aspera-cli 4.24.1 → 4.24.2

data/README.md

@@ -2,7 +2,7 @@
 <!--
 DO NOT EDIT: THIS FILE IS GENERATED, edit docs/README.erb.md, for details, read docs/README.md
 PANDOC_META_BEGIN
-subtitle: "ascli 4.24.1"
+subtitle: "ascli 4.24.2"
 author: "Laurent MARTIN"
 PANDOC_META_END
 -->
@@ -10,26 +10,27 @@ PANDOC_META_END
 
 <!-- NOTE CAUTION WARNING IMPORTANT TIP INFO -->
 
+<!-- markdownlint-disable MD028 -->
+
 [![Gem Version](https://badge.fury.io/rb/aspera-cli.svg)](https://badge.fury.io/rb/aspera-cli)
 [![unit tests](https://github.com/IBM/aspera-cli/actions/workflows/test.yml/badge.svg?branch=main)](https://github.com/IBM/aspera-cli/actions)
 [![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/5861/badge)](https://bestpractices.coreinfrastructure.org/projects/5861)
 
 ## Introduction
 
-![Hootput the Owl](docs/ascli-impersonation-small.png)
+![Hootput the Owl](docs/ascli-impersonation.svg)
 
 Hootput lives in the terminal, watching over every command with wide, unblinking eyes.
 Known for concise output and sharp insight, this owl thrives where others get lost in the dark.
 It doesn’t chatter; it hoots—clear, precise, and always on time.
 
-Like ascli, Hootput is built for action: launching transfers, parsing options, and navigating APIs without hesitation.
+Like `ascli`, Hootput is built for action: launching transfers, parsing options, and navigating APIs without hesitation.
 Light on feathers but heavy on wisdom, it turns complexity into simple one-liners.
 When you hear Hootput’s call, you know your data is already in flight.
 
 ---
 
-
-"Hey, I’m ascli — your data’s personal courier.
+"Hey, I’m `ascli` — your data’s personal courier.
 I don’t do flashy dashboards; I’m happiest in a terminal window.
 Hand me a command, and I’ll zip your files across the network faster than you thought possible.
 
@@ -41,7 +42,7 @@ Need to debug? I’ll show you what’s going on under the hood.
 
 Think of me as Aspera’s command-line sidekick: quick, reliable, and a little no-nonsense. You bring the files; I’ll bring the horsepower."
 
-Version : 4.24.1
+Version : 4.24.2
 
 Laurent/2016-2025
 
@@ -105,9 +106,10 @@ While `ascp` can be used directly, it is limited to basic send/receive operation
 
 ### Notations, Shell, Examples
 
-Command line operations examples are shown using a shell such as: `bash` or `zsh`.
+Command line operations examples are shown using a shell such as: `bash` (Linux) or `zsh` (macOS).
+Using [Windows PowerShell or cmd](#shell-parsing-for-windows) is also possible.
 
-Command line arguments beginning with `my_` in examples, e.g. `my_param_value`, are user-provided value and not fixed value commands.
+Command line arguments beginning with `my_` in examples, e.g. `my_param_value`, are user-provided value, and not fixed value commands.
 
 `ascli` is an API **Client** toward the remote Aspera application **Server** (Faspex, HSTS, etc...)
 
@@ -116,7 +118,7 @@ The transfer is not directly implemented in `ascli`, rather `ascli` uses one of
 
 > [!NOTE]
 > A **[Transfer Agent](#transfer-clients-agents)** is a client for the remote Transfer Server (HSTS/HSTE).
-> It can be local or remote.
+> It can be local, or remote.
 > For example a remote Aspera Transfer Server may be used as a transfer agent (using Node API).
 > i.e. using option `--transfer=node`
 
@@ -133,7 +135,7 @@ ascli --version
 ```
 
 ```text
-4.24.1
+4.24.2
 ```
 
 > [!NOTE]
@@ -143,7 +145,7 @@ ascli --version
 
 Once installation is completed, you can proceed to the first use with a demo server:
 
-If you want to test with Aspera on Cloud, jump to section: [Wizard](#configuration-using-wizard).
+If you want to test with Aspera on Cloud, jump to section: [Wizard](#wizard).
 
 To test with Aspera demo transfer server, set up the environment and then test:
 
@@ -246,16 +248,31 @@ If you don't have internet for the installation, refer to section [Installation
 
 ### Single file executable
 
-It is planned to provide `ascli` as a single platform-dependent executable.
-[Beta releases can be found here](https://ibm.biz/aspera-cli-exe).
-
 > [!CAUTION]
 > This is a Beta feature.
-> On Linux, the executable requires a minimum GLIBC version.
+
+`ascli` is available as a single **platform-dependent executable**.
+[Beta releases can be found here](https://ibm.biz/aspera-cli-exe).
+
+Installation:
+
+```shell
+curl -o ascli https://eudemo.asperademo.com/download/aspera-cli/ascli.4.24.1.osx-arm64
+chmod a+x ascli
+./ascli conf transferd install
+```
+
+> [!NOTE]
+> Replace the URL with the one for your platform.
 > Installation of `ascp` is still required separately.
 > Refer to [Install `ascp`](#installation-of-ascp-through-transferd).
->
-> On Linux, check the minimum required GLIBC on this site: [repology.org](https://repology.org/project/glibc/versions), or check your GLIBC version with `ldd`:
+
+#### Linux: GLIBC version
+
+> [!CAUTION]
+> On Linux, the executable requires a minimum GLIBC version, specified in the executable name on download site.
+
+On Linux, check your system's GLIBC version on this site: [repology.org](https://repology.org/project/glibc/versions), or check your GLIBC version with `ldd`:
 
 ```shell
 ldd --version | head -n1
@@ -293,13 +310,13 @@ Required Ruby version: >= 3.1.
 
 **In priority**, refer to the official Ruby documentation:
 
-- [Download Ruby](https://www.ruby-lang.org/en/downloads/)
-- [Installation Guide](https://www.ruby-lang.org/en/documentation/installation/)
+- [Official Ruby Download](https://www.ruby-lang.org/en/downloads/)
+- [Official Ruby Installation Guide](https://www.ruby-lang.org/en/documentation/installation/)
 
 For convenience, you may refer to the following sections for a proposed method for specific operating systems.
 
 Latest version of `ascli` requires a Ruby version [at least under maintenance support](https://www.ruby-lang.org/en/downloads/branches/).
-If only an older Ruby version is available due to system constraints, then use an older version of `ascli` that supports it.
+If only an older Ruby version must be used due to system constraints, then use an older version of `ascli` that supports it.
 
 #### Windows: Installer
 
@@ -323,44 +340,33 @@ rubyinstaller-devkit-3.2.2-1-x64.exe /silent /currentuser /noicons /dir=C:\asper
 
 #### macOS: `brew`
 
-**macOS** comes with Ruby 2.6.
-It is an old unsupported version and [Apple has deprecated it](https://developer.apple.com/documentation/macos-release-notes/macos-catalina-10_15-release-notes).
-It will be removed from macOS in the future.
-Do not use it.
-
 The recommended way is to use [Homebrew](https://brew.sh/).
 
 ```shell
 brew install ruby
 ```
 
+> [!WARNING]
+> **macOS** comes with Ruby 2.6.
+> It is an old unsupported version and [Apple has deprecated it](https://developer.apple.com/documentation/macos-release-notes/macos-catalina-10_15-release-notes).
+> It will be removed from macOS in the future.
+> Do not use it.
+> Use the required version of Ruby.
+
 This installs a recent Ruby suitable for `ascli`.
 
-To add PATH to Ruby on Apple Silicon, add this in your shell configuration file (e.g. `~/.bash_profile` or `~/.zshrc`):
-
-```shell
-use_ruby(){
-    local version=$1
-    case $version in list) for r in $(brew list -1 | grep '^ruby'); do
-      echo "$(brew info --json=v1 $r | jq -r '.[0].installed[0].version') : use_ruby $r"
-    done|gsort -k1,1V;return;;; esac
-    local prefix=$(brew --prefix ruby${version:+@}$version)
-    if ! test -d "$prefix";then
-        echo "No such ruby version: $version"
-        brew list|grep ruby
-        return 1
-    fi
-    PATH="$prefix/bin:$(echo "$PATH" | tr ':' '\n' | grep -v '/ruby' | paste -sd ':' -)"
-    PATH="$(gem env gemdir)/bin:$PATH"
-    export LDFLAGS="-L$prefix/lib"
-    export CPPFLAGS="-I$prefix/include"
-    export PKG_CONFIG_PATH="$prefix/lib/pkgconfig"
-    echo "Using: $prefix"
-    ruby -v
-}
-use_ruby
+To add PATH to Ruby on Apple Silicon, add the following lines to your shell configuration file (i.e. `~/.zshrc` if you are using `zsh`, or `~/.bash_profile` for `bash`):
+
+```shell
+export PATH="$(brew --prefix ruby)/bin:$PATH"
+export PATH="$(gem env gemdir)/bin:$PATH"
 ```
 
+> [!NOTE]
+> Two separate lines are needed because the second one depends on the first one.
+> This is what is displayed at the end of the installation of the ruby tap, same as message from:
+> `brew info ruby`
+
 #### Linux: Package
 
 If your Linux distribution provides a standard Ruby package, you can use it provided that the version supported.
@@ -569,7 +575,7 @@ Those are not installed as part of dependencies because they involve compilation
 See [Gemfile](Gemfile):
 
 | name | version | comment |
-| ---- | ------- | ------- |
+| -------------------- | ------- | --------------------------------------------------- |
 | grpc | ~> 1.71 | (no jruby) for Aspera Transfer Daemon |
 | mimemagic | ~> 0.4 | for preview |
 | rmagick | ~> 6.1 | (no jruby) for terminal view |
@@ -578,6 +584,8 @@ See [Gemfile](Gemfile):
 | sqlite3 | ~> 2.7 | (no jruby) for async DB |
 | jdbc-sqlite3 | ~> 3.46 | (jruby) for async DB |
 | sequel | ~> 5.96 | (jruby) for async DB |
+| ed25519 | ~> 1.4 | (no jruby) for ed25519 |
+| bcrypt_pbkdf | ~> 1.1 | (no jruby) for ed25519 |
 
 Install like this:
 
@@ -590,6 +598,8 @@ gem install bigdecimal -v '~> 3.1'
 gem install sqlite3 -v '~> 2.7'
 gem install jdbc-sqlite3 -v '~> 3.46'
 gem install sequel -v '~> 5.96'
+gem install ed25519 -v '~> 1.4'
+gem install bcrypt_pbkdf -v '~> 1.1'
 ```
 
 ### Ruby Gem: `aspera-cli`
@@ -634,15 +644,30 @@ The user installs the gem with `HighSecurity` or `MediumSecurity`: this will suc
 gem install -P MediumSecurity aspera-cli
 ```
 
+#### Beta release of gem
+
+Beta version of gem can be found here: <https://ibm.biz/aspera-cli-beta>
+
+On Linux/macOS, install in a terminal:
+
+```shell
+curl -sLo aspera-cli-beta.gem https://ibm.biz/aspera-cli-beta
+gem install aspera-cli-beta.gem
+```
+
+On Windows, download the link, that saves the file: `aspera-cli-beta.gem`, then install with `gem install aspera-cli-beta.gem`.
+
 ### FASP Protocol: `ascp`
 
-Most file transfers will be executed using the **FASP** protocol, using `ascp`.
-Only two additional files are required to perform an Aspera Transfer, which are part of Aspera Transfer Daemon:
+File transfers are primarily performed using the **FASP** protocol via the `ascp` utility.
 
-- `ascp`
-- `aspera-license` (in same folder, or `../etc`)
+To execute an Aspera transfer, only two additional files are required, both included with the Aspera Transfer Daemon:
+
+- `ascp` - the transfer executable
 
-This can be installed either be installing an Aspera transfer software or using an `ascli` command.
+- `aspera-license` - the license file (located in the same directory as `ascp` or in `../etc`)
+
+These components can be installed either by installing the Aspera transfer software or by executing the `ascli` command.
 
 #### Installation of `ascp` through `transferd`
 
@@ -671,8 +696,8 @@ The installation of the transfer binaries follows those steps:
   - By default, the archive is extracted to `$HOME/.aspera/sdk`.
   - The destination folder can be changed by setting the `sdk_folder` option.
 
-| Option          | Default | Description |
-|-----------------|---------|-------------|
+| Option          | Default | Description                                            |
+|-----------------|---------|--------------------------------------------------------|
 | `sdk_url`       | `DEF`   | URL to download the Aspera Transfer Daemon archive.<br/>`DEF` means: select from available archives. |
 | `locations_url` | `https://ibm.biz/sdk_location` | URL to get download URLs of Aspera Transfer Daemon from IBM official repository. |
 | `sdk_folder`    | `$HOME/.aspera/sdk` | Folder where the SDK archive is extracted. |
@@ -885,7 +910,7 @@ ascli -v
 ```
 
 ```text
-4.24.1
+4.24.2
 ```
 
 In order to keep persistency of configuration on the host, you should specify your user's configuration folder as a volume for the container.
@@ -1275,7 +1300,7 @@ It's up to the program to split arguments:
 - [Windows: How Command Line Parameters Are Parsed](https://daviddeley.com/autohotkey/parameters/parameters.htm#RUBY)
 - [Understand Quoting and Escaping of Windows Command Line Arguments](https://web.archive.org/web/20190316094059/http://www.windowsinspired.com/understanding-the-command-line-string-and-arguments-received-by-a-windows-program/)
 
- is a Ruby program, so Ruby parses the command line (receibed with `GetCommandLineW`) into arguments and provides them to the Ruby code (`$0` and `ARGV`).
+ is a Ruby program, so Ruby parses the command line (received with `GetCommandLineW`) into arguments and provides them to the Ruby code (`$0` and `ARGV`).
 Ruby vaguely follows the Microsoft C/C++ parameter parsing rules.
 (See `w32_cmdvector` in Ruby source [`win32.c`](https://github.com/ruby/ruby/blob/master/win32/win32.c#L1766)) : <!--cspell:disable-line-->
 
@@ -1312,12 +1337,12 @@ Basically it handles I/O redirection (`<>|`), shell variables (`%`), multiple co
 Eventually, all those special characters are removed from the command line unless escaped with `^` or `"`.
 `"` are kept and given to the program.
 
-#### Shell parsing for Windows: Powershell
+#### Shell parsing for Windows: PowerShell
 
-For Powershell, it actually depends on the version of it (7.3+).
+For PowerShell, it actually depends on the version of it (5.1, 7.3+).
 
-A difficulty is that Powershell parses the command line for its own use and manages special characters, but then it passes the command line to the program (Ruby) as a single string, possibly without the special characters.
-Since we usually do not use powershell features, it is advised to use the "stop-parsing" token `--%`.
+A difficulty is that PowerShell parses the command line for its own use and manages special characters, but then it passes the command line to the program (Ruby) as a single string, possibly without the special characters.
+If not using PowerShell features (e.g. variable), one can use the "stop-parsing" token `--%`.
 
 Details can be found here:
 
@@ -1325,7 +1350,9 @@ Details can be found here:
 
 - [quoting rules](https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_quoting_rules)
 
-The following examples give the same result on Windows using Powershell:
+The following examples give the same result on Windows using PowerShell:
+
+- Check your powershell version:
 
 ```powershell
 PS C:\> echo $psversiontable.psversion
@@ -1333,14 +1360,26 @@ PS C:\> echo $psversiontable.psversion
 Major  Minor  Build  Revision
 -----  -----  -----  --------
 5      1      19041  4046
+```
+
+- Use PowerShell argument `--%` to place PowerShell in "stop-parsing" mode.
 
+```powershell
 PS C:\> ascli config echo  --% @json:'{"k":"v","x":"y"}'
+```
+
+- Triple double quotes are replaced with a single double quote in normal mode:
 
+```powershell
 PS C:\> ascli config echo @json:'{"""k""":"""v""","""x""":"""y"""}'
 ```
 
-> [!NOTE]
-> The special Powershell argument `--%` places Powershell in "stop-parsing" mode.
+- To insert PowerShell variables in the JSON string, one can do:
+
+```powershell
+$email="john@example.com"
+ascli conf echo  $('@json:{"""address""":"""' + $email + '""","""vip""":true}')
+```
 
 #### Extended Values (JSON, Ruby, ...)
 
@@ -1366,7 +1405,7 @@ ascli config echo 1 2 3
 ERROR: Argument: unprocessed values: ["2", "3"]
 ```
 
-`config echo` displays the value of the **first** argument using Ruby syntax: it surrounds a string with `"` and add `\` before special characters.
+`config echo` displays the value of the **first** argument using the current output `format`.
 
 > [!NOTE]
 > It gets its value after shell command line parsing and `ascli` extended value parsing.
@@ -1379,7 +1418,7 @@ Depending on the case, a different `format` option is used to display the actual
 For example, in the simple string `Hello World`, the space character is special for the shell, so it must be escaped so that a single value is represented.
 
 Double quotes are processed by the shell to create a single string argument.
-For **POSIX shells**, single quotes can also be used in this case, or protect the special character ` ` (space) with a backslash. <!-- markdownlint-disable-line -->
+For **POSIX shells**, single quotes can also be used in this case, or protect the special character ` ` (space) with a backslash.
 
 ```shell
 ascli config echo "Hello World" --format=text
@@ -1398,7 +1437,7 @@ Even if the variable contains spaces it results only in one argument for `ascli`
 
 > [!NOTE]
 > We use a simple shell variable in this example.
-> Note that it does not need to be exported as an environment variable.
+> It does not need to be exported as an environment variable.
 
 ```shell
 MYVAR="Hello World"
@@ -1588,7 +1627,7 @@ If wrong, or no command is provided when expected, an error message is displayed
 Standard **Commands** are: `create`, `show`, `list`, `modify`, `delete`.
 Some entities also support additional commands.
 When those additional commands are related to an entity also reachable in another context, then those commands are located below command `do`.
-For example sub-commands appear after entity selection (identifier), e.g. `ascli aoc admin node do 1234 browse /`: `browse` is a sub-command of `node`.
+For example sub-commands appear after entity selection (identifier), e.g. `ascli aoc admin node do _my_node_id_ browse /`: `browse` is a sub-command of `node`.
 
 **Command Parameters** are typically mandatory values for a command, such as entity creation data or entity identifier.
 
@@ -1672,6 +1711,7 @@ The value for **any** options can come from the following locations (in this ord
 Environment variable starting with prefix: ASCLI_ are taken as option values, e.g. `ASCLI_OPTION_NAME` is for `--option-name`.
 
 Option `show_config` dry runs the configuration, and then returns currently set values for options.
+
 `ascli --show-config` outputs global options only, and `ascli [plugin] --show-config` outputs global and plugin default options.
 In addition, option `--show-config` can be added at the end of any full command line, this displays the options that would be used for the command.
 
@@ -1704,8 +1744,8 @@ To redirect results to a file, use option `output`.
 
 Depending on action, the output will contain:
 
-| Result Type     | Description |
-|-----------------|-------------------|
+| Result Type     | Description                                                                       |
+|-----------------|-----------------------------------------------------------------------------------|
 | `single_object` | Displayed as a 2 dimensional table: one line per field, first column is field name, and second is field value. Nested hashes are collapsed. |
 | `object_list`   | Displayed as a 2 dimensional table: one line per item, one column per field. |
 | `value_list`    | A table with one column. |
@@ -1713,47 +1753,75 @@ Depending on action, the output will contain:
 | `status`        | A message. |
 | `other_struct`  | A complex structure that cannot be displayed as an array. |
 
+#### Enhanced display of special values
+
+Special values are highlighted as follows in `format=table`:
+
+| Value          | Display          |
+|----------------|------------------|
+| `nil`          | `<null>`         |
+| empty `String` | `<empty string>` |
+| empty `Array`  | `<empty list>`   |
+| empty `Hash`   | `<empty dict>`   |
+
+Example:
+
+```shell
+ascli config echo @json:'{"ni":null,"es":"","ea":[],"eh":{}}'
+```
+
+```text
+╭───────┬────────────────╮
+│ field │ value          │
+╞═══════╪════════════════╡
+│ ni    │ <null>         │
+│ es    │ <empty string> │
+│ ea    │ <empty list>   │
+│ eh    │ <empty dict>   │
+╰───────┴────────────────╯
+```
+
 #### Option: `format`
 
 The style of output can be set using the `format` option:
 
-| `format` | Output formatting    |
-|----------|----------------------|
-| `table`  | Text table (default) |
-| `text`   | Value as `String`    |
-| `ruby`   | Ruby code            |
-| `json`   | JSON code            |
-| `jsonpp` | JSON pretty printed  |
-| `yaml`   | YAML                 |
-| `csv`    | Comma Separated Values |
-| `image`  | Image URL or data    |
-| `nagios` | Suitable for Nagios  |
+| `format` | Output formatting       |
+|----------|-------------------------|
+| `table`  | Text table (default)    |
+| `text`   | Value as `String`       |
+| `ruby`   | Ruby code               |
+| `json`   | JSON code               |
+| `jsonpp` | JSON pretty printed     |
+| `yaml`   | YAML                    |
+| `csv`    | Comma Separated Values  |
+| `image`  | Image URL or data       |
+| `nagios` | Suitable for Nagios     |
 
 By default, result of type `single_object` and `object_list` are displayed using format `table`.
 
 #### Option: `table_style`
 
-The table style can be customized with option: `table_style` which expects a `Hash`.
+The way `format`: `table` and `csv` are generated can be customized with option: `table_style` which expects a `Hash`.
 
 For `format=table`, options are the ones described in gem [`terminal-table`](https://github.com/tj/terminal-table).
 
-For `format=csv`, options are described in gem [`csv`](https://ruby.github.io/csv/CSV.html#class-CSV-label-Options+for+Generating).
-
 For example, to display a table with thick Unicode borders:
 
 ```shell
 ascli config preset over --table-style=@ruby:'{border: :unicode_thick_edge}'
 ```
 
+> [!NOTE]
+> Other border styles exist, not limited to: `:unicode`, `:unicode_round`.
+
+For `format=csv`, options are described in gem [`csv`](https://ruby.github.io/csv/CSV.html#class-CSV-label-Options+for+Generating).
+
 For example, to display a CSV with headers and quotes:
 
 ```shell
 ascli config echo @json:'[{"name":"foo","id":1},{"name":"bar","id":8}]' --format=csv --table=@json:'{"headers":true,"force_quotes":true}'
 ```
 
-> [!NOTE]
-> Other border styles exist, not limited to: `:unicode`, `:unicode_round`.
-
 #### Option: `flat_hash`: Single level `Hash`
 
 This option controls how object fields are displayed for complex objects.
@@ -1801,57 +1869,29 @@ ascli config echo @json:'{"A":"a","B":[{"name":"B1","value":"b1"},{"name":"B2","
 ╰───────┴────────────────────────────────────────────────────────────────────────╯
 ```
 
-#### Enhanced display of special values
-
-Special values are highlighted as follows::
-
-| Value          | Display          |
-|----------------|------------------|
-| `nil`          | `<null>`         |
-| empty `String` | `<empty string>` |
-| empty `Array`  | `<empty list>`   |
-| empty `Hash`   | `<empty dict>`   |
-
-Example:
-
-```shell
-ascli config echo @json:'{"ni":null,"es":"","ea":[],"eh":{}}'
-```
-
-```text
-╭───────┬────────────────╮
-│ field │ value          │
-╞═══════╪════════════════╡
-│ ni    │ <null>         │
-│ es    │ <empty string> │
-│ ea    │ <empty list>   │
-│ eh    │ <empty dict>   │
-╰───────┴────────────────╯
-```
-
 #### Option: `multi_single`
 
 This option controls how result fields are displayed as columns or lines, when option `format` is set to `table`.
 Default is `no`.
 There are two types of results that are affected by this option:
 
-| Result          | Description |
-|-----------------|-------------|
-| `single_object` | A single item with multiple fields. |
+| Result          | Description                                 |
+|-----------------|---------------------------------------------|
+| `single_object` | A single item with multiple fields.         |
 | `object_list`   | A list of items, each with multiple fields. |
 
 An item (object) is displayed in one of those 2 ways:
 
-| Display    | rows   | columns |
-|------------|--------|---------|
+| Display    | rows   | columns             |
+|------------|--------|---------------------|
 | Simple     | Fields | `field` and `value` |
-| Transposed | Items  | Fields  |
+| Transposed | Items  | Fields              |
 
 The display of result is as follows:
 
-| Result          | `no`       | `yes`      | `single` |
-|-----------------|------------|------------|----------|
-| `single_object` | Simple     | Simple     | Simple   |
+| Result          | `no`       | `yes`       | `single`                            |
+|-----------------|------------|-------------|-------------------------------------|
+| `single_object` | Simple     | Simple      | Simple                              |
 | `object_list`   | Transposed | Simple<br/>(Multiple objects) | Simple if 1 object,<br/>transposed if 2+ objects |
 
 This parameter can be set as a global default with:
@@ -2004,17 +2044,17 @@ In above example, the same result is obtained with option:
 
 Option `select` applies the filter after a possible "flattening" with option: `flat_hash`.
 
-#### Percent selector
+### Percent selector
 
 The percent selector allows identification of an entity by another unique identifier other than the native identifier.
 
 Syntax: `%<field>:<value>`
 
 When a command is executed on a single entity, the entity is identified by a unique identifier that follows the command.
-For example, in the following command, `1234` is the user's identifier:
+For example, in the following command, `_my_user_id_` is the user's identifier:
 
 ```shell
-ascli aoc admin user show 1234
+ascli aoc admin user show _my_user_id_
 ```
 
 Some commands provide the following capability:
@@ -2043,8 +2083,8 @@ Decoders act like a function with its parameter on right-hand side and are recog
 
 The following decoders are supported:
 
-| Decoder  | Parameter| Returns  | Description |
-|----------|----------|----------|-------------|
+| Decoder  | Parameter| Returns  | Description                                                                              |
+|----------|----------|----------|------------------------------------------------------------------------------------------|
 | `base64` | `String` | `String` | Decode a base64 encoded string |
 | `csvt`   | `String` | `Array`  | Decode a titled CSV value |
 | `env`    | `String` | `String` | Read from a named env var name, e.g. `--password=@env:MYPASSVAR` |
@@ -2210,6 +2250,8 @@ The default value is `_<>:"/\|?*`, corresponding to replacement character `_` an
 Some temporary files may be needed during runtime.
 The temporary folder may be specified with option: `temp_folder`.
 Temporary files are deleted at the end of execution unless option: `clean_temp` is set to `no`.
+By default (`@sys`), the temporary folder is the system's temporary folder for the current user (Ruby `Etc.systmpdir`).
+A special value of `@env` will set the folder to Ruby `Dir.tmpdir` which uses regular env var to set the temp folder.
 
 ### Configuration file
 
@@ -2398,7 +2440,9 @@ coffee --ui=text
 coffee --ui=text --image=@json:'{"text":true,"double":false}'
 coffee --ui=text --image=@json:'{"text":true}'
 detect https://faspex5.example.com/path
+detect https://faspex5.example.com/path faspex5
 detect https://node.example.com/path
+detect https://server.example.com/path server
 detect https://shares.example.com/path shares
 detect https://tst.example.com/path faspio
 detect https://tst.example.com/path httpgw
@@ -2415,6 +2459,7 @@ echo @json:'[{"user":{"id":1,"name":"foo"},"project":"bar"}]' --multi-single=yes
 echo @lines:@stdin:
 echo @list:,1,2,3
 echo @secret:
+echo @stdbin:
 echo @uri:/etc/hosts
 echo @uri:file:/etc/hosts
 echo @uri:http://ifconfig.me
@@ -2455,6 +2500,7 @@ remote_certificate chain https://node.example.com/path
 remote_certificate name https://node.example.com/path
 remote_certificate only https://node.example.com/path
 smtp_settings
+sync spec
 tokens flush
 tokens list
 tokens show foobar
@@ -2470,9 +2516,11 @@ wizard https://faspex4.example.com/path faspex --username=test --password=test
 wizard https://faspex5.example.com/path faspex5 --key-path=my_private_key
 wizard https://node.example.com/path node --username=test --password=test
 wizard https://orch.example.com/path orchestrator --username=test --password=test
+wizard https://server.example.com/path server --username=my_username --password=my_password
 wizard https://shares.example.com/path shares --username=test --password=test
-wizard my_org aoc --key-path=my_private_key --username=my_user_email
+wizard https://tst.example.com/path faspio --username=my_username --password=my_password
 wizard my_org aoc --key-path=my_private_key --username=my_user_email --use-generic-client=yes
+wizard my_org aoc mypreset --key-path=my_private_key --username=my_user_email
 ```
 
 #### Format of file
@@ -2585,20 +2633,21 @@ The wizard is a command that asks the user for information and creates an [Optio
 
 It takes three optional arguments:
 
-- The URL of the application, else it will ask for it;
-- The plugin name: it limits detection to a given plugin, else it will try to detect known plugins from the URL
-- The preset name: it will create a new [Option Preset](#option-preset) with this name, else it will use specific information to generate a unique preset name.
+|#| Parameter description                      | If not provided, `ascli`                 |
+|-|--------------------------------------------|--------------------------------------------|
+|1| **URL** or hostname of the application     | ask for it.                                |
+|2| The **plugin name** to limit search to     | tries to detect known plugins from the URL |
+|3| The **preset name** to save in config file | generates a unique preset name             |
 
-Special options are also available to the wizard:
+Options are also available for the wizard:
 
-| Option      | Value    | Description |
-|-------------|----------|-------------|
-| `default`   | [yes]/no | Set as default configuration for specified plugin. |
+| Option      | Value    | Description                                                         |
+|-------------|----------|---------------------------------------------------------------------|
+| `default`   | [yes]/no | Set as default configuration for specified plugin.                  |
 | `override`  | yes/[no] | Override existing default preset name for the plugin, if it exists. |
-| `key-path`  | path     | Path to private key for JWT.    |
-| `test-mode` | yes/[no] | Skip private key check step.    |
+| `key_path`  | path     | Path to private key for JWT.                                        |
 
-Other options can be provided to the wizard, such as `--username`, etc...
+Other plugin-specific options can be provided to the wizard, such as `--username`, etc...
 They will be added to the [Option Preset](#option-preset) created by the wizard.
 
 The simplest invocation is:
@@ -2607,6 +2656,9 @@ The simplest invocation is:
 ascli config wizard
 ```
 
+If the application requires a private key, the user can either provide the path to it with option `key_path`.
+The user is told where to place the associated public pey PEM in the application.
+
 #### Example of configuration for a plugin
 
 For Faspex, Shares, Node (including ATS, Aspera Transfer Service), Console,
@@ -2713,8 +2765,8 @@ brew install hashicorp/tap/vault
 vault server -dev -dev-root-token-id=dev-only-token
 ```
 
-| Parameter | Example  | Description |
-|-----------|----------|-------------|
+| Parameter | Example                 | Description                                                         |
+|-----------|-------------------------|---------------------------------------------------------------------|
 | `type`    | `vault`                 | The type of the vault |
 | `url`     | `http://127.0.0.1:8200` | The URL of the vault  |
 | `token`   | `dev-only-token`        | The token for the vault, by default uses parameter `vault_password` |
@@ -2730,10 +2782,10 @@ vault server -dev -dev-root-token-id=dev-only-token
 
 It is possible to manage secrets in macOS keychain (only read supported currently).
 
-| Parameter | Example  | Description |
-|-----------|----------|-------------|
-| `type`    | `system` | The type of the vault |
-| `name`    | ``ascli``  | The name of the keychain to use |
+| Parameter | Example     | Description                        |
+|-----------|-------------|------------------------------------|
+| `type`    | `system`    | The type of the vault.             |
+| `name`    | ``ascli`` | The name of the keychain to use.   |
 
 ```shell
 --vault=@json:'{"type":"system","name":"ascli"}'
@@ -2747,10 +2799,10 @@ It is possible to store and use secrets encrypted in a file using option `vault`
 {"type":"file","name":"vault.bin"}
 ```
 
-| Parameter | Example      | Description |
-|-----------|--------------|-------------|
-| `type`    | `file`       | The type of the vault |
-| `name`    | `vault.bin`  | File path, absolute, or relative to the configuration folder `ASCLI_HOME` |
+| Parameter | Example      | Description                                                        |
+|-----------|--------------|--------------------------------------------------------------------|
+| `type`    | `file`       | The type of the vault.                                             |
+| `name`    | `vault.bin`  | File path, absolute, or relative to the configuration folder `ASCLI_HOME`. |
 
 #### Vault: Operations
 
@@ -2888,12 +2940,12 @@ This server can server HTTP or HTTPS (with certificate):
 
 The following parameters are supported:
 
-| Parameter         | Type     | Default | Description                                         |
-|-------------------|----------|---------|-----------------------------------------------------|
-| `url`             | `String` | `http://localhost:8080` | Base URL on which requests are listened, a path can be provided.           | <!-- markdownlint-disable-line -->
-| `cert`            | `String` | -       | (HTTPS) Path to certificate file (with ext. `.pfx` or `.p12` for PKCS12) |
-| `key`             | `String` | -       | (HTTPS) Path to private key file (PEM), or passphrase for PKCS12           |
-| `chain`           | `String` | -       | (HTTPS) Path to certificate chain (PEM only)                         |
+| Parameter         | Type     | Default                 | Description                                                      |
+|-------------------|----------|-------------------------|------------------------------------------------------------------|
+| `url`             | `String` | `http://localhost:8080` | Base URL on which requests are listened, a path can be provided. | <!-- markdownlint-disable-line -->
+| `cert`            | `String` | -       | (HTTPS) Path to certificate file (with ext. `.pfx` or `.p12` for `PKCS12`).        |
+| `key`             | `String` | -       | (HTTPS) Path to private key file (PEM), or passphrase for `PKCS12`.                |
+| `chain`           | `String` | -       | (HTTPS) Path to certificate chain (PEM only).                                    |
 
 Parameter `url` (base URL) defines:
 
@@ -2913,12 +2965,12 @@ This is available:
 
 The following options can be specified in the option `image`:
 
-| Option     | Type    | Description |
-|------------|---------|-------------|
-| reserve    | `Integer` | Lines reserved to display a status |
-| text       | `Bool`    | Display text instead of image|
-| double     | `Bool`    | Display double text resolution (half characters) |
-| font_ratio | `Float`   | Font height/width ratio in terminal |
+| Option     | Type      | Description                                       |
+|------------|-----------|---------------------------------------------------|
+| reserve    | `Integer` | Lines reserved to display a status.               |
+| text       | `Bool`    | Display text instead of image.                    |
+| double     | `Bool`    | Display double text resolution (half characters). |
+| font_ratio | `Float`   | Font height/width ratio in terminal.              |
 
 ```shell
 ascli config image https://eudemo.asperademo.com/wallpaper.jpg --ui=text --image=@json:'{"text":true}'
@@ -2957,8 +3009,8 @@ To increase debug level, use option `log_level` (e.g. using command line `--log-
 By default, passwords and secrets are redacted from logs.
 Set option `log_secrets` to `yes` to include secrets in logs.
 
-| Option        | Values | Description |
-|---------------|--------|-------------|
+| Option        | Values | Description                                                             |
+|---------------|--------|-------------------------------------------------------------------------|
 | `logger`      | `stdout`<br/>`stderr`<br/>`syslog` | Type of output.<br/>Default: `stderr` |
 | `log_level`   | `trace2`<br/>`trace1`<br/>`debug`<br/>`info`<br/>`warn`<br/>`error` | Minimum level displayed.<br/>Default: `warn` |
 | `log_secrets` | `yes`<br/>`no` | Show or hide secrets in logs.<br/>Default: `no` (Hide) |
@@ -2972,12 +3024,12 @@ The default formatter is:
 ->(s, _d, _p, m){"#{s[0..2]} #{m}\n"}
 ```
 
-Availaible formatters for `log_format`:
+Available formatters for `log_format`:
 
-| Name      | Description                             |
-|-----------|-----------------------------------------|
-| `default` | Default formatter.                      |
-| `standard`| Standard Ruby formatter.                |
+| Name      | Description              |
+|-----------|--------------------------|
+| `default` | Default formatter.       |
+| `standard`| Standard Ruby formatter. |
 
 Examples:
 
@@ -3020,20 +3072,22 @@ To disable this warning, set the option `warn_insecure` to `no`.
 
 HTTP connection parameters (not `ascp` WSS) can be adjusted using option `http_options`:
 
-| Parameter                 | Type      | Default         | Handler   |
-|---------------------------|-----------|-----------------|-----------|
-| `read_timeout`            | `Integer` | `60`            | Ruby      |
-| `write_timeout`           | `Integer` | `60`            | Ruby      |
-| `open_timeout`            | `Integer` | `60`            | Ruby      |
-| `keep_alive_timeout`      | `Integer` | `2`             | Ruby      |
-| `ssl_options`             | `Array`   | See below       | Ruby      |
-| `user_agent`              | `Integer` | `ascli`       | `ascli` |
-| `download_partial_suffix` | `Integer` | `.http_partial` | `ascli` |
-| `retry_on_error`          | `Bool`    | `false`         | `ascli` |
-| `retry_on_timeout`        | `Bool`    | `true`          | `ascli` |
-| `retry_on_unavailable`    | `Bool`    | `true`          | `ascli` |
-| `retry_max`               | `Integer` | `1`             | `ascli` |
-| `retry_sleep`             | `Integer` | `4`             | `ascli` |
+| Parameter                 | Type      | Default         | Handler         |
+|-------------------------|---------|---------------|---------------|
+| `read_timeout`            | `Integer` | `60`            | Ruby            |
+| `write_timeout`           | `Integer` | `60`            | Ruby            |
+| `open_timeout`            | `Integer` | `60`            | Ruby            |
+| `keep_alive_timeout`      | `Integer` | `2`             | Ruby            |
+| `ssl_options`             | `Array`   | See below       | Ruby            |
+| `user_agent`              | `Integer` | `ascli`       | `ascli` Rest  |
+| `download_partial_suffix` | `Integer` | `.http_partial` | `ascli` Rest  |
+| `retry_on_error`          | `Bool`    | `false`         | `ascli` Rest  |
+| `retry_on_timeout`        | `Bool`    | `true`          | `ascli` Rest  |
+| `retry_on_unavailable`    | `Bool`    | `true`          | `ascli` Rest  |
+| `retry_max`               | `Integer` | `1`             | `ascli` Rest  |
+| `retry_sleep`             | `Integer` | `4`             | `ascli` Rest  |
+| `token_cache_max_age`     | `Integer` | `1800`          | `ascli` OAuth |
+| `token_refresh_threshold` | `Integer` | `120`           | `ascli` OAuth |
 
 Time values are in set **seconds** and can be of type either `Integer` or `Float`.
 Default values are the ones of Ruby:
@@ -3047,11 +3101,11 @@ Example:
 ascli aoc admin package list --http-options=@json:'{"read_timeout":10.0}'
 ```
 
-`ssl_options` corresponds to a list of options as listed in `man SSL_CTX_set_options`.
+The option `ssl_options` corresponds to a list of options as listed in `man SSL_CTX_set_options`.
 The default initial value is the default of Ruby as specified in `openssl/ssl.rb`.
 Each option can be specified as a `String` with the same name as in the OpenSSL library by removing the prefix: `SSL_OP_`, or an `Integer` (e.g. `0` resets to no option).
 If the name appears in the list, the option is set.
-If the name appears in the list prefixed with a hyphen (`-`), the option is unset.
+If the name appears in the list prefixed with a hyphen (`-`), the option is cleared.
 For example to enable option `SSL_OP_CIPHER_SERVER_PREFERENCE`, add it to the list as `CIPHER_SERVER_PREFERENCE`.
 To disable option `SSL_OP_SAFARI_ECDHE_ECDSA_BUG`, add it as `-SAFARI_ECDHE_ECDSA_BUG`.
 
@@ -3116,7 +3170,7 @@ ascli config proxy_check --fpac='function FindProxyForURL(url, host) {return "PR
 ```
 
 ```text
-PROXY proxy.example.com:1234;DIRECT
+PROXY proxy.example.com:8080;DIRECT
 ```
 
 ```shell
@@ -3326,8 +3380,8 @@ Transfers will be executed by a transfer client, here called **Transfer Agent**.
 
 The following agents are supported and selected with option `transfer`:
 
-| `transfer`                         | location | Description of agent          |
-|------------------------------------|----------|-------------------------------|
+| `transfer` | location | Description of agent          |
+|----------|----------|-------------------------------|
 | [`direct`](#agent-direct)          | local    | direct execution of `ascp`    |
 | [`transferd`](#agent-transfer-daemon) | local    | Aspera Transfer Daemon        |
 | [`connect`](#agent-connect-client) | local    | Aspera Connect Client         |
@@ -3354,14 +3408,16 @@ This is the default agent for `ascli` (option `--transfer=direct`).
 `ascli` will locally search installed Aspera products, including SDK, and use `ascp` from that component.
 Refer to section [FASP](#fasp-configuration).
 
+##### Agent: Direct: `transfer_info`
+
 The `transfer_info` option accepts the following optional parameters to control multi-session, Web Socket Session, Resume policy and add any argument to `ascp`:
 
-| Name                   | Type    | Description |
-|------------------------|---------|-------------|
+| Name                   | Type      | Description                                                                 |
+|------------------------|-----------|-----------------------------------------------------------------------------|
 | `wss`                  | `Bool`    | Web Socket Session<br/>Enable use of web socket session in case it is available<br/>Default: `true` |
 | `quiet`                | `Bool`    | If `true`, then `ascp` progress bar is not shown.<br/>Default: `false` |
 | `trusted_certs`        | `Array`   | List of repositories for trusted certificates. |
-| `client_ssh_key`       | `String` | SSH Keys to use for token-based transfers.<br/>One of: `dsa_rsa`, `rsa`, `per_client`.<br/>Default: `rsa` |
+| `client_ssh_key`       | `String`  | SSH Keys to use for token-based transfers.<br/>One of: `dsa_rsa`, `rsa`, `per_client`.<br/>Default: `rsa` |
 | `ascp_args`            | `Array`   | `Array` of strings with native `ascp` arguments.<br/>Default: `[]` |
 | `spawn_timeout_sec`    | `Float`   | Multi session<br/>Verification time that `ascp` is running<br/>Default: `3` |
 | `spawn_delay_sec`      | `Float`   | Multi session<br/>Delay between startup of sessions<br/>Default: `2` |
@@ -3380,14 +3436,26 @@ Sleep between iterations is given by the following formula where `iter_index` is
 max( sleep_max, sleep_initial * sleep_factor ^ iter_index )
 ```
 
-To display the native progress bar of `ascp`, use `--progress-bar=no --transfer-info=@json:'{"quiet":false}'`.
+To display the native progress bar of `ascp`, use:
+
+```shell
+--progress-bar=no --transfer-info=@json:'{"quiet":false}'`
+```
 
 To skip usage of management port (which disables custom progress bar), set option `monitor` to `false`.
-In that, use the native progress bar: `--transfer-info=@json:'{"monitor":false,"quiet":false}'`
+In that, use the native progress bar:
+
+```shell
+--transfer-info=@json:'{"monitor":false,"quiet":false}'`
+```
 
 By default, Ruby's root CA store is used to validate any HTTPS endpoint used by `ascp` (e.g. WSS).
 In order to use a custom certificate store, use the `trusted_certs` option of direct agent's option `transfer_info`.
-To use `ascp`'s default, use option: `--transfer-info=@json:'{"trusted_certs":null}'`.
+To use `ascp`'s default, use option:
+
+```shell
+--transfer-info=@json:'{"trusted_certs":null}'`.
+```
 
 Some transfer errors are considered **retry-able** (e.g. timeout) and some other not (e.g. wrong password).
 The list of known protocol errors and retry level can be listed:
@@ -3434,6 +3502,30 @@ In addition to standard methods described in section [File List](#list-of-files-
 > [!NOTE]
 > Those methods have limitations: they apply **only** to the [`direct`](#agent-direct) transfer agent (i.e. local `ascp`) and not for Aspera on Cloud.
 
+##### Agent: Direct: Management messages
+
+By default, `ascli` gets notification from `ascp` on its management port.
+This can be de-activated with parameter: `monitor=false` of `transfer_info`.
+
+It is also possible to send local messages to this management port.
+A typical use is to change the target rate of a running transfer.
+
+The communication is done through a flat JSON file that shall be created in `ascli` config folder as displayed with:
+
+```shell
+ascli config folder
+```
+
+The name of the file shall be: `send_<PID>`, where `<PID>` is the process id of the running `ascli`.
+
+Example to change the target rate:
+
+```shell
+echo '{"type":"RATE","Rate":300000}' > ~/.aspera/ascli/send_67470
+```
+
+When `ascli` detects this file, it uses it and then deletes it.
+
 ##### Agent: Direct: `aspera.conf`: Virtual Links
 
 This agent supports a local configuration file: `aspera.conf` where Virtual links can be configured:
@@ -3610,11 +3702,11 @@ By specifying option: `--transfer=httpgw`, `ascli` will start transfers using th
 
 Parameters provided in option `transfer_info` are:
 
-| Name                | Type      | Description                           |
-|---------------------|-----------|---------------------------------------|
-| `url`               | `String`  | URL of the HTTP GW<br/>Mandatory |
+| Name                | Type      | Description                                               |
+|---------------------|-----------|-----------------------------------------------------------|
+| `url`               | `String`  | URL of the HTTP GW<br/>Mandatory                        |
 | `upload_chunk_size` | `Integer` | Size in bytes of chunks for upload<br/>Default: `64000` |
-| `api_version`       | `String`  | Force use of version (`v1`, `v2`)<br/>Default: `v2` |
+| `api_version`       | `String`  | Force use of version (`v1`, `v2`)<br/>Default: `v2`     |
 | `synchronous`       | `Bool`    | Wait for each message acknowledgment<br/>Default: `false` |
 
 Example:
@@ -3635,8 +3727,8 @@ Set option `transfer` to `transferd`.
 
 Options for `transfer_info` are:
 
-| Name     | Type     | Description |
-|----------|----------|-------------|
+| Name     | Type     | Description                                  |
+|----------|----------|----------------------------------------------|
 | `url`    | `String` | IP address and port listened by the daemon<br/>Mandatory<br/>Default: `:0` |
 | `start`  | `Bool`   | Start a new daemon.<br/>Default: `true` |
 | `stop`   | `Bool`   | Stop daemon when exiting `ascli`<br/>Default: `true` |
@@ -3672,7 +3764,7 @@ On Windows the compilation may fail for various reasons (3.1.1):
 
 - `cannot find -lx64-ucrt-ruby310`
 
-   &rarr; copy the file `[Ruby main dir]\lib\libx64-ucrt-ruby310.dll.a` to `[Ruby main dir]\lib\libx64-ucrt-ruby310.a` (remove the `dll` extension)
+   &rarr; copy the file `[Ruby main dir]\lib\libx64-ucrt-ruby310.dll.a` to (remove the `dll` extension) `[Ruby main dir]\lib\libx64-ucrt-ruby310.a`
   
 - `conflicting types for 'gettimeofday'`
 
@@ -3748,7 +3840,7 @@ ascli config ascp schema transferd --format=jsonpp
 `ascp` argument or environment variable is provided in description.
 
 | ID | Name |
-| -- | ---- |
+| - | --------- |
 | A | Direct |
 | C | Connect |
 | D | Desktop |
@@ -3757,17 +3849,17 @@ ascli config ascp schema transferd --format=jsonpp
 | T | Transferd |
 
 | Field | Type | Description |
-| ----- | ---- | ----------- |
+| ------------------------------ | ------- | -------------------------------------------------------------------------------- |
 | apply_local_docroot | boolean | Apply local docroot to source paths.<br/>(A, T)<br/>(`--apply-local-docroot`) |
 | authentication | string | Set to `token` for SSH bypass keys, else password asked if not provided.<br/>(C) |
 | cipher | string | In transit encryption algorithms.<br/>Allowed values: `none`, `aes-128`, `aes-192`, `aes-256`, `aes-128-cfb`, `aes-192-cfb`, `aes-256-cfb`, `aes-128-gcm`, `aes-192-gcm`, `aes-256-gcm`<br/>(`-c (conversion){enum}`) |
-| cipher_allowed | string | Returned by node API. Valid literals include `aes-128` and `none`.<br/>(C) |
-| content_protection | string | Enable client-side encryption at rest (CSEAR). (content protection)<br/>Allowed values: `encrypt`, `decrypt`<br/>(`--file-crypt={enum}`) |
-| content_protection_password | string | Specifies CSEAR password. (content protection)<br/>(env:`ASPERA_SCP_FILEPASS`) |
+| cipher_allowed | string | Returned by node API. Valid literals include `aes-128` and `none`.<br/>(C)<br/>Allowed values: `none`, `aes-128`, `aes-192`, `aes-256`, `aes-128-cfb`, `aes-192-cfb`, `aes-256-cfb`, `aes-128-gcm`, `aes-192-gcm`, `aes-256-gcm` |
+| content_protection | string | Enable client-side encryption at rest (CSEAR).<br/>Allowed values: `encrypt`, `decrypt`<br/>(`--file-crypt={enum}`) |
+| content_protection_password | string | Specifies CSEAR password.<br/>(env:`ASPERA_SCP_FILEPASS`) |
 | cookie | string | Metadata for transfer specified by application.<br/>(env:`ASPERA_SCP_COOKIE`) |
 | create_dir | boolean | Specifies whether to create new directories.<br/>(`-d`) |
 | delete_before_transfer | boolean | Before transfer, delete files that exist at the destination but not at the source.<br/>The source and destination arguments must be directories that have matching names.<br/>Objects on the destination that have the same name but different type or size as objects on the source are not deleted.<br/>(`--delete-before-transfer`) |
-| delete_source | boolean | Remove transfered source files after transfer success. TODO equivalent to `remove_after_transfer` + `remove_empty_directories` + `remove_empty_source_directory`<br/>(A, N, T)<br/>(`--remove-after-transfer`) |
+| delete_source | boolean | Remove transfered source files after transfer success. Equivalent to `remove_after_transfer` + `remove_empty_directories` + `remove_empty_source_directory`. Take precedence over those.<br/>(A, N, T) |
 | destination_root | string | Destination root directory. |
 | destination_root_id | string | The file ID of the destination root directory.<br/>Required when using Bearer token auth for the destination node.<br/>(T) |
 | dgram_size | integer | UDP datagram size in bytes.<br/>(`-Z {integer}`) |
@@ -3783,16 +3875,16 @@ ascli config ascp schema transferd --format=jsonpp
 | https_fallback_port | integer | Specifies HTTPS port when cipher is used.<br/>(`-t {integer}`) |
 | icos | object | Configuration parameters for IBM Cloud Object Storage (ICOS).<br/>(T) |
 | keepalive | boolean | The session is running in persistent session mode.<br/>(A, T)<br/>(`--keepalive`) |
-| lock_min_rate | boolean | TODO: remove ?<br/>(C) |
+| lock_min_rate | boolean | n/a<br/>(C) |
 | lock_min_rate_kbps | boolean | If `true`, lock the minimum transfer rate to the value set for min_rate_kbps.<br/>If `false`, users can adjust the transfer rate up to the value set for target_rate_cap_kbps.<br/>(C, T) |
 | lock_rate_policy | boolean | If `true`, lock the rate policy to the default value.<br/>(C, T) |
-| lock_target_rate | boolean | TODO: remove ?<br/>(C) |
-| lock_target_rate_kbps | boolean | If `true`, lock the target transfer rate to the default value set for target_rate_kbps.<br/>If `false`, users can adjust the transfer rate up to the value set for target_rate_cap_kbps.<br/>(C, T) |
+| lock_target_rate | boolean | n/a<br/>(C) |
+| lock_target_rate_kbps | boolean | If `true`, lock the target transfer rate to the default value set for `target_rate_kbps`.<br/>If `false`, users can adjust the transfer rate up to the value set for `target_rate_cap_kbps`.<br/>(C, T) |
 | min_rate_cap_kbps | integer | The highest minimum rate that an incoming transfer can request, in kilobits per second.<br/>Client minimum rate requests that exceed the minimum rate cap are ignored.<br/>The default value of unlimited applies no cap to the minimum rate. (Default: 0)<br/>(C, T) |
 | min_rate_kbps | integer | Set the minimum transfer rate in kilobits per second.<br/>(`-m {integer}`) |
-| move_after_transfer | string | Move source files to the specified `archive-dir` directory after they are transferred correctly.<br/>Available as of 3.8.0. Details in ascp manual.<br/>Requires write permissions on the source.<br/>If `src_base` is specified, files are moved to `archive-dir`/`path-relative-to-srcbase`.<br/>`archive-dir` must be in the same file system (or cloud storage account) as the source files being transferred.<br/>`archive-dir` is subject to the same docroot restrictions as source files.<br/>`move_after_transfer` and `remove_after_transfer` are mutually exclusive options.<br/>After files have been moved to the archive, the original source directory structure is left in place. Empty directories are not saved to `archive-dir`. To remove empty source directories after a successful move operation, also set `remove_empty_directories` to `true`. When using `remove_empty_directories`, empty directory removal examination starts at the `srcbase` and proceeds down any subdirectories. If no `srcbase` is used and a file path (as opposed to a directory path) is specified, then only the immediate parent directory is examined and removed if it is empty following the move of the source file.<br/>(A, N, T)<br/>(`--move-after-transfer={string}`) |
-| multi_session | integer | Use multi-session transfer. max 128.<br/>Each participant on one host needs an independent UDP (-O) port.<br/>Large files are split between sessions only when transferring with `resume_policy`=`none`. |
-| multi_session_threshold | integer | Split files across multiple ascp sessions if their size in bytes is greater than or equal to the specified value.<br/>(0=no file is split)<br/>(A, N, T)<br/>(`--multi-session-threshold={integer}`) |
+| move_after_transfer | string | Move source files to the specified `archive-dir` directory after they are transferred correctly.<br/>Available as of 3.8.0. Details in `ascp` manual.<br/>Requires write permissions on the source.<br/>If `src_base` is specified, files are moved to `archive-dir`/`path-relative-to-srcbase`.<br/>`archive-dir` must be in the same file system (or cloud storage account) as the source files being transferred.<br/>`archive-dir` is subject to the same docroot restrictions as source files.<br/>`move_after_transfer` and `remove_after_transfer` are mutually exclusive options.<br/>After files have been moved to the archive, the original source directory structure is left in place. Empty directories are not saved to `archive-dir`. To remove empty source directories after a successful move operation, also set `remove_empty_directories` to `true`. When using `remove_empty_directories`, empty directory removal examination starts at the `srcbase` and proceeds down any subdirectories. If no `srcbase` is used and a file path (as opposed to a directory path) is specified, then only the immediate parent directory is examined and removed if it is empty following the move of the source file.<br/>(A, N, T)<br/>(`--move-after-transfer={string}`) |
+| multi_session | integer | Use multi-session transfer. max 128.<br/>Each participant on one host needs an independent UDP (-O) port.<br/>Large files are split between sessions only when transferring with `resume_policy`=`none`.<br/>(special:`-C {integer}`) |
+| multi_session_threshold | integer | Split files across multiple `ascp` sessions if their size in bytes is greater than or equal to the specified value.<br/>(0=no file is split)<br/>(A, N, T)<br/>(`--multi-session-threshold={integer}`) |
 | obfuscate_file_names | boolean | HTTP Gateway obfuscates file names when set to `true`.<br/>(H) |
 | overwrite | string | Overwrite files at the destination with source files of the same name based  on the policy:<br/>- `always` : Always overwrite the file.<br/>- `never` : Never overwrite the file. If the destination contains partial files that are older or the same  as the source files and resume is enabled, the partial files resume transfer. Partial files with checksums or sizes that differ from the source files  are not overwritten.<br/>- `diff` : (default) Overwrite the file if it is different from the source,  depending on the compare method (default is size). If the destination is object storage, `diff` has the same effect as always. If resume is not enabled, partial files are overwritten if they are different  from the source, otherwise they are skipped. If resume is enabled, only partial files with different sizes or checksums  from the source are overwritten; otherwise, files resume.<br/>- `diff+older` : Overwrite the file if it is older and different from the source,  depending on the compare method (default is size). If resume is not enabled, partial files are overwritten if they are older  and different from the source, otherwise they are skipped. If resume is enabled, only partial files that are different and older than  the source are overwritten, otherwise they are resumed.<br/>- `older` : Overwrite the file if its timestamp is older than the source timestamp.<br/>If you set an overwrite policy of `diff` or `diff+older`, difference is determined  by the value set for `resume_policy`:<br/>`none` : The source and destination files are always considered different and  the destination file is always overwritten<br/>`attributes` : The source and destination files are compared based on file attributes <br/>`sparse_checksum` : The source and destination files are compared based on sparse checksums, (currently file size)<br/>`full_checksum` : The source and destination files are compared based on full checksums<br/>Allowed values: `never`, `always`, `diff`, `older`, `diff+older`<br/>(`--overwrite={enum}`) |
 | password | string | Password for local Windows user when transfer user associated with node API user is not the same as the one running `asperanoded`.<br/>Allows impersonating the transfer user and have access to resources (e.g. network shares).<br/>Windows only, node API only.<br/>(N) |
@@ -3801,7 +3893,7 @@ ascli config ascp schema transferd --format=jsonpp
 | preserve_access_time | boolean | Preserve the source-file access timestamps at the destination.<br/>Because source access times are updated by the transfer operation, the timestamp that is preserved is the one just before to the transfer.<br/>(`--preserve-access-time`) |
 | preserve_acls | string | Preserve access control lists.<br/>(A, T)<br/>Allowed values: `none`, `native`, `metafile`<br/>(`--preserve-acls={enum}`) |
 | preserve_creation_time | boolean | Preserve source-file creation timestamps at the destination.<br/>Only Windows systems retain information about creation time. If the destination is not a Windows computer, this option is ignored.<br/>(`--preserve-creation-time`) |
-| preserve_extended_attrs | string | Preserve the extended attributes.<br/>(T, A)<br/>Allowed values: `none`, `native`, `metafile`<br/>(`--preserve-xattrs={enum}`) |
+| preserve_extended_attrs | string | Preserve the extended attributes.<br/>(A, T)<br/>Allowed values: `none`, `native`, `metafile`<br/>(`--preserve-xattrs={enum}`) |
 | preserve_file_owner_gid | boolean | Preserve the group ID for a file owner.<br/>(A, T)<br/>(`--preserve-file-owner-gid`) |
 | preserve_file_owner_uid | boolean | Preserve the user ID for a file owner.<br/>(A, T)<br/>(`--preserve-file-owner-uid`) |
 | preserve_modification_time | boolean | Set the modification time, the last time a file or directory was modified (written), of a transferred file to the modification of the source file or directory.<br/>Preserve source-file modification timestamps at the destination.<br/>(`--preserve-modification-time`) |
@@ -3830,7 +3922,7 @@ ascli config ascp schema transferd --format=jsonpp
 | source_root_id | string | The file ID of the source root directory. Required when using Bearer token auth for the source node.<br/>(N, T) |
 | src_base | string | Specify the prefix to be stripped off from each source object.<br/>The remaining portion of the source path is kept intact at the destination.<br/>Special care must be taken when used with cloud storage.<br/>(A, N, T)<br/>(`--src-base64=(conversion){string}`) |
 | src_base64 | string | The folder name below which the directory structure is preserved (base64 encoded).<br/>(A, T)<br/>(`--src-base64={string}`) |
-| ssh_args | array | Array of arguments to pass to SSH. Use with caution.<br/>(T, A)<br/>(`--ssh-args={array}`) |
+| ssh_args | array | Add arguments to the command-line arguments passed to the external ssh program (implies -SSH). The arguments are inserted before any key file(s) supplied to `ascp` and before the user/host arguments.<br/>(A, T)<br/>(special:`--ssh-arg={array}`) |
 | ssh_port | integer | Specifies SSH (TCP) port.<br/>(`-P {integer}`) |
 | ssh_private_key | string | Private key used for SSH authentication.<br/>Shall look like: -----BEGIN RSA PRIV4TE KEY-----\nMII...<br/>Note the JSON encoding: \n for newlines.<br/>(A, T)<br/>(env:`ASPERA_SCP_KEY`) |
 | ssh_private_key_passphrase | string | The passphrase associated with the transfer user's SSH private key. Available as of 3.7.2.<br/>(A, T)<br/>(env:`ASPERA_SCP_PASS`) |
@@ -3843,10 +3935,10 @@ ascli config ascp schema transferd --format=jsonpp
 | target_rate_kbps | integer | Specifies desired speed for the transfer.<br/>(`-l {integer}`) |
 | title | string | Title of the transfer.<br/>(C, N, T) |
 | token | string | Authorization token. Type: Bearer, Basic or ATM. (Also arg -W)<br/>(env:`ASPERA_SCP_TOKEN`) |
-| use_ascp4 | boolean | Specify version of protocol. Do not use ascp4.<br/>(A, N, T) |
-| use_system_ssh | string | TODO, comment...<br/>(A, T)<br/>(`-SSH {string}`) |
-| wss_enabled | boolean | Server has Web Socket service enabled. |
-| wss_port | integer | TCP port used for websocket service feed. |
+| use_ascp4 | boolean | Specify version of protocol. Do not use `ascp4`.<br/>(A, N, T) |
+| use_system_ssh | string | Use an external ssh program instead of the built-in libssh2 implementation to establish the connection to the remote host. The desired ssh program must be in the environment's PATH.<br/>To enable debugging of the ssh process, supply `-DD` and `--ssh-arg=-vv` arguments to `ascp`.<br/>(A, T)<br/>(`-SSH {string}`) |
+| wss_enabled | boolean | Server has Web Socket service enabled.<br/>(special:`--ws-connect`) |
+| wss_port | integer | TCP port used for Web Socket service feed. |
 | xfer_max_retries | integer | Maximum number of retries, for node API initiated transfers. Shall not exceed aspera.conf `transfer_manager_max_retries` (default 5).<br/>(N) |
 
 #### Destination folder for transfers
@@ -3955,9 +4047,6 @@ Example: Source file `200KB.1` is renamed `sample1` on destination:
 ascli server upload --src-type=pair ~/Documents/Samples/200KB.1 /Upload/sample1
 ```
 
-> [!NOTE]
-> There are some specific rules to specify a file list when using **Aspera on Cloud**, refer to the AoC plugin section.
-
 #### Source directory structure on destination
 
 This section is not specific to `ascli` it is `ascp` behavior.
@@ -3981,18 +4070,18 @@ A leading `/` on destination is ignored (relative to docroot) unless docroot is
 
 In the following table source folder `d3` contains 2 files: `f1` and `d4/f2`.
 
-| Source files | Destination | Folders on Dest.  | `create_dir` | Destination Files           |
-|--------------|-------------|-------------------|--------------|-----------------------------|
-| `f1`         | `d/f`       | -                 | false        | Error: `d` does not exist.  |
-| `f1`         | `d/f`       | `d`               | false        | `d/f` (renamed)          |
-| `f1`         | `d/f/.`     | `d`               | false        | `d/f` (renamed)          |
-| `f1`         | `d/f`       | `d/f`             | false        | `d/f/f1`                    |
-| `f1` `f2`    | `d`         | `d`               | false        | `d/f1` `d/f2`               |
-| `d3`         | `d`         | -                 | false        | `d/f1` `d/f2` (renamed)    |
-| `f1`         | `d`         | -                 | true         | `d/f1`                      |
-| `f1` `f2`    | `d`         | -                 | true         | `d/f1` `d/f2`               |
-| `d1/f1` `d2/f2` | `d`      | -                 | true         | `d/f1` `d/f2`               |
-| `d3`         | `d`         | -                 | true         | `d/d3/f1` `d/d3/d4/f2`      |
+| Source files    | Destination | Folders on Dest.  | `create_dir` | Destination Files           |
+|-----------------|-----|-----|------|-----------------------------------|
+| `f1`            | `d/f`       | -                 | false        | Error: `d` does not exist.  |
+| `f1`            | `d/f`       | `d`               | false        | `d/f` (renamed)             |
+| `f1`            | `d/f/.`     | `d`               | false        | `d/f` (renamed)             |
+| `f1`            | `d/f`       | `d/f`             | false        | `d/f/f1`                    |
+| `f1` `f2`       | `d`         | `d`               | false        | `d/f1` `d/f2`               |
+| `d3`            | `d`         | -                 | false        | `d/f1` `d/f2` (renamed)     |
+| `f1`            | `d`         | -                 | true         | `d/f1`                      |
+| `f1` `f2`       | `d`         | -                 | true         | `d/f1` `d/f2`               |
+| `d1/f1` `d2/f2` | `d`         | -                 | true         | `d/f1` `d/f2`               |
+| `d3`            | `d`         | -                 | true         | `d/d3/f1` `d/d3/d4/f2`      |
 
 If a file par list is provided then it is possible to rename or specify a different destination folder for each source (relative to the destination).
 
@@ -4102,7 +4191,7 @@ It can be configured:
 
 - Using utility [`schtasks.exe`](https://learn.microsoft.com/fr-fr/windows-server/administration/windows-commands/schtasks-create)
 
-- Using Powershell function [`scheduletasks`](https://learn.microsoft.com/en-us/powershell/module/scheduledtasks)
+- Using PowerShell function [`scheduletasks`](https://learn.microsoft.com/en-us/powershell/module/scheduledtasks)
 
 - Using `taskschd.msc` (UI)
 
@@ -4306,14 +4395,14 @@ where:
 - `dirname` is the folder name and can contain `/` to specify a subfolder.
 - Supported arguments are:
 
-| Name     | Type  | Description |
-|----------|-------|-------------|
-| count    | int   | Number of files<br/>Mandatory |
-| file     | string| Basename for files<br/>Default: `file` |
-| size     | int   | Size of first file.<br/>Default: 0 |
-| inc      | int   | Increment applied to determine next file size<br/>Default: 0 |
-| seq      | enum  | Sequence in determining next file size<br/>Values: `random`, `sequential`<br/>Default: `sequential` |
-| buf_init | enum  | How source data is initialized<br/>Option `none` is not allowed for downloads.<br/>Values:`none`, `zero`, `random`<br/>Default:`zero` |
+| Name     | Type   | Description                                                    |
+|----------|--------|----------------------------------------------------------------|
+| count    | int    | Number of files<br/>Mandatory |
+| file     | string | Basename for files<br/>Default: `file` |
+| size     | int    | Size of first file.<br/>Default: 0 |
+| inc      | int    | Increment applied to determine next file size<br/>Default: 0 |
+| seq      | enum   | Sequence in determining next file size<br/>Values: `random`, `sequential`<br/>Default: `sequential` |
+| buf_init | enum   | How source data is initialized<br/>Option `none` is not allowed for downloads.<br/>Values:`none`, `zero`, `random`<br/>Default:`zero` |
 
 The sequence parameter is applied as follows:
 
@@ -4365,7 +4454,7 @@ ascli server upload "faux:///mydir?file=testfile&count=1000&size=1" --to-folder=
 ```text
 ascli -h
 NAME
-        ascli -- a command line tool for Aspera Applications (v4.24.1)
+        ascli -- a command line tool for Aspera Applications (v4.24.2)
 
 SYNOPSIS
         ascli COMMANDS [OPTIONS] [ARGS]
@@ -4420,6 +4509,7 @@ OPTIONS: global
         --once-only=ENUM             Process only new items (some commands): [no], yes
         --log-secrets=ENUM           Show passwords in logs: [no], yes
         --clean-temp=ENUM            Cleanup temporary files on exit: no, [yes]
+        --temp-folder=VALUE          Temporary folder
         --pid-file=VALUE             Write process identifier to file, delete on exit (String)
         --home=VALUE                 Home folder for tool (String)
         --config-file=VALUE          Path to YAML file with preset configuration
@@ -4436,7 +4526,6 @@ OPTIONS: global
         --plugin-folder=VALUE        Folder where to find additional plugins
         --override=ENUM              Wizard: override existing value: [no], yes
         --default=ENUM               Wizard: set as default configuration for specified plugin (also: update): no, [yes]
-        --test-mode=ENUM             Wizard: skip private key check step: [no], yes
         --key-path=VALUE             Wizard: path to private key for JWT
         --ascp-path=VALUE            Ascp: Path to ascp
         --use-product=VALUE          Ascp: Use ascp from specified product
@@ -4464,7 +4553,7 @@ OPTIONS: global
         --transfer-info=VALUE        Parameters for transfer agent (Hash)
 
 COMMAND: config
-SUBCOMMANDS: ascp check_update coffee detect documentation download echo email_test file folder gem genkey image initdemo open platform plugins preset proxy_check pubkey remote_certificate smtp_settings test tokens transferd vault wizard
+SUBCOMMANDS: ascp check_update coffee detect documentation download echo email_test file folder gem genkey image initdemo open platform plugins preset proxy_check pubkey remote_certificate smtp_settings sync test tokens transferd vault wizard
 
 
 COMMAND: shares
@@ -4528,7 +4617,6 @@ OPTIONS:
         --instance=VALUE             ATS instance in ibm cloud
         --ats-key=VALUE              ATS key identifier (ats_xxx)
         --ats-secret=VALUE           ATS key secret
-        --params=VALUE               Parameters access key creation (@json:)
         --cloud=VALUE                Cloud provider
         --region=VALUE               Cloud region
 
@@ -4539,12 +4627,13 @@ OPTIONS:
         --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
         --username=VALUE             User's identifier
         --password=VALUE             User's password
+        --auth=ENUM                  OAuth type of authentication: web, [jwt], boot
         --client-id=VALUE            OAuth client identifier
         --client-secret=VALUE        OAuth client secret
-        --redirect-uri=VALUE         OAuth redirect URI for web authentication
-        --auth=ENUM                  OAuth type of authentication: web, [jwt], boot
-        --private-key=VALUE          OAuth JWT RSA private key PEM value (prefix file path with @file:)
-        --passphrase=VALUE           OAuth JWT RSA private key passphrase
+        --redirect-uri=VALUE         OAuth (Web) redirect URI for web authentication
+        --private-key=VALUE          OAuth (JWT) RSA private key PEM value (prefix file path with @file:)
+        --passphrase=VALUE           OAuth (JWT) RSA private key passphrase
+        --scope=VALUE                OAuth scope for API calls
         --box=VALUE                  Package inbox, either shared inbox name or one of: inbox, inbox_history, inbox_all, inbox_all_history, outbox, outbox_history, pending, pending_history, all or ALL
         --shared-folder=VALUE        Send package with files from shared folder
         --group-type=ENUM            Type of shared box: [shared_inboxes], workgroups
@@ -4592,7 +4681,6 @@ OPTIONS:
         --folder-reset-cache=ENUM    Force detection of generated preview by refresh cache: [no], header, read
         --skip-types=VALUE           Skip types in comma separated list
         --previews-folder=VALUE      Preview folder in storage root
-        --temp-folder=VALUE          Path to temp folder
         --skip-folders=VALUE         List of folder to skip
         --base=VALUE                 Basename of output for for test
         --scan-path=VALUE            Subpath in folder id to start scan in (default=/)
@@ -4624,13 +4712,13 @@ OPTIONS:
         --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
         --username=VALUE             User's identifier
         --password=VALUE             User's password
-        --auth=ENUM                  OAuth type of authentication: web, [jwt]
-        --client-id=VALUE            OAuth API client identifier
-        --client-secret=VALUE        OAuth API client secret
-        --scope=VALUE                OAuth scope for AoC API calls
-        --redirect-uri=VALUE         OAuth API client redirect URI
-        --private-key=VALUE          OAuth JWT RSA private key PEM value (prefix file path with @file:)
-        --passphrase=VALUE           RSA private key passphrase (String)
+        --auth=ENUM                  OAuth type of authentication: web, [jwt], boot
+        --client-id=VALUE            OAuth client identifier
+        --client-secret=VALUE        OAuth client secret
+        --redirect-uri=VALUE         OAuth (Web) redirect URI for web authentication
+        --private-key=VALUE          OAuth (JWT) RSA private key PEM value (prefix file path with @file:)
+        --passphrase=VALUE           OAuth (JWT) RSA private key passphrase
+        --scope=VALUE                OAuth scope for API calls
         --workspace=VALUE            Name of workspace (String, NilClass)
         --new-user-option=VALUE      New user creation option for unknown package recipients (Hash)
         --validate-metadata=ENUM     Validate shared inbox metadata: no, [yes]
@@ -4748,39 +4836,50 @@ Aspera on Cloud API requires the use of OAuth v2 mechanism for authentication (H
 
 It is recommended to use the wizard to set it up, although manual configuration is also possible.
 
-### Configuration: Using Wizard
+### AoC configuration: Using Wizard
 
 `ascli` provides a configuration [wizard](#wizard).
 
 The wizard guides you through the steps to create a new configuration preset for Aspera on Cloud.
 
-The first optional argument is the URL of your Aspera on Cloud instance, e.g. `https://_your_instance_.ibmaspera.com` or simply the organization name, and a second optional argument can also be provided to specify the plugin name, e.g. `aoc` for Aspera on Cloud.
+The first optional argument is the URL of your Aspera on Cloud instance or simply the organization name, i.e. one of those :
+
+- `_your_organization_`
+- `_your_organization_.ibmaspera.com`
+- `https://_your_organization_.ibmaspera.com`
+
+The second optional argument can also be provided to specify the plugin name, e.g. `aoc` for Aspera on Cloud.
 If optional arguments are not provided, the wizard will ask interactively and try to detect the application.
 
 Here is a sample invocation :
 
-```text
-ascli config wizard
-option: url> https://_your_instance_.ibmaspera.com
-Detected: Aspera on Cloud
-Preparing preset: aoc_myorg
-Please provide path to your private RSA key, or empty to generate one:
+```console
+$ ascli config wizard
+Using: Aspera on Cloud at https://_my_org_.ibmaspera.com
+Path to private RSA key (leave empty to generate):
 option: key_path>
-using existing key:
-/Users/myself/.aspera/ascli/aspera_aoc_key
+Using existing key:
+/home/john/.aspera/ascli/my_private_key.pem
+Please Log in as user laurent.martin.aspera@fr.ibm.com at: https://_my_org_.ibmaspera.com
+Navigate to: (User) → Account Settings → Profile → Public Key
+Check or update the value to (including BEGIN/END lines):
+-----BEGIN PUBLIC KEY-----
+MIICIjANBg....
+....
+....kCAwEAAQ==
+-----END PUBLIC KEY-----
+Once updated or validated, press [Enter].
+
 Using global client_id.
-option: username> john@example.com
-Updating profile with new key
-creating new config preset: aoc_myorg
-Setting config preset as default for aspera
-saving configuration file
-Done.
+Preparing preset: aoc_my_org_ibmaspera_com_john_example_com
+Setting config preset as default for aoc
 You can test with:
 ascli aoc user profile show
+Saving config file.
 ```
 
 > [!NOTE]
-> In above example, replace `https://_your_instance_.ibmaspera.com` with your actual AoC URL.
+> In above example, replace `https://_my_org_.ibmaspera.com` with your actual AoC URL.
 
 Optionally, it is possible to create a new organization-specific integration, i.e. client application identification.
 For this, specify the option: `--use-generic-client=no`.
@@ -4788,11 +4887,11 @@ For this, specify the option: `--use-generic-client=no`.
 If you already know the application, and want to limit the detection to it, provide URL and plugin name:
 
 ```shell
-ascli config wizard _your_instance_ aoc
+ascli config wizard _my_org_ aoc
 ```
 
 > [!NOTE]
-> In above example, replace `_your_instance_` with the first part of your actual AoC URL: `https://_your_instance_.ibmaspera.com`.
+> In above example, replace `_my_org_` with the first part of your actual AoC URL: `https://_my_org_.ibmaspera.com`.
 
 After successful completion of the wizard, a new configuration preset is created, and set as default for the `aoc` plugin.
 This can be verified with command:
@@ -4801,12 +4900,12 @@ This can be verified with command:
 ascli config preset over
 ```
 
-### Configuration: Using manual setup
+### AoC configuration: Using manual setup
 
 > [!NOTE]
 > If you used the wizard (recommended): skip this section.
 
-#### Configuration details
+#### AoC manual configuration: Details
 
 Several types of OAuth authentication are supported:
 
@@ -4836,7 +4935,7 @@ Else you can use a specific OAuth API `client_id`, the first step is to declare
 
 Let's start by a registration with web based authentication (auth=web):
 
-- Open a web browser, log to your instance: e.g. `https://_your_instance_.ibmaspera.com/`
+- Open a web browser, log to your instance: e.g. `https://_my_org_.ibmaspera.com/`
   (use your actual AoC instance URL)
 - Go to Apps &rarr; Admin &rarr; Organization &rarr; Integrations
 - Click **Create New**
@@ -4861,14 +4960,14 @@ Let's create an [Option Preset](#option-preset) called: `my_aoc_org` using `ask`
 
 ```shell
 ascli config preset ask my_aoc_org url client_id client_secret
-option: url> https://_your_instance_.ibmaspera.com/
+option: url> https://_my_org_.ibmaspera.com/
 option: client_id> my_client_id_here
 option: client_secret> my_client_secret_here
 updated: my_aoc_org
 ```
 
 > [!NOTE]
-> In above example, replace `https://_your_instance_.ibmaspera.com` with your actual AoC URL.
+> In above example, replace `https://_my_org_.ibmaspera.com` with your actual AoC URL.
 
 (This can also be done in one line using the command `config preset update my_aoc_org --url=...`)
 
@@ -4896,7 +4995,7 @@ This can be done in two manners:
 
 - Graphically
 
-  - Open a web browser, log to your instance: `https://_your_instance_.ibmaspera.com/`
+  - Open a web browser, log to your instance: `https://_my_org_.ibmaspera.com/`
     (Use your actual AoC instance URL)
   - Go to Apps &rarr; Admin &rarr; Organization &rarr; Integrations
   - Click on the previously created application
@@ -4939,7 +5038,7 @@ This can be done in two manners:
 
 Open the previously generated public key located here: `$HOME/.aspera/ascli/my_private_key.pub`
 
-- Open a web browser, log to your instance: `https://_your_instance_.ibmaspera.com/`
+- Open a web browser, log to your instance: `https://_my_org_.ibmaspera.com/`
   (Use your actual AoC instance URL)
 - Click on the user's icon (top right)
 - Select **Account Settings**
@@ -5039,7 +5138,7 @@ ascli aoc files bearer_token_node /
 ```
 
 ```shell
-ascli aoc admin node v4 1234 --secret=_ak_secret_here_ bearer_token_node /
+ascli aoc admin node v4 _my_node_id_ --secret=_ak_secret_here_ bearer_token_node /
 ```
 
 ### Administration
@@ -5623,7 +5722,7 @@ ascli aoc packages shared_inboxes list
 
 Use fields: `recipients` and/or `bcc_recipients` to provide the list of recipients: **user** or **shared inbox**:
 
-- Provide either IDs as expected by API: `"recipients":[{"type":"dropbox","id":"1234"}]`
+- Provide either IDs as expected by API: `"recipients":[{"type":"dropbox","id":"_my_shibox_id_"}]`
 - or just names: `"recipients":[{"The Dest"}]`.
 
 ascli will resolve the list of email addresses and dropbox names to the expected type/ID list, based on case-insensitive partial match.
@@ -5693,12 +5792,12 @@ By default, all files in the package are downloaded, i.e. `.` is used as the fil
 Option `package_folder` defines the attribute of folder used as destination sub folder in the `to_folder` path (see description earlier).
 The following syntax is supported
 
-| Syntax | Description |
-|--------|-------------|
-| `@none:` | No subfolder is created, files are downloaded directly into the specified `to_folder`. |
-| `<field>` | A subfolder named after the package's specified field is created inside `to_folder`. |
-| `<field1>+<field2>` | A subfolder named after the combination of two package fields with a `.` is created inside `to_folder`. |
-| `<field1>+<field2>?` | A subfolder named after the package's specified field1 is created, unless it already exists. Else it falls back to the combination of both fields with `.`. |
+| Syntax               | Description                                                                            |
+|----------------------|----------------------------------------------------------------------------------------|
+| `@none:`             | No subfolder is created, files are downloaded directly into the specified `to_folder`. |
+| `<field>`            | A subfolder named after the package's specified field is created inside `to_folder`.   |
+| `<field1>+<field2>`  | A subfolder named after the combination of two package fields with a `.` is created inside `to_folder`. |
+| `<field1>+<field2>?` | A subfolder named after the package's specified field1 is created, unless it already exists.<br/>Else it falls back to the combination of both fields with `.`. |
 
 The special value `seq` for `<field2>` will append an incrementing number to the folder name starting at `1`.
 If `?` is used, then the sequence number is used only if the folder already exists.
@@ -5768,15 +5867,15 @@ ascli aoc package node_info <package ID here> / --format=json --show-secrets=yes
 
 By default, when using `aoc packages list` or `aoc packages receive ALL`, the following `query` is performed:
 
-| Query parameter            | Value   |
-|----------------------------|---------|
+| Query parameter            | Value                                         |
+|----------------------------|-----------------------------------------------|
 | `archived`                 | `false` |
 | `has_content`              | `true`  |
 | `received`                 | `true`  |
 | `completed`                | `true`  |
-| `workspace_id`             | Set based on current workspace. |
+| `workspace_id`             | Set based on current workspace.               |
 | `dropbox_id`               | Set according to `dropbox_name`, if provided. |
-| `exclude_dropbox_packages` | `true` unless `dropbox_id` is provided. |
+| `exclude_dropbox_packages` | `true` unless `dropbox_id` is provided.       |
 
 Parameters provided using option `query` override this query.
 To remove a parameter, set it to `null`.
@@ -5866,14 +5965,14 @@ The basic payload to create a permission, i.e. a Shared Folder (last argument at
 `ascli` expects the same payload for creation.
 `ascli` automatically populates some payload fields and provides convenient additional fields that generate native fields:
 
-| Field           | Type     | Description |
-|-----------------|----------|-------------|
+| Field           | Type     | Description                                                          |
+|-----------------|----------|----------------------------------------------------------------------|
 | `file_id`       | Native<br/>Auto     | ID of the folder to share, as specified in the command line by path. |
-| `access_levels` | Native<br/>Optional | List of access levels to set for the shared folder. Defaults to full access. |
+| `access_levels` | Native<br/>Optional | List of access levels to set for the shared folder.<br/>Defaults to full access. |
 | `tags`          | Native<br/>Auto     | Set with expected values for AoC: username who creates, and workspace in which the shared folder is created. |
-| `access_type`   | Native<br/>Required | Type of access, such as `user`, `group`, or `workspace`. Can be set with parameter `with`. |
+| `access_type`   | Native<br/>Required | Type of access, such as `user`, `group`, or `workspace`.<br/>Can be set with parameter `with`. |
 | `access_id`     | Native<br/>Required | ID of the user, group, or workspace (see `with`) |
-| `with`          | `ascli`           | Recipient of shared folder. Can be a username, a group name, or a workspace name. `ascli` will resolve the name to the proper type and ID in fields `access_type` and `access_id`. If the value is the empty string, then it declares the shared folder in the workspace (first action to do, see below). |
+| `with`          | `ascli`           | Recipient of shared folder. Can be a username, a group name, or a workspace name.<br/>`ascli` will resolve the name to the proper type and ID in fields `access_type` and `access_id`.<br/>If the value is the empty string, then it declares the shared folder in the workspace (first action to do, see below). |
 | `link_name`     |  `ascli`          | Name of the link file created in the user's home folder for private links. |
 | `as`            |  `ascli`          | Name of the link file created in the user's home folder for admin shared folders. |
 
@@ -5891,7 +5990,7 @@ ascli aoc files permission --workspace=<workspace name> <path to folder> ...
 
 > [!NOTE]
 > The workspace is identified by name, and folder by path, relative to the user's home.
-> To use an identifier instead, one can use the percent selector, like `%id:1234`
+> To use an identifier instead, one can use the percent selector, like `%id:_my_ws_id_`.
 
 ##### Admin Shared Folders
 
@@ -5903,7 +6002,9 @@ ascli aoc admin node do <node ID> permission --workspace=<workspace name> <path
 
 > [!TIP]
 > The node is identified by identifier.
-> To use an name instead, one can use the percent selector, like `%name:"my node"`
+> To use an name instead, one can use the percent selector, like `%name:"my node"`.
+> The path is identifier by a path, one can specify a file id, with `%id:123`.
+> If the id is left blank: `%id:`, then if means `*`, i.e. all.
 
 ##### Example: List permissions on a shared folder
 
@@ -5980,7 +6081,7 @@ ascli aoc admin node list --fields=id,name
 
 In the following commands, replace:
 
-- `1234` with the node ID
+- `_my_node_id_` with the node ID
 - `my ws` with the workspace name
 - `/folder_on_node` with the name of the folder on the node: it can also be a folder deeper than level 1.
 
@@ -5989,7 +6090,7 @@ The node can also be conveniently identified using the **percent selector** inst
 If the shared folder does not exist, then create it:
 
 ```shell
-ascli aoc admin node do 1234 mkdir /folder_on_node
+ascli aoc admin node do _my_node_id_ mkdir /folder_on_node
 ```
 
 Create the shared folder in workspace `my ws` (set `with` to empty string, or do not specify it).
@@ -5997,7 +6098,7 @@ Optionally use `as` to set the name of the shared folder if different from the f
 For other options, refer to the previous section on shared folders.
 
 ```shell
-ascli aoc admin node do 1234 permission /folder_on_node create @json:'{"with":"","as":"folder_for_users"}' --workspace="my ws"
+ascli aoc admin node do _my_node_id_ permission /folder_on_node create @json:'{"with":"","as":"folder_for_users"}' --workspace="my ws"
 ```
 
 > [!NOTE]
@@ -6008,20 +6109,44 @@ The `"with"` parameter will perform a lookup, and set fields `access_type` and `
 The native fields `access_type` and `access_id` can also be used, instead of `with`.
 
 ```shell
-ascli aoc admin node do 1234 permission /folder_on_node create @json:'{"with":"john@example.com","as":"folder_for_one_user"}' --workspace="my ws"
+ascli aoc admin node do _my_node_id_ permission /folder_on_node create @json:'{"with":"john@example.com","as":"folder_for_one_user"}' --workspace="my ws"
 ```
 
 ```shell
-ascli aoc admin node do 1234 permission /folder_on_node create @json:'{"with":"group 1","as":"folder_for_a_group"}' --workspace="my ws"
+ascli aoc admin node do _my_node_id_ permission /folder_on_node create @json:'{"with":"group 1","as":"folder_for_a_group"}' --workspace="my ws"
 ```
 
 ```shell
-ascli aoc admin node do 1234 permission /folder_on_node create @json:'{"with":"my ws","as":"folder_for_all_workspace"}' --workspace="my ws"
+ascli aoc admin node do _my_node_id_ permission /folder_on_node create @json:'{"with":"my ws","as":"folder_for_all_workspace"}' --workspace="my ws"
 ```
 
 > [!NOTE]
 > In the previous commands, field `as` is optional.
 
+##### Example: List all workspace admin shared folder on a node
+
+First get the workspace identifier:
+
+```shell
+ascli aoc admin workspace list --select=@json:'{"name":"my ws"}' --fields=id
+```
+
+```text
+111111
+```
+
+Then, identify the node id on which to list, see previous section.
+
+Finally, list all shared folders, as permissions:
+
+```shell
+ascli aoc admin node do _my_node_id_ perm %id: list --query=@json:'{"access_type":"user","access_id":"ASPERA_ACCESS_KEY_ADMIN_WS_111111"}'
+```
+
+> [!NOTE]
+> Refer to Node API: `GET /permissions` for all `query` options.
+> The folder identifier is left empty `%id:`, to apply to all folders.
+
 #### Cross Organization transfers
 
 It is possible to transfer files directly between organizations without having to first download locally and then upload...
@@ -6030,7 +6155,7 @@ Although optional, the creation of [Option Preset](#option-preset) is recommende
 
 Procedure to send a file from org1 to org2:
 
-- Get access to Organization 1 and create an [Option Preset](#option-preset): e.g. `org1`, for instance, use the [Wizard](#configuration-using-wizard)
+- Get access to Organization 1 and create an [Option Preset](#option-preset): e.g. `org1`, for instance, use the [Wizard](#wizard)
 - Check that access works and locate the source file e.g. `mysourcefile`, e.g. using command `files browse`
 - Get access to Organization 2 and create an [Option Preset](#option-preset): e.g. `org2`
 - Check that access works and locate the destination folder `mydestfolder`
@@ -6076,8 +6201,8 @@ admin analytics transfers nodes
 admin analytics transfers organization --query=@json:'{"status":"completed","direction":"receive","limit":2}' --notify-to=my_email_external --notify-template=@ruby:'%Q{From: <%=from_name%> <<%=from_email%>>\nTo: <<%=to%>>\nSubject: <%=ev["files_completed"]%> files received\n\n<%=ev.to_yaml%>}'
 admin analytics transfers users --once-only=yes
 admin application list
-admin ats access_key create --cloud=aws --region=my_region --params=@json:'{"id":"ak_aws","name":"my test key AWS","storage":{"type":"aws_s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
-admin ats access_key create --cloud=softlayer --region=my_region --params=@json:'{"id":"ak1ibmcloud","secret":"my_secret_here","name":"my test key","storage":{"type":"ibm-s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
+admin ats access_key create --cloud=aws --region=my_region @json:'{"id":"ak_aws","name":"my test key AWS","storage":{"type":"aws_s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
+admin ats access_key create --cloud=softlayer --region=my_region @json:'{"id":"ak1ibmcloud","secret":"my_secret_here","name":"my test key","storage":{"type":"ibm-s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
 admin ats access_key delete ak1ibmcloud
 admin ats access_key list --fields=name,id
 admin ats access_key node ak1ibmcloud --secret=my_secret_here browse /
@@ -6170,7 +6295,7 @@ files upload --to-folder=/testsrc test_file.bin
 files upload --to-folder=/testsrc test_file.bin test_file.bin
 files upload --workspace=my_other_workspace --to-folder=my_other_folder test_file.bin --transfer=node --transfer-info=@json:@stdin:
 files v3 info
-gateway --pid-file=pid_aocfxgw @json:'{"url":"https://localhost:12345/aspera/faspex"}' &
+gateway --pid-file=pid_aoc_faspex_gateway @json:'{"url":"https://localhost:12345/aspera/faspex"}' &
 organization
 organization --format=image --fields=background_image_url --ui=text
 organization --url=my_public_link_recv_from_aoc_user
@@ -6336,8 +6461,8 @@ The parameters provided to ATS for access key creation are the ones of [ATS API]
 
 ```bash
 access_key cluster ak2ibmcloud --secret=my_secret_here
-access_key create --cloud=aws --region=my_region --params=@json:'{"id":"ak_aws","name":"my test key AWS","storage":{"type":"aws_s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
-access_key create --cloud=softlayer --region=my_region --params=@json:'{"id":"ak2ibmcloud","secret":"my_secret_here","name":"my test key","storage":{"type":"ibm-s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
+access_key create --cloud=aws --region=my_region @json:'{"id":"ak_aws","name":"my test key AWS","storage":{"type":"aws_s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
+access_key create --cloud=softlayer --region=my_region @json:'{"id":"ak2ibmcloud","secret":"my_secret_here","name":"my test key","storage":{"type":"ibm-s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
 access_key delete ak2ibmcloud
 access_key delete ak_aws
 access_key entitlement ak2ibmcloud
@@ -6389,6 +6514,7 @@ df
 download my_inside_folder/test_file.bin --to-folder=. --transfer-info=@json:'{"wss":false,"resume":{"iter_max":1}}'
 download my_large_file --to-folder=my_upload_folder --transfer=node --ts.resume_policy=none
 du /
+health transfer --to-folder=my_upload_folder
 health transfer --to-folder=my_upload_folder --format=nagios
 info
 md5sum my_inside_folder/test_file.bin
@@ -6548,11 +6674,11 @@ Native API parameters can be placed in option `query`.
 
 Special parameters can be placed in option `query` for "gen3" browse:
 
-| Parameter   | Description |
-|-------------|-------------|
-| `recursive` | Recursively list files |
-| `max`       | Maximum number of files to list |
-| `self`      | Offset in the list |
+| Parameter   | Description                      |
+|-------------|----------------------------------|
+| `recursive` | Recursively list files.          |
+| `max`       | Maximum number of files to list. |
+| `self`      | Offset in the list.              |
 
 Option `node_cache` can be set to `no` to avoid use of folder cache (Redis) and force actual read of file system.
 
@@ -6670,13 +6796,13 @@ By providing the `validator` option, offline transfer validation can be done.
 
 ### Sync
 
-There are three commands related to file synchronisation:
+There are three commands related to file synchronization in `node`:
 
 | Command | `node` | `shares` | `aoc` | `server` | Description |
-|---------|--------|----------|-------|----------|-------------|
-| `sync`  | Yes    | Yes      | Yes   | Yes      | Perform a local sync, by executing `async` locally. |
-| `async` | Yes    |          |       |          | Uses API `/async`.<br/>Get status on sync operation on server side, like Aspera Console. |
-| `ssync` | Yes    |          |       |          | Uses API `/asyncs`.<br/>It can start a sync operation on the server side, and monitor only those. |
+|-----|-----|-----|-----|-----|-----------------------------------------------|
+| `sync`  | Yes | Yes | Yes | Yes | Perform a local sync, by executing `async` locally. |
+| `async` | Yes |     |     |     | Uses API `/async`.<br/>Get status on sync operation on server side, like Aspera Console. |
+| `ssync` | Yes |     |     |     | Uses API `/asyncs`.<br/>It can start a sync operation on the server side, and monitor only those. |
 
 For details on the `sync` action, refer to [IBM Aspera Sync](#ibm-aspera-sync).
 
@@ -6821,17 +6947,17 @@ Bearer tokens can be generated using `ascli` command `bearer_token`: it takes tw
 - The private key used to sign the token.
 - The token information, which is a `Hash` containing the following elements:
 
-| Parameter          | Default           | Type      | Description                      |
-|--------------------|-------------------|-----------|----------------------------------|
-| `_scope`           | `user:all`        | Special   | Either `user:all` or `admin:all` |
-| `_validity`        | 86400             | Special   | Validity in seconds from now.    |
-| `user_id`          | -                 | Mandatory | Identifier of user               |
-| `scope` | `node.<access_key>:<_scope>` | Mandatory | API scope, e.g. `node.<access_key>:<node scope>`         |
-| `expires_at`       | `now+<_validity>` | Mandatory | Format: `%Y-%m-%dT%H:%M:%SZ` e.g. `2021-12-31T23:59:59Z` |
-| `auth_type`        | `access_key`      | Optional  | `access_key`, `node_user`        |
-| `group_ids`        | -                 | Optional  | List of group IDs                |
-| `organization_id`  | -                 | Optional  | Organization ID                  |
-| `watermarking_json_base64` | -         | Optional  | Watermarking information (not used) |
+| Parameter              | Default                 | Type    | Description                           |
+|----------------------|---------------------------|---------|---------------------------------------|
+| `_scope`               | `user:all`              | Special | Either `user:all` or `admin:all`      |
+| `_validity`            | 86400                   | Special | Validity in seconds from now.         |
+| `user_id`              | -                     | Mandatory | Identifier of user                    |
+| `scope`     | `node.<access_key>:<_scope>`     | Mandatory | API scope<br/>e.g. `node.<access_key>:<node scope>`         |
+| `expires_at`           | `now+<_validity>`     | Mandatory | Format: `%Y-%m-%dT%H:%M:%SZ`<br/>e.g. `2021-12-31T23:59:59Z` |
+| `auth_type`            | `access_key`          | Optional  | `access_key`, `node_user`             |
+| `group_ids`            | -                     | Optional  | List of group IDs                     |
+| `organization_id`      | -                     | Optional  | Organization ID                       |
+| `watermarking_json_base64` | -                 | Optional  | Watermarking information (not used)   |
 
 > [!NOTE]
 > For convenience, `ascli` provides additional parameters `_scope` and `_validity`.
@@ -6969,6 +7095,7 @@ access_key do my_ak_name show %id:1
 access_key do my_ak_name show /test_nd_ak3
 access_key do my_ak_name upload 'faux:///test_nd_ak3?100k' --default-ports=no
 access_key do self permission %id:root_id create @json:'{"access_type":"user","access_id":"666"}'
+access_key do self permission / delete 1
 access_key do self permission / show 1
 access_key do self show / --fields=id --output=root_id
 access_key list
@@ -7022,10 +7149,15 @@ stream list
 sync admin status /data/local_sync
 sync pull /aspera-test-dir-tiny --to-folder=/data/local_sync @json:'{"name":"SYNC_NAME","reset":true}'
 sync pull /aspera-test-dir-tiny --to-folder=/data/local_sync @json:'{"reset":true}'
+transfer bandwidth_average
+transfer cancel nd_xfer_id
 transfer list --once-only=yes
+transfer list --query=@json:'{"active_only":true,"count":1}' --fields=id --output=nd_xfer_id
 transfer list --query=@json:'{"active_only":true}'
 transfer list --query=@json:'{"reset":true}' --once-only=yes
+transfer modify nd_xfer_id @json:'{"target_rate_kbps":10000}'
 transfer sessions
+transfer show nd_xfer_id
 transport
 upload --to-folder=my_upload_folder --sources=@ts --ts=@json:'{"paths":[{"source":"/aspera-test-dir-small/10MB.2"}],"precalculate_job_size":true}' --transfer=node --transfer-info=@json:'{"url":"https://node.example.com/path@","username":"my_username","password":"my_password_here"}'
 upload --username=my_ak_name --password=my_ak_secret test_file.bin
@@ -7044,10 +7176,10 @@ The `node` plugin supports Open Telemetry (OTel) for monitoring and tracing.
 
 The command expects the following parameters provided as a `Hash` positional parameter:
 
-| Parameter   | Type     | Default | Description                                      |
-|-------------|----------|---------|---------------------------------------------------|
-| `url`       | `String` | -       | URL of the Instana HTTPS backend for OTel.        |
-| `key`       | `String` | -       | Agent key for the backend.                        |
+| Parameter   | Type     | Default | Description                                  |
+|-------------|----------|---------|----------------------------------------------|
+| `url`       | `String` | -       | URL of the Instana HTTPS backend for OTel.   |
+| `key`       | `String` | -       | Agent key for the backend.                   |
 | `interval`  | `Float`  | 10      | Polling interval in seconds.<br/>`0` for single shot. |
 
 To retrieve OTel backend information: Go to the Instana web interface, **More** &rarr; **Agents** &rarr; **Docker** and identify the agent endpoint and key, e.g. `endpoint=ingress-blue-saas.instana.io`.
@@ -7085,7 +7217,9 @@ IBM Aspera's newer self-managed application.
 | `boot`        | Use authentication token copied from browser (experimental)         |
 
 > [!TIP]
-> If you have a Faspex 5 public link, provide it, unchanged, through the option `url`
+> If you have a Faspex 5 public link, provide it, as-is, through the option `url`.
+
+### Faspex 5 quick start with wizard
 
 For a quick start, one can use the wizard, which will help to create an [Option Preset](#option-preset):
 
@@ -7093,8 +7227,15 @@ For a quick start, one can use the wizard, which will help to create an [Option
 ascli config wizard
 ```
 
+Then, answer questions interactively:
+
 ```text
 argument: url> faspex5.example.com
+```
+
+Potentially, multiple applications may be detected, or if only Faspex is detected, it would skip this step:
+
+```text
 Multiple applications detected:
 +---------+-------------------------------------------+-------------+
 | product | url                                       | version     |
@@ -7103,12 +7244,28 @@ Multiple applications detected:
 | server  | ssh://faspex5.example.com:22              | OpenSSH_8.3 |
 +---------+-------------------------------------------+-------------+
 product> faspex5
+```
+
+When Faspex is detected, it would ask for the path to a private key.
+If you don't have a private key, then leave that field blank, and it will generate one or use one that was previously generated.
+
+```test
 Using: Faspex at https://faspex5.example.com/aspera/faspex
 Please provide the path to your private RSA key, or nothing to generate one:
 option: key_path>
 Using existing key:
 /Users/someuser/.aspera/ascli/my_key
+```
+
+Then, the email of the user shall be provided:
+
+```text
 option: username> someuser@example.com
+```
+
+The administrator of Faspex shall provide you with a `client_id`, as specified below.
+
+```text
 Ask the ascli client ID and secret to your Administrator.
 Admin should login to: https://faspex5.example.com/aspera/faspex
 Navigate to: ::  → Admin → Configurations → API clients
@@ -7132,10 +7289,16 @@ Saving configuration file.
 ```
 
 > [!NOTE]
-> Paste the entire public key, including the BEGIN and END lines, into the user profile.
+> Paste the entire public key, including the BEGIN and END lines, into the user's profile.
 
 For more information on the JWT method, refer to the section below.
 
+If you have generated a private key with the wizard and lost the public key, you can retrieve the public key like this:
+
+```shell
+ascli faspex5 --show-config --show-secrets=yes --fields=private_key | ascli conf pubkey @stdin: --show-secrets=yes
+```
+
 ### Faspex 5 JWT authentication
 
 This is the general purpose and **recommended** method to use.
@@ -7156,15 +7319,15 @@ Activation is in two steps:
 
 - The user will authenticate with a private key and set the public key in his Faspex 5 profile.
 
-  > [!TIP]
-  > If you don’t have a private key, see [Private Key](#private-key) to generate one.
-  
   This operation is done by each user using the CLI.
 
   - As a user, click the user logo located to the left of the app switcher in the top-right corner.
   - Select `Account Settings`.
   - At the bottom, in the `Public key in PEM format` field, paste the **public key** that corresponds to the private key assigned to your account.
 
+> [!TIP]
+> If you don’t have a private key, see [Private Key](#private-key) to generate one.
+
 Then use these options:
 
 ```text
@@ -7210,6 +7373,16 @@ The user will use the following options:
 --redirect-uri=https://127.0.0.1:8888
 ```
 
+### Faspex 5 public link authentication
+
+If all you have is a public link received by email or other, you can still do authorized actins with it.
+
+For example, for a public link to post a package:
+
+```shell
+ascli faspex5 packages send --url='https://faspex5.example.com/?context=_some_long_string_here_'
+```
+
 ### Faspex 5 bootstrap authentication
 
 For `boot` method: (will be removed in future)
@@ -7269,7 +7442,7 @@ admin smtp test my_email_external
 admin workgroups list
 bearer_token
 gateway --pid-file=pid_f5_fxgw @json:'{"url":"https://localhost:12346/aspera/faspex"}' &
-health
+health --url=https://faspex5.example.com/path
 invitation list
 invitations create @json:'{"email_address":"aspera.user1+u@gmail.com"}'
 packages browse f5_pack_id --query=@json:'{"recursive":true}'
@@ -7300,6 +7473,7 @@ shared list
 shared_folders browse %name:my_shared_folder_name
 shared_folders list
 user account
+user account --query.expand=true
 user profile modify @json:'{"preference":{"connect_disabled":false}}'
 user profile show
 version
@@ -7319,7 +7493,7 @@ By default, package operations (`send`, `receive`, `list`) are performed on the
 To select another inbox, use option `box` with one of the following values:
 
 | `box`               | Comment |
-|---------------------|---------|
+|---------------------|----------------------------------------------------------------------|
 | `inbox`             | Default |
 | `inbox_history`     | |
 | `inbox_all`         | |
@@ -7329,8 +7503,8 @@ To select another inbox, use option `box` with one of the following values:
 | `pending`           | |
 | `pending_history`   | |
 | `all`               | |
-| `ALL`               | **admin only**, all inboxes of all users |
-| Open value          | Name of a shared inbox if `group_type` is `shared_inboxes` (default)<br/>or workgroup if `group_type` is `workgroups` |
+| `ALL`               | All inboxes of all users. **admin only**. |
+| Open value          | If `group_type` is `shared_inboxes`: name of a shared inbox (default)<br/>If `group_type` is `workgroups`: workgroup name |
 
 > [!NOTE]
 > In case the name of the `box` is an open value, use option `group_type` set to either `shared_inboxes` or `workgroups`.
@@ -7403,14 +7577,14 @@ Option `box` can be used to list packages from a specific box (see [Inbox Select
 
 Option `query` can be used to filter the list of packages, based on native API parameters, directly sent to [Faspex 5 API `GET /packages`](https://developer.ibm.com/apis/catalog/aspera--ibm-aspera-faspex-5-0-api/api/API--aspera--ibm-aspera-faspex-api#getAllPackages).
 
-| Parameter | Type    | Description |
-|-----------|---------|-------------|
-| `offset`  | Native  | Managed by `ascli`: Offset of first package. Default: 0 |
-| `limit`   | Native  | Managed by `ascli`: # of packages per API call. Default: 100 |
-| `q`       | Native  | General search string (case-insensitive, matches if value is contained in several fields) |
-| ...       | Native  | Other native parameters are supported (Refer to API documentation) |
-| `max`     | Special | Maximum number of items to retrieve (stop pages when the maximum is passed) |
-| `pmax`    | Special | Maximum number of pages to request (stop pages when the maximum is passed) |
+| Parameter | Type  | Description |
+|---------|---------|-----------------------------------------------------------------------|
+| `offset`| Native  | Managed by `ascli`: Offset of first package. Default: 0 |
+| `limit` | Native  | Managed by `ascli`: # of packages per API call. Default: 100 |
+| `q`     | Native  | General search string<br/>case-insensitive, matches if value is contained in several fields |
+| ...     | Native  | Other native parameters are supported (Refer to API documentation) |
+| `max`   | Special | Maximum number of items to retrieve (stop pages when the maximum is passed) |
+| `pmax`  | Special | Maximum number of pages to request (stop pages when the maximum is passed) |
 
 A **Command Parameter** in last position, of type `Proc`, can be used to filter the list of packages.
 This advantage of this method is that the expression can be any test, even complex, as it is Ruby code.
@@ -7438,15 +7612,15 @@ By default, paging is used.
 
 Option `query` is available with parameters supported by the API and `ascli` :
 
-| Parameter    | Evaluation   | Description |
-|--------------|--------------|-------------|
-| `paging`     | `ascli`    | Use paging API. Default: `true` |
-| `recursive`  | `ascli`    | List inside folders. Default: `false` |
-| `max`        | `ascli`    | Maximum number of items. |
-| `filter`     | API          | Refer to API doc. Default: `{"basenames":[]}` |
-| `offset`     | API (legacy) | Index of first item. Default: `0` |
-| `limit`      | API (legacy) | Number of items in one API call result. Default: `500` |
-| `per_page`   | API (paging) | Number of items in one API call result. Default: `500` |
+| Parameter | Evaluation   | Default           | Description                             |
+|-----------|--------------|-------------------| ----------------------------------------|
+| `paging`  | `ascli`    | `true`            | Use paging API.                         |
+| `recursive`| `ascli`   | `false`           | List inside folders.                    |
+| `max`     | `ascli`    | -                 | Maximum number of items.                |
+| `filter`  | API          | `{"basenames":[]}`| Refer to API doc.                       |
+| `offset`  | API (legacy) | `0`               | Index of first item.                    |
+| `limit`   | API (legacy) | `500`             | Number of items in one API call result. |
+| `per_page`| API (paging) | `500`             | Number of items in one API call result. |
 
 ### Faspex 5: Content of a received Package
 
@@ -7743,8 +7917,8 @@ A user can receive a package because the recipient is:
 
 As inboxes may be large, it is possible to use the following query parameters:
 
-| Parameter    | Evaluation | Description |
-|--------------|------------|-------------|
+| Parameter    | Evaluation | Description                                                          |
+|--------------|------------|----------------------------------------------------------------------|
 | `count`      | API        | Number of items in one API call result (default=0, equivalent to 10) |
 | `page`       | API        | ID of page in call (default=0) |
 | `startIndex` | API        | Index of item to start (default=0) |
@@ -7931,17 +8105,17 @@ The payload for creation is the same as for the API, parameters are provided as
 
 Example: Create a Node: Attributes are like API:
 
-| Attribute | Required | Default |
-|-----------|----------|---------|
-| `name`    | Yes      |         |
-| `host`    | Yes      |         |
-| `api_username` | Yes |         |
-| `api_password` | Yes |         |
-| `port`    |          | `9092`  |
-| `ssl`     |          | `true`  |
-| `verify_ssl` |       | `false` |
-| `timeout`    |       | `30s`   |
-| `open_timeout` |     | `10s`   |
+| Attribute    | Required | Default |
+|--------------|----------|---------|
+| `name`       | Yes      |         |
+| `host`       | Yes      |         |
+| `api_username` | Yes    |         |
+| `api_password` | Yes    |         |
+| `port`       |          | `9092`  |
+| `ssl`        |          | `true`  |
+| `verify_ssl` |          | `false` |
+| `timeout`    |          | `30s`   |
+| `open_timeout` |        | `10s`   |
 
 Example: Create a share and add a user to it.
 
@@ -8051,12 +8225,12 @@ If you don't have credentials but have access to the IBM Cloud console, then use
 
 If you have those parameters already, then following options shall be provided:
 
-| Option     | Description |
-|------------|-------------|
-| `bucket`   | Bucket name |
+| Option     | Description                                       |
+|------------|---------------------------------------------------|
+| `bucket`   | Bucket name                                       |
 | `endpoint` | Storage endpoint URL<br/>e.g. `https://s3.hkg02.cloud-object-storage.appdomain.cloud` |
-| `apikey`   | API Key     |
-| `crn`      | Resource instance ID |
+| `apikey`   | API Key                                           |
+| `crn`      | Resource instance ID                              |
 
 For example, let us create a default configuration:
 
@@ -8120,7 +8294,7 @@ The field `apikey` is for option `apikey`
 The required options for this method are:
 
 | Option                | Description |
-|-----------------------|-------------|
+|-----------------------|------------------------------------------------|
 | `bucket`              | Bucket name |
 | `region`              | Bucket region<br/>e.g. `eu-de` |
 | `service_credentials` | JSON information saved from IBM Cloud console. |
@@ -8561,8 +8735,8 @@ An interface for the `async` utility is provided in the following plugins:
 The `sync` command, available in above plugins, performs the following actions:
 
 - Start a local Sync session by executing the `async` command with the appropriate parameters.
-- Get local Sync session information using the `asyncadmin` command, if available.
 - Get local Sync session information accessing directly the Async snap database.
+- Get local Sync session information using the `asyncadmin` command, if available.
 
 One advantage of using `ascli` over the `async` command line is the possibility to use a configuration file, using standard options of `ascli`.
 Moreover, `ascli` supports sync with application requiring token-based authorization.
@@ -8575,7 +8749,7 @@ Some `sync` parameters are filled by the related plugin using transfer spec para
 
 ### Starting a sync session
 
-To start a sync session, use one of the three sync directions followed by a folder path (remote path for `pull`, local path elsewise).
+To start a sync session, use one of the three sync directions followed by a folder path (remote path for `pull`, local path otherwise).
 The path on the other side is specified using option: `to_folder`.
 
 | Direction<br/>(parameter) | Path<br/>(parameter)   | `to_folder`<br/>(option) |
@@ -8597,6 +8771,137 @@ Documentation on Async Node API can be found on [IBM Developer Portal](https://d
 
 Parameters `local.path` and `remote.path` are not allowed since they are provided on command line.
 
+| Field | Type | Description |
+| ---------------------------------------- | ------- | -------------------------------------------------------------------------------- |
+| ascp_dir | string | Directory containing ascp executable to use. |
+| assume_no_mods | boolean | Assume that the directory structure has not been modified.<br/>(`--assume-no-mods={boolean}`) |
+| checksum | string | Use the specified checksum type. Default is none on cloud storage.<br/>Allowed values: `sha1`, `md5`, `sha1_sparse`, `md5_sparse`, `none` |
+| clean_excluded | boolean | Removes any existing entries in the snapshot database for excluded paths |
+| cookie | string | User-defined identification string. |
+| cooloff_max_seconds | integer | Wait up to the specified time for a file to stop changing before skipping synchronization of the file. 0 for disabled<br/>(`--cooloff-max={integer}`) |
+| cooloff_seconds | integer | Delay the start of the transfer to confirm that the content is not changing. Value must be between 0 and 60<br/>(`--cooloff={integer}`) |
+| create_dir | boolean | Create the source directory, target directory, or both, if they do not exist. |
+| db_cache_size | integer | Specify DB cache size. |
+| db_journal_off | boolean | Turn off DB journal. |
+| db_sync_on | boolean | Enable synchronous write in DB. |
+| dedup | string | Take the specified action when async detects duplicate files on the source.<br/>Allowed values: `copy`, `inode`, `hardlink`, `none` |
+| delete_before | boolean | Schedule deletes before transfers. |
+| delete_delay | boolean | Delay actual deletes until the end of the synchronization. |
+| direction | string | The direction of replication relative to the local.<br/>Allowed values: `bidi`, `pull`, `push` |
+| exclude_dirs_older_than | object | Don't scan directories with a recursive modified time older than absolute or async start time - relative_seconds |
+| exclude_dirs_older_than.absolute | string | UTC timestamp. Empty value for disabled. |
+| exclude_dirs_older_than.relative_seconds | integer | Relative to async start time. `-1` for disabled. |
+| filters | array | The filters allow to further specify which files have to be excluded and included from the transfer list. Each filter is defined by a rule and a value. Order of filters matters |
+| ignore_delete | boolean | Do not copy removals to the peer. |
+| ignore_mode | boolean | Source files that have had their mode changed after the initial. transfer will not update the destination file mode. |
+| ignore_remote_host_sync_name | boolean | Do not check that the remote host being used for the current. transfer matches the host used when the local database was created |
+| local | object | &nbsp; |
+| local.pass | string | Authenticate the local async with the specified password. |
+| local.path | string | The directory to be synchronized on the local host.<br/>(`--local-dir={string}`) |
+| local_apply_docroot | boolean | Prepend the docroot to the directory on the local host.<br/>(`--apply-local-docroot={boolean}`) |
+| local_checksum_threads | integer | Maximum number of threads to do checksum on the local host. Value must be between 1 and 99. |
+| local_db_dir | string | Use the specified database directory on the local host. Default is `.private-asp` at the root level of the synchronized directory.<br/>(`--local-db-dir={string}`) |
+| local_db_store_dir | string | Store/Restore the database to/from the specified directory on the local host. The value can be an absolute path, an URI or - (use the local sync dir) |
+| local_force_stat | boolean | Forces the local async to retrieve file information even when no changes are detected by the scanner or monitor. |
+| local_fs_threads | integer | Maximum number of threads to do file system operations on the local host. Value must be between 1 and 99. |
+| local_keep_dir | string | Move deleted files into the specified directory on the local host. |
+| local_mount_signature | string | Verify that the file system is mounted by the existence of this file on the local host. |
+| local_move_cache_timeout_seconds | integer | Delay in seconds before aborting moving a file from local cache to final destination. `-1` for disabled. |
+| local_preserve_acls | string | Preserve access control lists on the local host.<br/>Allowed values: `native`, `metafile`, `none` |
+| local_preserve_xattrs | string | Preserve extended attributes on the local.<br/>Allowed values: `native`, `metafile`, `none` |
+| local_scan_interval_milliseconds | integer | Enable periodic scans on the local host during a continuous sync. `-1` for disabled |
+| local_scan_threads | integer | Number of directory scanning threads on the local host. Value must be between 1 and 99 |
+| local_stat_cache_size | integer | Set stat cache size on the local host. 0 for disabled. |
+| log | object | &nbsp; |
+| log.level | &nbsp; | Use the specified log level.<br/>Allowed values: `log`, `dbg1`, `dbg2` |
+| log.local_dir | string | Use the specified logging directory on the local host.<br/>(`--alt-logdir={string}`) |
+| log.remote_dir | string | Use the specified logging directory on the remote host. |
+| manifest_path | string | A directory path where ascp will create manifest TEXT files (passed to ascp as --file-manifest-path) |
+| mirror | boolean | Force the pulling side to be exactly like the pushing side, removing files on the destination that don't exist on the source and resending source files that don't have an exact match on the destination. Cannot be used in bi-directional mode.<br/>(`--mirror`) |
+| mode | string | Specify whether async runs continuously or not. In one_time mode, async stops after the first full synchronization.<br/>Allowed values: `one_time`, `continuous`<br/>(special:`--continuous={enum}`) |
+| monitor_buffer_size | integer | Bytes to allocate for the change monitor buffer. Applies to any Windows machine on either side. `-1` to use the computed value. |
+| name | string | Name of the synchronization pair.<br/>(`--name={string}`) |
+| no_log | string | Suppress log messages for ITEM. The only currently supported ITEM is 'stats', which suppresses both STATS and PROG log messages. |
+| no_preserve_root_attrs | boolean | Disable the preservation of attributes on the Sync root. |
+| no_scan | boolean | Skip initial scanning. |
+| notifications_sharing_retry_max | integer | Retry processing filesystem notifications up to the specified maximum number after a sharing violation. |
+| overwrite | string | Overwrite files according to the specified policy. Default is determined by the direction: conflict for bidi, otherwise always.<br/>Allowed values: `always`, `older`, `conflict` |
+| pending_max | integer | Allow the maximum number of files that are pending transfer to be no more than the specified number. |
+| preserve_access_time | boolean | Preserve file access time from the source to the destination. |
+| preserve_creation_time | boolean | Preserve file creation time from the source to the destination. |
+| preserve_gid | boolean | Preserve the file owner's GID. |
+| preserve_modification_time | boolean | Preserve file modification time from the source to the destination. |
+| preserve_object_lock_legal_hold | boolean | Preserve object lock legal hold status from the source to the destination. |
+| preserve_object_lock_retention | boolean | Preserve object lock retention from the source to the destination. |
+| preserve_object_metadata | boolean | Preserve object metadata from the source to the destination. |
+| preserve_uid | boolean | Preserve the file owner's UID. |
+| quiet | boolean | Disable progress display. |
+| remote | object | &nbsp; |
+| remote.connect_mode | &nbsp; | Define how to connect to the remote.<br/>Allowed values: `ssh`, `ws` |
+| remote.fingerprint | string | Check it against server SSH host key fingerprint. |
+| remote.host | string | Use the specified host name or address of the remote host. |
+| remote.pass | string | Authenticate the transfer with the specified password. |
+| remote.path | string | Synchronize the specified directory on the remote host. |
+| remote.port | integer | Use the specified TCP port for SSH. Used when connect_mode is `ssh` |
+| remote.private_key_paths | array | Authenticate with the specified SSH private key file. |
+| remote.proxy | object | Specify the address of the Aspera high-speed proxy server. |
+| remote.proxy.host | string | Use the specified host name or address of the proxy. |
+| remote.proxy.pass | string | Authenticate to the proxy with the specified password. |
+| remote.proxy.port | integer | Use the specified port, default is 9091 for dnat, 9092. for dnats |
+| remote.proxy.protocol | &nbsp; | The protocol to be used.<br/>Allowed values: `none`, `dnat`, `dnats` |
+| remote.proxy.user | string | Authenticate to the proxy with the specified username. |
+| remote.token | string | Token string passed to server's authentication service. |
+| remote.token_node_user | string | Node API user identity associated with the token. Required for node user bearer tokens |
+| remote.user | string | Authenticate the transfer with the specified username. |
+| remote.ws_port | integer | Use the specified port for Websocket. Used when connect_mode is `ws`. |
+| remote_checksum_threads | integer | Maximum number of threads to do checksum on the remote host. Value must be between 1 and 99 |
+| remote_db_dir | string | Use the specified database directory on the remote host. Default is `.private-asp` at the root level of the synchronized directory. |
+| remote_db_store_dir | string | Store/Restore the database to/from the specified directory on the remote host. The value can be an absolute path, an URI or - (use the remote sync dir). |
+| remote_force_stat | boolean | Forces the remote async to retrieve file information even when no changes are detected by the scanner or monitor. |
+| remote_fs_threads | integer | Maximum number of threads to do file system operations on the remote host. Value must be between 1 and 99. |
+| remote_keep_dir | string | Move deleted files into the specified directory on the remote host. |
+| remote_mount_signature | string | Verify that the file system is mounted by the existence of this file on the remote host. |
+| remote_move_cache_timeout_seconds | integer | Delay in seconds before aborting moving a file from remote cache to final destination. `-1` for disabled. |
+| remote_preserve_acls | string | Preserve access control lists on the remote host. If not specified, the default behavior is to use the same storage mode as specified by `preserve_acls`.<br/>Allowed values: `native`, `metafile`, `none` |
+| remote_preserve_xattrs | string | Preserve extended attributes on the remote host. If not specified, the default behavior is to use the same storage mode as specified by `preserve_xattrs`.<br/>Allowed values: `native`, `metafile`, `none` |
+| remote_scan_interval_milliseconds | integer | Enable periodic scans on the remote host. `-1` for disabled. |
+| remote_scan_threads | integer | Number of directory scanning threads on the remote host. Value must be between 1 and 99. |
+| remote_stat_cache_size | integer | Set stat cache size on the remote host. 0 for disabled. |
+| remove_after_transfer | boolean | Remove source files after they are successfully synchronized. |
+| reset | boolean | Clear the snapshot database and rescan the synchronized directories and files to create a fresh snapshot |
+| resume | object | Partial transfers may exist if communication disruptions caused the underlying ascp processes to terminate early. Note that transfer resumption can only happen if the `reset` option is disabled. If an async session starts with `reset` enabled and resume enabled, transfers interrupted during that session will be resumeable, but only if async is then restarted with 'reset' disabled. |
+| resume.enabled | boolean | Enable the possibility of resuming individual file transfers between async sessions. |
+| resume.max_age | integer | Sets the age limit in days for temporary files that will be preserved on cleanup (usually at async's start and stop) for potential transfer resume. Temp files older than the given value will be removed regardless of whether they might be resumeable. |
+| resume.min_size | integer | This field specifies the minimum size of files that will be allowed to resume. |
+| resume_scan | boolean | Resume the scan from where the previous execution left off. |
+| scan_dir_rename | boolean | Enable the detection of renamed directories and files compared. to the previous scan, based on matching inodes |
+| scan_file_rename | boolean | Enable the detection of renamed files compared to the previous scan, based on matching inodes. |
+| scan_intensity | string | Scan at the set intensity. `vlow` minimizes system activity. `vhigh` maximizes system activity by continuously scanning files without rest.<br/>Allowed values: `vlow`, `low`, `medium`, `high`, `vhigh` |
+| sharing_retry_max | integer | Retry synchronizations up to the specified maximum number after a sharing violation. |
+| store_metadata_records | boolean | Store the acls or xattrs in the snapshot database. |
+| symbolic_links | string | Handle symbolic links with the specified method. Default is `skip` on windows, `copy` otherwise.<br/>Allowed values: `copy`, `skip`, `follow`<br/>(`--symbolic-links={enum}`) |
+| tags | object | User-defined metadata tags. |
+| transfer_threads | array | Use the specified number of dedicated transfer threads to process files smaller or equal to the specified size |
+| transport | object | &nbsp; |
+| transport.cipher | &nbsp; | Specify encryption algorithm for file data.<br/>Allowed values: `none`, `aes128`, `aes192`, `aes256`, `aes128cfb`, `aes192cfb`, `aes256cfb`, `aes128gcm`, `aes192gcm`, `aes256gcm`<br/>(`--cipher={enum}`) |
+| transport.compression | &nbsp; | Compress a file before transfer using the specified MODE.<br/>Allowed values: `none`, `zlib`<br/>(`--compression={enum}`) |
+| transport.datagram_size | integer | Specify the datagram size (MTU) for FASP. By default it uses the detected path MTU. |
+| transport.min_rate | integer | Attempt to transfer no slower than the specified rate (in bps). |
+| transport.rate_policy | &nbsp; | Defines how `ascp` will manage the bandwidth.<br/>Allowed values: `fair`, `fixed`, `high`, `low` |
+| transport.raw_options | array | Pass arbitrary arguments to `ascp`. |
+| transport.read_block_size | integer | Use the specified block size (in bytes) for reading. Default is determined by `aspera.conf`. |
+| transport.rexmsg_size | integer | Use the specified size (in bytes) for a retransmission request. Default is determined by `aspera.conf`. |
+| transport.target_rate | integer | Transfer no faster than the specified rate (in bps). |
+| transport.udp_port | integer | Use the specified UDP port for FASP data transfer. |
+| transport.write_block_size | integer | Use the specified block size (in bytes) for writing. Default is determined by `aspera.conf`. |
+| watchd | object | When connection is configured, `asperawatchd` is used to detect the changes on the source directory.<br/>(special:`--watchd={object}`) |
+| watchd.datastore | &nbsp; | Specify the type of datastore, `none` for disabled.<br/>Allowed values: `none`, `redis`, `scalekv` |
+| watchd.domain | string | Specify the domain. Default is the current username. |
+| watchd.host | string | Use the specified host name or address to connect to the datastore. |
+| watchd.port | integer | Use the specified port. |
+| write_gid | string | Try to write files as the specified group. |
+| write_uid | string | Try to write files as the specified user. |
+
 #### `sync_info`: `args` format
 
 This is the **legacy** syntax.
@@ -8608,17 +8913,24 @@ This is the mode selection if there are either keys `sessions` or `instance` in
 
 Parameters `local_dir` and `remote_dir` are not allowed since they are provided on command line.
 
-### Sync management and monitoring
+### Sync management and monitoring: `admin`
 
-The `admin` command provides several sub commands:
+The `admin` command provides several sub commands that access directly the Async snap database (`snap.db`).
+(With the exception of `status` which uses the utility `asyncadmin`, available only on server products.)
 
-- `status`: Uses the utility `asyncadmin`, available only on server products.
-- Other commands access directly the Async snap database (`snap.db`).
+To use the `admin` command, the gem `sqlite3` shall be installed:
 
-For those commands, the user must provide the path to the database folder, i.e. a folder containing a subfolder named `.private-asp`.
-By default it is the local synchronized folder.
-If this folder contains only one session information (i.e. a folder containing the `snap.db` file), it will be used by default.
-Else, the user must specify a session name in the optional `Hash`, in `name`.
+```shell
+gem install sqlite3
+```
+
+In order to use the `admin` commands, the user must provide the path to the database folder:
+
+- i.e. a folder containing a subfolder named `.private-asp`.
+- By default it is the local synchronized folder.
+- If an alternate folder is specified for the database, then specify it.
+- If this folder contains only one session information (i.e. a folder containing the `snap.db` file), it will be used by default.
+- Else, the user must specify a session name in the optional `Hash`, in the `name` key.
 
 ## Hot folder
 
@@ -8757,17 +9069,17 @@ This is done with option `smtp`.
 The `smtp` option is a `Hash` (extended value) with the following fields:
 
 <!-- markdownlint-disable MD034 -->
-| Field        | Default             | Example                    | Description                      |
-|--------------|---------------------|----------------------------|----------------------------------|
-| `server`     | -                   | `smtp.gmail.com`           | SMTP server address              |
-| `tls`        | `true`              | `true`                     | Enable `STARTTLS` (port 587)     |
-| `ssl`        | `false`             | `false`                    | Enable `TLS` (port 465)          |
-| `port`       | `587` or `465` or `25` | `587`                   | Port for service                 |
-| `domain`     | _domain of server_  | gmail.com                  | Email domain of user             |
-| `username`   | -                   | john@example.com           | User to authenticate on SMTP server, leave empty for open auth. |
-| `password`   | -                   | my_password_here           | Password for above username      |
-| `from_email` | username if defined | johnny@example.com         | Address used if receiver replies |
-| `from_name`  | same as email       | John Wayne                 | Display name of sender           |
+| Field        | Default            | Example          | Description                      |
+|--------------|--------------------|------------------|----------------------------------|
+| `server`     | -                  | `smtp.gmail.com` | SMTP server address              |
+| `tls`        | `true`             | `true`           | Enable `STARTTLS` (port 587)     |
+| `ssl`        | `false`            | `false`          | Enable `TLS` (port 465)          |
+| `port`       | `587`<br/>`465`<br/>`25` | `587`  | Port for service                 |
+| `domain`     | _domain of_ `server` | gmail.com      | Email domain of user             |
+| `username`   | -                  | john@example.com | User to authenticate on SMTP server<br/>Leave empty for open auth. |
+| `password`   | -                  | my_password_here | Password for above username      |
+| `from_email` | username if defined|johnny@example.com| Address used if receiver replies |
+| `from_name`  | same as email      | John Wayne       | Display name of sender           |
 <!-- markdownlint-enable MD034 -->
 
 ### Example of configuration
@@ -8873,22 +9185,23 @@ During execution, it generates all low level events, one per line, in JSON forma
 
 Top level parameters supported by `asession`:
 
-| Parameter  | Description |
-|------------|-------------|
-| `spec`     | The [**transfer-spec**](#transfer-specification)    |
-| `agent`    | Same parameters as transfer-info for agent `direct` |
-| `loglevel` | Log level of `asession`                             |
-| `file_list_folder` | The folder used to store (for garbage collection) generated file lists.<br/>By default, it is `[system tmp folder]/[username]_asession_filelists` |
+| Parameter          | Description                                                            |
+|--------------------|------------------------------------------------------------------------|
+| `spec`             | The [**transfer-spec**](#transfer-specification)                       |
+| `agent`            | Same parameters as transfer-info for agent `direct`                    |
+| `loglevel`         | Log level of `asession`                                                |
+| `file_list_folder` | The folder used to store (for garbage collection) generated file lists.<br/>Default: `[system tmp folder]/[username]_asession_filelists` |
 
 ### Comparison of interfaces
 
-| feature/tool          | Transfer Daemon | FASPManager                      | `ascp` | `asession` |
-|-----------------------|--------------|---------------------------------|--------|------------|
-| language integration  | Many         | C/C++<br/>C#/.net<br/>Go<br/>Python<br/>java<br/> | Any    | Any        |
-| required additional components to `ascp` | Daemon       | Library<br/>(+headers) | - | Ruby<br/>Aspera gem |
-| startup               | Daemon       | API | Command line arguments | JSON on stdin<br/>(standard APIs:<br/>JSON.generate<br/>Process.spawn) |
-| events                | Poll     | Callback | Possibility to open management port<br/>and proprietary text syntax | JSON on stdout |
-| platforms             | Any with `ascp` and transfer daemon | Any with `ascp` (and SDK if compiled) | Any with `ascp` | Any with Ruby and `ascp` |
+| Feature/Tool | Transfer Daemon | FASPManager | `ascp` | `asession` |
+|------------|-------------|-------------|-------------|-------------|
+| status | Supported | Deprecated | Supported | Deprecated |
+| language integration | Many | C/C++<br/>C#/.net<br/>Go<br/>Python<br/>java<br/> | Any | Any |
+| required additional components to `ascp` | Daemon | Library<br/>(+headers) | - | Ruby<br/>Aspera gem |
+| startup | Daemon | API | Command line arguments | JSON on stdin<br/>(standard APIs:<br/>JSON.generate<br/>Process.spawn) |
+| events | Poll | Callback | Possibility to open management port<br/>and proprietary text syntax | JSON on stdout |
+| platforms | Like `ascp` and `transferd` | Like `ascp` and lib (if compiled) | Any with `ascp` | Any with Ruby and `ascp` |
 
 ### Simple session
 
@@ -9024,24 +9337,20 @@ This also requires Ruby header files.
 If Ruby was installed as a Linux Packages, then also install Ruby development package:
 `ruby-dev` or `ruby-devel`, depending on distribution.
 
-### ED25519 key not supported
-
-ED25519 keys are deactivated since `ascli` version 0.9.24 as it requires additional gems that require native compilation and thus caused problems.
-This type of key will just be ignored.
+### Private key type: `ed25519` not supported by default
 
-To re-activate, set env var `ASCLI_ENABLE_ED25519` to `true`.
+There are a few aspects concerning ED25519 keys.
 
-Without this deactivation, if such key was present in user's `.ssh` folder then the following error was generated:
+By default, the `aspera-cli` gem does not depend on the `ed25519` gem because it requires compilation of native code which can cause problems and prevent the installation of `ascli`, especially when using JRuby.
+Refer to [this](https://github.com/net-ssh/net-ssh/issues/565).
+If you want to use `ed25519` keys, then install the required gems:
 
-```text
-OpenSSH keys only supported if ED25519 is available
+```shell
+gem install ed25519 bcrypt_pbkdf
 ```
 
-Which meant that you do not have Ruby support for ED25519 SSH keys.
-You may either install the suggested Gems, or remove your ed25519 key from your `.ssh` folder to solve the issue.
-
-In addition, host keys of type: `ecdsa-sha2` and `ecdh-sha2` are also deactivated by default.
-To re-activate, set env var `ASCLI_ENABLE_ECDSHA2` to `true`.
+In addition, if **JRuby** is used, host keys of type: `ecdsa-sha2` and `ecdh-sha2` are also deactivated by default.
+To activate, set env var `ASCLI_ENABLE_ECDSHA2` to `true`.
 
 ### JRuby: `net-ssh`: Unsupported algorithm
 
@@ -9068,11 +9377,11 @@ To deactivate this error, enable option `IGNORE_UNEXPECTED_EOF` for `ssl_options
 --http-options=@json:'{"ssl_options":["IGNORE_UNEXPECTED_EOF"]}'
 ```
 
-### Error: `ascp`: /lib64/libc.so.6: version `GLIBC_2.28' not found
+### Error: `ascp`: `/lib64/libc.so.6`: version `GLIBC_2.28` not found
 
 This happens on Linux x86 if you try to install `transferd` on a Linux version too old to support a newer `ascp` executable.
 
-Workaround: Install an older version:
+Workaround: Install an older version of `transferd`:
 
 ```shell
 ascli config transferd install 1.1.2