, which is the implementation of the FASP protocol, but there was no CLI to access the various existing products (Server, Faspex, Shares). Once, Serban (founder) provided a shell script able to create a Faspex Package using Faspex REST API. Since all products relate to file transfers using FASP (ascp), I thought it would be interesting to have a unified CLI for transfers using FASP. Also, because there was already the `ascp` tool, I thought of an extended tool : `eascp.pl` which was accepting all `ascp` options for transfer but was also able to transfer to Faspex and Shares (destination was a kind of URI for the applications).
+When I joined Aspera, there was only one CLI: `ascp`, which is the implementation of the FASP protocol, but there was no CLI to access the various existing products (Server, Faspex, Shares).
+Once, Serban (founder) provided a shell script able to create a Faspex Package using Faspex REST API.
+Since all products relate to file transfers using FASP (`ascp`), I thought it would be interesting to have a unified CLI for transfers using FASP.
+Also, because there was already the `ascp` tool, I thought of an extended tool : `eascp.pl` which was accepting all `ascp` options for transfer but was also able to transfer to Faspex and Shares (destination was a kind of URI for the applications).
 
 There were a few pitfalls:
 
-- The tool was written in the aging `perl` language while most Aspera application products (but the Transfer Server) are written in `ruby`.
+- The tool was written in the aging `perl` language while most Aspera web application products (but the Transfer Server) are written in `ruby`.
 - The tool was only for transfers, but not able to call other products APIs
 
 So, it evolved into `ascli`:
 
 - portable: works on platforms supporting `ruby` (and `ascp`)
 - easy to install with the `gem` utility
-- supports transfers with multiple [Transfer Agents](#agents), that&apos;s why transfer parameters moved from ascp command line to [*transfer-spec*](#transferspec) (more reliable , more standard)
+- supports transfers with multiple [Transfer Agents](#agents), that&apos;s why transfer parameters moved from `ascp` command line to [*transfer-spec*](#transferspec) (more reliable , more standard)
 - `ruby` is consistent with other Aspera products
 
+Over the time, a supported command line tool `aspera` was developed in C++, it was later on deprecated.
+It had the advantage of being relatively easy to installed, as a single executable (well, still using `ascp`), but it was too limited IMHO, and lacked a lot of the features of this CLI.
+
 ## Common problems
 
 ### Error: "Remote host is not who we expected"
@@ -5410,7 +5798,7 @@ Cause: `ascp` >= 4.x checks fingerprint of highest server host key, including EC
 
 Workaround on client side: To ignore the certificate (SSH fingerprint) add option on client side (this option can also be added permanently to the config file):
 
-```javascript
+```bash
 --ts=@json:'{"sshfp":null}'
 ```
 
@@ -5422,7 +5810,7 @@ References: ES-1944 in release notes of 4.1 and to [HSTS admin manual section "C
 
 Some Ruby gems dependencies require compilation of native parts (C).
 This also requires Ruby header files.
-If Ruby was installed as a Linux Packages, then also install ruby dev elopment package:
+If Ruby was installed as a Linux Packages, then also install ruby development package:
 `ruby-dev` ir `ruby-devel`, depending on distribution.
 
 ### ED255519 key not supported