aspera-cli 4.24.2 → 4.25.0.pre

data/README.md

@@ -2,7 +2,7 @@
 <!--
 DO NOT EDIT: THIS FILE IS GENERATED, edit docs/README.erb.md, for details, read docs/README.md
 PANDOC_META_BEGIN
-subtitle: "ascli 4.24.2"
+subtitle: "ascli 4.25.0.pre"
 author: "Laurent MARTIN"
 PANDOC_META_END
 -->
@@ -42,9 +42,9 @@ Need to debug? I’ll show you what’s going on under the hood.
 
 Think of me as Aspera’s command-line sidekick: quick, reliable, and a little no-nonsense. You bring the files; I’ll bring the horsepower."
 
-Version : 4.24.2
+Version : 4.25.0.pre
 
-Laurent/2016-2025
+Laurent/2016-2026
 
 The aspera-cli Ruby gem offers a powerful command-line interface (CLI, `ascli`) for IBM Aspera software, facilitating seamless interaction with Aspera APIs and enabling high-performance file transfers.
 It also serves as an excellent resource for developers seeking to explore and understand the Aspera API ecosystem.
@@ -63,7 +63,7 @@ Minimum required Ruby version: >= 3.1.
 
 Release notes: see [CHANGELOG.md](CHANGELOG.md)
 
-A PDF version of this documentation is available here: [docs/Manual.pdf](docs/Manual.pdf).
+A PDF version of this documentation is delivered with [releases](https://github.com/IBM/aspera-cli/releases).
 
 ### BUGS, FEATURES, CONTRIBUTION
 
@@ -135,7 +135,7 @@ ascli --version
 ```
 
 ```text
-4.24.2
+4.25.0.pre
 ```
 
 > [!NOTE]
@@ -338,14 +338,25 @@ Download the Ruby installer executable from <https://rubyinstaller.org/downloads
 rubyinstaller-devkit-3.2.2-1-x64.exe /silent /currentuser /noicons /dir=C:\aspera-cli
 ```
 
+#### Windows: Chocolatey
+
+If you use [Chocolatey](https://chocolatey.org/), then install Ruby with:
+
+```powershell
+choco install ruby
+```
+
 #### macOS: `brew`
 
-The recommended way is to use [Homebrew](https://brew.sh/).
+If you use [Homebrew](https://brew.sh/), then install Ruby with:
 
 ```shell
 brew install ruby
 ```
 
+> [!NOTE]
+> This is the recommended method.
+
 > [!WARNING]
 > **macOS** comes with Ruby 2.6.
 > It is an old unsupported version and [Apple has deprecated it](https://developer.apple.com/documentation/macos-release-notes/macos-catalina-10_15-release-notes).
@@ -364,8 +375,8 @@ export PATH="$(gem env gemdir)/bin:$PATH"
 
 > [!NOTE]
 > Two separate lines are needed because the second one depends on the first one.
-> This is what is displayed at the end of the installation of the ruby tap, same as message from:
-> `brew info ruby`
+> This is what is displayed at the end of the installation of the ruby tap,
+> same as message from: `brew info ruby`
 
 #### Linux: Package
 
@@ -391,10 +402,11 @@ If your Linux distribution provides a standard Ruby package, you can use it prov
   dnf install -y make automake gcc gcc-c++ kernel-devel
   ```
 
-- Enable the Ruby version you want:
+- Enable the Ruby version you selected:
 
   ```shell
-  dnf module -y enable ruby:3.1
+  dnf module -y enable ruby:3.2
+
   dnf install -y ruby-devel
   ```
 
@@ -417,7 +429,7 @@ apt install -y ruby ruby-dev rubygems ruby-json
 One can remove all installed gems, for example to start fresh:
 
 ```shell
-gem uninstall -axI $(ls $(gem env gemdir)/gems/|sed -e 's/-[^-]*$//'|sort -u)
+ls $(gem env gemdir)/gems/|sed -e 's/-[^-]*$//'|sort -u|xargs gem uninstall -axI
 ```
 
 #### Unix-like: RVM: Single user installation (not root)
@@ -575,23 +587,24 @@ Those are not installed as part of dependencies because they involve compilation
 See [Gemfile](Gemfile):
 
 | name | version | comment |
-| -------------------- | ------- | --------------------------------------------------- |
+|----------------------|---------|-----------------------------------------------------|
 | grpc | ~> 1.71 | (no jruby) for Aspera Transfer Daemon |
-| mimemagic | ~> 0.4 | for preview |
+| marcel | ~> 1.1 | for preview |
 | rmagick | ~> 6.1 | (no jruby) for terminal view |
 | symmetric-encryption | ~> 4.6 | for encrypted hash file secrets |
 | bigdecimal | ~> 3.1 | if RUBY_VERSION >= '3.4' for symmetric-encryption ? |
 | sqlite3 | ~> 2.7 | (no jruby) for async DB |
 | jdbc-sqlite3 | ~> 3.46 | (jruby) for async DB |
 | sequel | ~> 5.96 | (jruby) for async DB |
-| ed25519 | ~> 1.4 | (no jruby) for ed25519 |
-| bcrypt_pbkdf | ~> 1.1 | (no jruby) for ed25519 |
+| ed25519 | ~> 1.4 | (no jruby) for ed25519 and OpenSSH file format |
+| bcrypt_pbkdf | ~> 1.1 | (no jruby) for ed25519 and OpenSSH file format |
+| syslog | ~> 0.3 | (no jruby) for logger=syslog |
 
 Install like this:
 
 ```shell
 gem install grpc -v '~> 1.71'
-gem install mimemagic -v '~> 0.4'
+gem install marcel -v '~> 1.1'
 gem install rmagick -v '~> 6.1'
 gem install symmetric-encryption -v '~> 4.6'
 gem install bigdecimal -v '~> 3.1'
@@ -600,6 +613,7 @@ gem install jdbc-sqlite3 -v '~> 3.46'
 gem install sequel -v '~> 5.96'
 gem install ed25519 -v '~> 1.4'
 gem install bcrypt_pbkdf -v '~> 1.1'
+gem install syslog -v '~> 0.3'
 ```
 
 ### Ruby Gem: `aspera-cli`
@@ -607,7 +621,7 @@ gem install bcrypt_pbkdf -v '~> 1.1'
 Once you have Ruby and rights to install gems, install the `aspera-cli` gem and its dependencies:
 
 ```shell
-gem install aspera-cli
+gem install aspera-cli --pre
 ```
 
 To upgrade to the latest version:
@@ -667,12 +681,12 @@ To execute an Aspera transfer, only two additional files are required, both incl
 
 - `aspera-license` - the license file (located in the same directory as `ascp` or in `../etc`)
 
-These components can be installed either by installing the Aspera transfer software or by executing the `ascli` command.
+These components can be installed either by installing the Aspera transfer software or by running the `ascli` command.
 
 #### Installation of `ascp` through `transferd`
 
 The easiest option to install `ascp` is through the use of the IBM Aspera Transfer Daemon (`transferd`).
-Install using `ascli` for the current platform with:
+Install it using `ascli` (for the current platform) with:
 
 ```shell
 ascli config transferd install
@@ -738,6 +752,7 @@ If the embedded method is not used, the following packages are also suitable:
 
 - IBM Aspera Connect Client (Free)
 - IBM Aspera Desktop Client (Free)
+- IBM Aspera for Desktop (Free)
 - IBM Aspera High Speed Transfer Server (Licensed)
 - IBM Aspera High Speed Transfer Endpoint (Licensed)
 
@@ -758,14 +773,15 @@ Refer to section: [Transfer Agents](#transfer-clients-agents)
 
 #### Gem files and dependencies
 
-The sample script: [windows/build_package.sh](windows/build_package.sh) can be used to download all necessary gems and dependencies in a `tar.gz`.
+Necessary gems can be packed in a `tar.gz` like this:
 
-```shell
-./build_package.sh aspera-cli 4.18.0
-```
-
-```text
-Archive: aspera-cli-4.18.0-gems.tgz
+```bash
+mkdir temp_folder
+gem install aspera-cli:4.25.0.pre --no-document --install-dir temp_folder
+find temp_folder
+mv temp_folder/cache aspera-cli-4.25.0.pre-gems
+rm -fr temp_folder
+tar zcvf aspera-cli-4.25.0.pre-gems aspera-cli-4.25.0.pre-gems.tgz
 ```
 
 #### Unix-like
@@ -845,7 +861,7 @@ ascli config ascp install --sdk-url=file:///sdk.zip
 ```
 
 > [!NOTE]
-> An example of installation script is provided: [windows/install.bat](windows/install.bat)
+> A beta version of a packaged installed is available.
 
 ### Container
 
@@ -888,7 +904,7 @@ That is simple, but there are limitations:
 
 #### Container: Details
 
-The container image is built from this [Dockerfile](container/Dockerfile.tmpl.erb).
+The container image is built from this [Dockerfile](build/container/Dockerfile.tmpl.erb).
 The entry point is `ascli` and the default command is `help`.
 
 The container can be executed for individual commands like this: (add `ascli` commands and options at the end of the command line, e.g. `-v` to display the version)
@@ -910,7 +926,7 @@ ascli -v
 ```
 
 ```text
-4.24.2
+4.25.0.pre
 ```
 
 In order to keep persistency of configuration on the host, you should specify your user's configuration folder as a volume for the container.
@@ -1350,35 +1366,86 @@ Details can be found here:
 
 - [quoting rules](https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_quoting_rules)
 
-The following examples give the same result on Windows using PowerShell:
+##### PowserShell 5
 
 - Check your powershell version:
 
 ```powershell
-PS C:\> echo $psversiontable.psversion
+$psversiontable.psversion.Major
+```
 
-Major  Minor  Build  Revision
------  -----  -----  --------
-5      1      19041  4046
+```text
+5
+```
+
+The following examples give the same result on Windows using PowerShell 5:
+
+```text
+╭───────┬───────╮
+│ field │ value │
+╞═══════╪═══════╡
+│ x     │ true  │
+│ k     │ v     │
+╰───────┴───────╯
 ```
 
 - Use PowerShell argument `--%` to place PowerShell in "stop-parsing" mode.
 
 ```powershell
-PS C:\> ascli config echo  --% @json:'{"k":"v","x":"y"}'
+ascli config echo  --% @json:'{"k":"v","x":true}'
 ```
 
 - Triple double quotes are replaced with a single double quote in normal mode:
 
 ```powershell
-PS C:\> ascli config echo @json:'{"""k""":"""v""","""x""":"""y"""}'
+ascli config echo @json:'{"""k""":"""v""","""x""":true}'
+```
+
+- To insert PowerShell variables in the JSON string, one can do:
+
+```powershell
+$var="v"
+ascli conf echo  $('@json:{"""k""":"""' + $var + '""","""x""":true}')
+```
+
+##### PowserShell 7
+
+- Check your powershell version:
+
+```powershell
+$psversiontable.psversion.Major
+```
+
+```text
+7
+```
+
+The following examples give the same result on Windows using PowerShell 7:
+
+- Use PowerShell argument `--%` to place PowerShell in "stop-parsing" mode.
+
+```powershell
+ascli config echo  --% @json:{"k":"v","x":true}
+```
+
+- Single quote protects double quote in normal mode:
+
+```powershell
+ascli config echo @json:'{"k":"v","x":true}'
 ```
 
 - To insert PowerShell variables in the JSON string, one can do:
 
 ```powershell
-$email="john@example.com"
-ascli conf echo  $('@json:{"""address""":"""' + $email + '""","""vip""":true}')
+$var="v"
+ascli conf echo  $('@json:{"k":"' + $var + '","x":true}')
+```
+
+- Use PowerShell structure and then convert to JSON string:
+
+```powershell
+$var="v"
+ascli conf echo "@json:$(@{ k = $var; x = $true } | ConvertTo-Json -Compress)"
 ```
 
 #### Extended Values (JSON, Ruby, ...)
@@ -1603,7 +1670,7 @@ The value of **Options** and **Positional Arguments** is evaluated with the [Ext
 - **Commands**, typically at the beginning
 - **Command Parameters**, mandatory arguments, e.g. creation data or entity identifier
 
-When options are removed from the command line, the remaining arguments are typically **Positional Arguments** with a pre-defined order.
+When options are removed from the command line, the remaining arguments are typically **Positional Arguments** with a significant, pre-defined order.
 
 **Commands** are typically entity types (e.g. `users`) or verbs (e.g. `create`) to act on those entities.
 Its value is a `String` that must belong to a fixed list of values in a given context.
@@ -1620,14 +1687,13 @@ ascli config ascp info
 - `info` is the third level command: action to be performed
 
 Typically, **Commands** are located at the **beginning** of the command line.
-Order is significant.
 The provided command must match one of the supported commands in the given context.
 If wrong, or no command is provided when expected, an error message is displayed and the list of supported commands is displayed.
 
 Standard **Commands** are: `create`, `show`, `list`, `modify`, `delete`.
 Some entities also support additional commands.
 When those additional commands are related to an entity also reachable in another context, then those commands are located below command `do`.
-For example sub-commands appear after entity selection (identifier), e.g. `ascli aoc admin node do _my_node_id_ browse /`: `browse` is a sub-command of `node`.
+For example sub-commands appear after entity selection (identifier), e.g. `ascli aoc admin node do <node_id> browse /`: `browse` is a sub-command of `node`.
 
 **Command Parameters** are typically mandatory values for a command, such as entity creation data or entity identifier.
 
@@ -1642,6 +1708,29 @@ If a **Command Parameter** begins with `-`, then either use the `@val:` syntax (
 
 A few **Command Parameters** are optional, they are always located at the end of the command line.
 
+A special Extended Value `@:` has the following meaning:
+
+- Take all remaining positional arguments
+- Expect each of them to have the format: `<path>=<value>`
+- `<path>` designates a path in a complex structure such as Hash or Array.
+  `.` is the path separator.
+  Each segment separated by a dot represents a key in a nested structure.
+  Integer index denote Array, and other denote Hash index.
+- `ascli` tries to convert `<value>` to the simplest type (bool, int, float, string).
+  If a specific type is required, it can be specified using the `@json:` or `@ruby:` syntax.
+  For example, `--a.b.c=1` is equivalent to `--a=@json'{"b":{"c":1}}'`.
+  This allows specifying nested keys directly on the command line using a concise **dot-separated** syntax.
+
+Example:
+
+```bash
+ascli conf echo @: a.b=1 a.c=2 a.d.0=hello a.d.1=world --format=json
+```
+
+```json
+{"a":{"b":1,"c":2,"d":["hello","world"]}}
+```
+
 #### Options
 
 Command-line options, such as `--log-level=debug`, follow these conventions:
@@ -1673,13 +1762,17 @@ Exceptions and Special Cases:
 - **Option Terminator**:
   The special option `--` ends option parsing.
   All subsequent arguments, including those starting with `-`, are treated as positional arguments.
-- **Dot Notation for Hashes**:
+- **Dot Notation for Hash and Array**:
   If an option name contains a dot (`.`), it is interpreted as a `Hash`.
   Each segment separated by a dot represents a key in a nested structure.
   `ascli` tries to convert the value to the simplest type (bool, int, float, string).
   If a specific type is required, it can be specified using the `@json:` or `@ruby:` syntax.
   For example, `--a.b.c=1` is equivalent to `--a=@json'{"b":{"c":1}}'`.
   This allows specifying nested keys directly on the command line using a concise **dot-separated** syntax.
+- **Cummulative Hashes**:
+  When an option of type `Hash` is set, the value is deep-merged to an existing or default value.
+  Setting to `@none:` is equivalent to setting to `@json:{}`, i.e. an empty `Hash`.
+  This can be used to start from an empty value, and not used existing default value.
 
 Example:
 
@@ -2085,36 +2178,40 @@ The following decoders are supported:
 
 | Decoder  | Parameter| Returns  | Description                                                                              |
 |----------|----------|----------|------------------------------------------------------------------------------------------|
-| `base64` | `String` | `String` | Decode a base64 encoded string |
-| `csvt`   | `String` | `Array`  | Decode a titled CSV value |
-| `env`    | `String` | `String` | Read from a named env var name, e.g. `--password=@env:MYPASSVAR` |
-| `file`   | `String` | `String` | Read value from specified file (prefix `~/` is replaced with the users home folder), e.g. `--key=@file:~/.ssh/mykey` |
-| `json`   | `String` | Any      | Decode JSON values (convenient to provide complex structures) |
-| `lines`  | `String` | `Array`  | Split a string in multiple lines and return an array |
-| `list`   | `String` | `Array`  | Split a string in multiple items taking first character as separator and return an array |
-| `none`   | None     | Nil      | A null value |
-| `path`   | `String` | `String` | Performs path expansion on specified path (prefix `~/` is replaced with the users home folder), e.g. `--config-file=@path:~/sample_config.yml` |
+| `base64` | `String` | `String` | Decode a base64 encoded string. |
+| `csvt`   | `String` | `Array`  | Decode a titled CSV value. |
+| `env`    | `String` | `String` | Read from a named env var name. e.g. `--password=@env:MYPASSVAR` |
+| `file`   | `String` | `String` | Read value from specified file (prefix `~/` is replaced with the users home folder). e.g. `--key=@file:~/.ssh/mykey` |
+| `json`   | `String` | Any      | Decode JSON values. Convenient to provide complex structures. |
+| `lines`  | `String` | `Array`  | Split a string in multiple lines and return an `Array`. |
+| `list`   | `String` | `Array`  | Split a string in multiple items taking first character as separator and return an `Array`. |
+| `none`   | None     | Nil      | A `null` value. |
+| `path`   | `String` | `String` | Performs path expansion on specified path (prefix `~/` is replaced with the user's home folder). e.g. `--config-file=@path:~/sample_config.yml` |
 | `preset` | `String` | `Hash`   | Get whole option preset value by name. Sub-values can also be used, using `.` as separator. e.g. `foo.bar` is `conf[foo][bar]` |
-| `extend` | `String` | `String` | Evaluates embedded extended value syntax in string |
+| `extend` | `String` | `String` | Evaluates embedded extended value syntax in string. |
 | `re`     | `String` | `Regexp` | Ruby Regular Expression (short for `@ruby:/.../`) |
-| `ruby`   | `String` | Any      | Execute specified Ruby code |
-| `secret` | None     | `String` | Ask password interactively (hides input) |
-| `stdin`  | None     | `String` | Read from stdin in text mode (no value on right) |
-| `stdbin` | None     | `String` | Read from stdin in binary mode (no value on right) |
-| `uri`    | `String` | `String` | Read value from specified URL, e.g. `--fpac=@uri:http://serv/f.pac` |
+| `ruby`   | `String` | Any      | Execute specified Ruby code. |
+| `secret` | None     | `String` | Ask password interactively (hides input). |
+| `stdin`  | None     | `String` | Read from stdin in text mode (no value on right). |
+| `stdbin` | None     | `String` | Read from stdin in binary mode (no value on right). |
+| `uri`    | `String` | `String` | Read value from specified URL. e.g. `--fpac=@uri:http://serv/f.pac` |
 | `val`    | `String` | `String` | Prevent decoders on the right to be decoded. e.g. `--key=@val:@file:foo` sets the option `key` to value `@file:foo`. |
-| `yaml`   | `String` | Any      | Decode YAML |
-| `zlib`   | `String` | `String` | Decompress data using zlib |
+| `yaml`   | `String` | Any      | Decode YAML. |
+| `zlib`   | `String` | `String` | Decompress data using zlib. |
+| `p`      | None     | Any      | Parses remaining arguments as `Hash` or `Array`. |
 
 > [!NOTE]
 > A few commands support a value of type `Proc` (lambda expression).
-> For example, the **Extended Value** `@ruby:'->(i){i["attr"]}'` is a lambda expression that returns the value for key `attr` of the `Hash` `i`.
+> For example, the **Extended Value** `@ruby:'->(i){i["attr"]}'` is a lambda expression that returns the value for key `attr` of the `Hash` parameter named `i`.
 
 To display the result of an extended value, use the `config echo` command.
 
 The `extend` decoder is useful to evaluate embedded extended value syntax in a string.
 It expects a `@` to close the embedded extended value syntax.
 
+Option `parser` allows definition of a default parser when the positinal parameter or option expects a `Hash` or `Array`.
+For example, with `--parser=json`, the parameter `{}` will be parsed as an empty JSON Hash, even without prefix `@json:`.
+
 Example: Create a `Hash` value with the convenient `@json:` decoder:
 
 ```shell
@@ -2191,15 +2288,17 @@ EOF
 {"key1":"value1","key2":["item1","item2"],"key3":{"key4":"value4","key5":"value5"}}
 ```
 
-### Configuration and Persistency Folder
+### Main, configuration and Persistency Folder
 
-`ascli` configuration and persistency files (token cache, file lists, persistency files) are stored by default in `[User's home folder]/.aspera/ascli`.
+`ascli` looks for configuration and persistency files (token cache, file lists, persistency files) in the folder specified using option `home`.
+The default value is `[User's home folder]/.aspera/ascli`.
 
 > [!NOTE]
-> `[User's home folder]` is found using Ruby's `Dir.home` (`rb_w32_home_dir`).
-> It uses the `HOME` env var primarily, and on MS Windows it also looks at `%HOMEDRIVE%%HOMEPATH%` and `%USERPROFILE%`.
-> `ascli` sets the env var `%HOME%` to the value of `%USERPROFILE%` if set and exists.
-> So, on Windows `%USERPROFILE%` is used as it is more reliable than `%HOMEDRIVE%%HOMEPATH%`.
+> The `[User's home folder]` is determined using Ruby’s `Dir.home` method.
+> Primary source: The HOME environment variable.
+> On Windows: Ruby also checks `%HOMEDRIVE%%HOMEPATH%` and `%USERPROFILE%` (via `rb_w32_home_dir`).
+> Additionally, `ascli` sets the `%HOME%` environment variable to the value of `%USERPROFILE%` if it exists and is valid.
+> Therefore, on Windows, `%USERPROFILE%` is preferred because it is generally more reliable than `%HOMEDRIVE%%HOMEPATH%`.
 
 The configuration folder can be displayed using :
 
@@ -2212,9 +2311,11 @@ ascli config folder
 ```
 
 > [!NOTE]
-> This is equivalent to: `ascli --show-config --fields=home`
+> This is equivalent to display the value of the `home` option.
 
-It can be overridden using option `home`.
+```shell
+ascli --show-config --fields=home
+```
 
 Example (Windows):
 
@@ -2226,11 +2327,28 @@ ascli config folder
 C:\Users\Kenji\.aspera\ascli
 ```
 
-When OAuth is used (AoC, Faspex5) `ascli` keeps a cache of generated bearer tokens in folder `persist_store` in configuration folder by default.
+When OAuth is used (AoC, Faspex5) `ascli` keeps a cache of generated bearer tokens in folder `persist_store` located in the configuration folder by default.
 Option `cache_tokens` (**yes**/no) allows controlling if OAuth tokens are cached on file system, or generated for each request.
 The command `config tokens flush` clears that cache.
 Tokens are kept on disk for a maximum of 30 minutes (`TOKEN_CACHE_EXPIRY_SEC`) and garbage collected after that.
-When a token has expired, then a new token is generated, either using a refresh_token if it is available, or by the default method.
+When a token has expired, then a new token is generated, either using a `refresh_token` if it is available, or by the default method.
+
+### Configuration file
+
+On the first execution of `ascli`, an empty configuration file is created in the configuration folder (`ascli config folder`).
+There is no mandatory information required in this file.
+The use of it is optional as any option can be provided on the command line.
+
+Although the file is a standard `YAML` file, `ascli` provides commands to read and modify it using the `config` command.
+
+All options for `ascli` can be set on command line, or by env vars, or using [Option Preset](#option-preset) in the configuration file.
+
+A configuration file provides a way to define default values, especially for authentication options, thus avoiding to always having to specify those options on the command line.
+
+The default configuration file is: `$HOME/.aspera/ascli/config.yaml` (this can be overridden with option `--config-file=path` or its env var).
+
+The configuration file is a catalog of named lists of options, called: [Option Preset](#option-preset).
+Then, instead of specifying some common options on the command line (e.g. address, credentials), it is possible to invoke the ones of an [Option Preset](#option-preset) (e.g. `mypreset`) using the option `preset`: `--preset=mypreset` or its shortcut: `-Pmypreset`.
 
 ### Invalid Filename Characters
 
@@ -2253,23 +2371,6 @@ Temporary files are deleted at the end of execution unless option: `clean_temp`
 By default (`@sys`), the temporary folder is the system's temporary folder for the current user (Ruby `Etc.systmpdir`).
 A special value of `@env` will set the folder to Ruby `Dir.tmpdir` which uses regular env var to set the temp folder.
 
-### Configuration file
-
-On the first execution of `ascli`, an empty configuration file is created in the configuration folder (`ascli config folder`).
-There is no mandatory information required in this file.
-The use of it is optional as any option can be provided on the command line.
-
-Although the file is a standard `YAML` file, `ascli` provides commands to read and modify it using the `config` command.
-
-All options for `ascli` can be set on command line, or by env vars, or using [Option Preset](#option-preset) in the configuration file.
-
-A configuration file provides a way to define default values, especially for authentication options, thus avoiding to always having to specify those options on the command line.
-
-The default configuration file is: `$HOME/.aspera/ascli/config.yaml` (this can be overridden with option `--config-file=path` or its env var).
-
-The configuration file is a catalog of named lists of options, called: [Option Preset](#option-preset).
-Then, instead of specifying some common options on the command line (e.g. address, credentials), it is possible to invoke the ones of an [Option Preset](#option-preset) (e.g. `mypreset`) using the option `preset`: `--preset=mypreset` or its shortcut: `-Pmypreset`.
-
 #### Option Preset
 
 An [Option Preset](#option-preset) is a collection of options and their associated values in a named section in the configuration file.
@@ -2367,7 +2468,7 @@ ascli config preset get default _plugin_name_
 "_default_preset_for_plugin_"
 ```
 
-#### Plugin: `config`: Configuration
+### Plugin: `config`: Configuration
 
 Plugin `config` provides general commands for `ascli`:
 
@@ -2413,7 +2514,7 @@ ascli config preset set GLOBAL version_check_days 0
 ascli config preset set default config my_common_defaults
 ```
 
-### Tested commands for `config`
+#### Tested commands for `config`
 
 > [!NOTE]
 > Add `ascli config` in front of the following commands:
@@ -2436,6 +2537,7 @@ ascp show
 ascp spec
 check_update
 coffee
+coffee --log-level=trace2 --log-format=caller
 coffee --ui=text
 coffee --ui=text --image=@json:'{"text":true,"double":false}'
 coffee --ui=text --image=@json:'{"text":true}'
@@ -2464,6 +2566,7 @@ echo @uri:/etc/hosts
 echo @uri:file:/etc/hosts
 echo @uri:http://ifconfig.me
 echo @uri:https://ifconfig.me
+echo @uri:https://ifconfig.me/ip --cert-stores=@ruby:[OpenSSL::X509::DEFAULT_CERT_DIR,OpenSSL::X509::DEFAULT_CERT_FILE] --http-options.ssl_options=@list:,CIPHER_SERVER_PREFERENCE,-NETSCAPE_CA_DN_BUG --insecure=yes
 echo @vault:my_preset.password
 echo @zlib:@stdin:
 echo hello
@@ -2482,7 +2585,7 @@ genkey my_key 4096
 image https://eudemo.asperademo.com/wallpaper.jpg
 initdemo
 open
-plugins create my_command
+plugins create my_command .
 plugins list
 preset delete conf_name
 preset initialize conf_name @json:'{"p1":"v1","p2":"v2"}'
@@ -2503,7 +2606,6 @@ smtp_settings
 sync spec
 tokens flush
 tokens list
-tokens show foobar
 transferd install
 transferd list
 vault create @json:'{"label":"my_label","password":"my_password_here","description":"my secret"}'
@@ -2523,7 +2625,7 @@ wizard my_org aoc --key-path=my_private_key --username=my_user_email --use-gener
 wizard my_org aoc mypreset --key-path=my_private_key --username=my_user_email
 ```
 
-#### Format of file
+#### Format of configuration file
 
 The configuration file is a `Hash` in a YAML file.
 Example:
@@ -2858,7 +2960,16 @@ It consists in using a pair of associated keys: a private key and a public key.
 The same pair can be used for multiple applications.
 The file containing the private key (key pair) can optionally be protected by a passphrase.
 If the key is protected by a passphrase, then it will be prompted when used.
-(some plugins support option `passphrase`)
+Some plugins support option `passphrase`.
+
+By default, `ascli` does not support `ed25519` type, nor OpenSSH encoded keys.
+See section: [Private key type ed25519](#private-key-type-ed25519-not-supported-by-default).
+It requires PEM encoded keys.
+To support `ed25519` and OpenSSH format (default on modern Linux), install those gems:
+
+```shell
+gem install ed25519 bcrypt_pbkdf
+```
 
 The following sample commands use the shell variable `KEY_PAIR_PATH`.
 Set it to the desired safe location of the private key.
@@ -2879,6 +2990,7 @@ If another format is used, such as `DER`, it can be converted to `PEM`, e.g. usi
 
 The generated key is of type `RSA`, by default: **4096** bit.
 For convenience, the public key is also extracted with extension `.pub`.
+Files are PEM encoded.
 The key is not passphrase protected.
 
 ```shell
@@ -3000,38 +3112,47 @@ It is also possible to force the graphical mode with option `--ui` :
 ### Logging, Debugging
 
 The gem is equipped with traces, mainly for debugging and learning APIs.
+The following options control logging:
+
+| Option        | Values | Description                                                             |
+|---------------|--------|-------------------------------------------------------------------------|
+| `logger`      | `stdout`<br/>`stderr`<br/>`syslog` | Type of output.<br/>Default: `stderr` |
+| `log_level`   | `trace2`<br/>`trace1`<br/>`debug`<br/>`info`<br/>`warn`<br/>`error` | Minimum level displayed.<br/>Default: `warn` |
+| `log_secrets` | `yes`<br/>`no` | Show or hide secrets in logs.<br/>Default: `no` (Hide) |
+| `log_format`  | `Proc`<br/>`String` | The name of a formatter or a lambda function that formats the log (see below).<br/>Default: `default`<br/>Alternative: `standard` |
+
+Option `logger` defines the destination of logs.
+
+#### `log_level` and `log_secrets`
 
 To increase debug level, use option `log_level` (e.g. using command line `--log-level=xx`, env var `ASCLI_LOG_LEVEL`, or an [Option Preset](#option-preset)).
 
 > [!NOTE]
-> When using the `direct` agent (`ascp`), additional transfer logs can be activated using `ascp` options and `ascp_args`, see [`direct`](#agent-direct).
+> When using the `direct` agent (`ascp`), additional transfer logs from `ascp` can be activated using `ascp` options and `ascp_args`, see [`direct`](#agent-direct).
 
 By default, passwords and secrets are redacted from logs.
 Set option `log_secrets` to `yes` to include secrets in logs.
 
-| Option        | Values | Description                                                             |
-|---------------|--------|-------------------------------------------------------------------------|
-| `logger`      | `stdout`<br/>`stderr`<br/>`syslog` | Type of output.<br/>Default: `stderr` |
-| `log_level`   | `trace2`<br/>`trace1`<br/>`debug`<br/>`info`<br/>`warn`<br/>`error` | Minimum level displayed.<br/>Default: `warn` |
-| `log_secrets` | `yes`<br/>`no` | Show or hide secrets in logs.<br/>Default: `no` (Hide) |
-| `log_format`  | `Proc`<br/>`String` | The name of a formatter or a lambda function that formats the log (see below).<br/>Default: `default`<br/>Alternative: `standard` |
+#### `log_format`
 
-Option `log_format` is typically set using `@ruby:`.
-It is a lambda that takes 4 arguments, see: [Ruby Formatter](https://github.com/ruby/logger/blob/master/lib/logger/formatter.rb) : `severity`, `time`, `progname`, `msg`.
+Option `log_format` support a few pre-defined formatters or a custom one using `@ruby:`.
+A customer formatter is a lambda that takes 4 arguments, see: [Ruby Formatter](https://github.com/ruby/logger/blob/master/lib/logger/formatter.rb) : `severity`, `time`, `progname`, `msg`.
 The default formatter is:
 
 ```ruby
-->(s, _d, _p, m){"#{s[0..2]} #{m}\n"}
+->(s, _d, _p, m){"#{s[0..2]}#{s[-1]} #{m}\n"}
 ```
 
 Available formatters for `log_format`:
 
-| Name      | Description              |
-|-----------|--------------------------|
-| `default` | Default formatter.       |
-| `standard`| Standard Ruby formatter. |
+| Name      | Description                                                                      |
+|-----------|----------------------------------------------------------------------------------|
+| `default` | Default formatter: Colorized 4 level level followed by message on the same line. |
+| `standard`| Standard Ruby formatter.                                                         |
+| `caller`  | Colorized 4 level level followed by caller, and then on next line: message.      |
+| `Proc`    | Custom lambda.                                                                   |
 
-Examples:
+#### Logging examples
 
 - Display debugging log on `stdout`:
 
@@ -3229,11 +3350,6 @@ This is the reason why it is advised to install the Aspera Transfer Daemon durin
 
 By default, `ascli` uses the `ascp` binary found in **well known locations**, i.e. typical Aspera product installation paths.
 
-The way to specify the location of `ascp` is to use either options:
-
-- `ascp_path`
-- `use_product`
-
 The `config` plugin allows finding and specifying the location of `ascp`.
 It provides the following commands for `ascp` sub-command:
 
@@ -3242,32 +3358,11 @@ It provides the following commands for `ascp` sub-command:
 - `products` : list Aspera transfer products available locally
 - `connect` : list and download connect client versions available on internet
 
-#### Show path of currently used `ascp`
-
-```shell
-ascli config ascp show
-```
-
-```text
-/Users/laurent/.aspera/ascli/sdk/ascp
-```
-
-```shell
-ascli config ascp info
-```
-
-```text
-╭─────────┬──────────────────────────────────────────────────╮
-│ field   │ value                                            │
-╞═════════╪══════════════════════════════════════════════════╡
-│ ascp    │ /Users/john/.aspera/sdk/ascp                     │
-...
-╰─────────┴──────────────────────────────────────────────────╯
-```
-
 #### Selection of `ascp` location for [`direct`](#agent-direct) agent
 
-By default, `ascli` uses any found local product with `ascp`, including Transfer Daemon.
+Option: `ascp_path` is used to specify the location of `ascp`.
+The default value is: `product:FIRST`.
+By default, `ascli` uses any found local product with `ascp`, including Transfer Daemon (SDK).
 
 To override and use an alternate `ascp` path use option `ascp_path` (`--ascp-path=`)
 
@@ -3299,10 +3394,9 @@ Saved to default global preset global_common_defaults
 
 If the path has spaces, read section: [Shell and Command line parsing](#command-line-parsing-special-characters).
 
-If option `ascp_path` is not set, then the product identified with option `use_product` is used.
-
-If `use_product` is not set, then the first product found is used,
-this is equivalent to using option: `--use-product=FIRST`.
+A special value `product:<product name>` can be used for option `ascp_path`.
+It specifies to use `ascp` from the given product name.
+A special valuefor product name is `FIRST`, which means: use the first found.
 
 Locally installed Aspera products can be listed with:
 
@@ -3321,13 +3415,42 @@ ascli config ascp products list
 +---------------------------------------+----------------------------------------+
 ```
 
-Using the option `use_product` finds the `ascp` binary of the selected product.
-
 To permanently use the `ascp` of a product:
 
 ```shell
-ascli config ascp products use 'Aspera Connect'
-saved to default global preset /Users/laurent/Applications/Aspera Connect.app/Contents/Resources/ascp
+ascli config ascp products use 'IBM Aspera Connect'
+Updated: default: config <- global_common_defaults
+Updated: global_common_defaults: ascp_path <- product:IBM Aspera Connect
+Saving config file.
+```
+
+It is the same as executing:
+
+```shell
+ascli config preset set GLOBAL ascp_path 'product:IBM Aspera Connect'
+```
+
+To show the path of currently used `ascp`:
+
+```shell
+ascli config ascp show
+```
+
+```text
+/Users/laurent/.aspera/ascli/sdk/ascp
+```
+
+```shell
+ascli config ascp info
+```
+
+```text
+╭─────────┬──────────────────────────────────────────────────╮
+│ field   │ value                                            │
+╞═════════╪══════════════════════════════════════════════════╡
+│ ascp    │ /Users/john/.aspera/sdk/ascp                     │
+...
+╰─────────┴──────────────────────────────────────────────────╯
 ```
 
 #### Installation of Connect Client on command line
@@ -3518,13 +3641,19 @@ ascli config folder
 
 The name of the file shall be: `send_<PID>`, where `<PID>` is the process id of the running `ascli`.
 
+If there is only one `ascli` running, one can get the PID like this:
+
+```shell
+ps -axo pid,command|grep ascli|grep -v grep|cut -f1 -d' '
+```
+
 Example to change the target rate:
 
 ```shell
 echo '{"type":"RATE","Rate":300000}' > ~/.aspera/ascli/send_67470
 ```
 
-When `ascli` detects this file, it uses it and then deletes it.
+When `ascli` detects this file, it uses it during a transfer and then deletes it.
 
 ##### Agent: Direct: `aspera.conf`: Virtual Links
 
@@ -3807,7 +3936,7 @@ The use of a [**transfer-spec**](#transfer-specification) instead of `ascp` comm
 - Common to all [Transfer Agent](#transfer-clients-agents)
 - Not dependent on command line limitations (special characters...)
 
-### Transfer Parameters
+#### Transfer Parameters
 
 All standard [**transfer-spec**](#transfer-specification) parameters can be specified.
 A [**transfer-spec**](#transfer-specification) can also be saved/overridden in the configuration file.
@@ -3839,8 +3968,10 @@ ascli config ascp schema transferd --format=jsonpp
 
 `ascp` argument or environment variable is provided in description.
 
+#### Transfer Specification Reference
+
 | ID | Name |
-| - | --------- |
+|----|-----------|
 | A | Direct |
 | C | Connect |
 | D | Desktop |
@@ -3849,15 +3980,15 @@ ascli config ascp schema transferd --format=jsonpp
 | T | Transferd |
 
 | Field | Type | Description |
-| ------------------------------ | ------- | -------------------------------------------------------------------------------- |
+|--------------------------------|---------|----------------------------------------------------------------------------------|
 | apply_local_docroot | boolean | Apply local docroot to source paths.<br/>(A, T)<br/>(`--apply-local-docroot`) |
 | authentication | string | Set to `token` for SSH bypass keys, else password asked if not provided.<br/>(C) |
 | cipher | string | In transit encryption algorithms.<br/>Allowed values: `none`, `aes-128`, `aes-192`, `aes-256`, `aes-128-cfb`, `aes-192-cfb`, `aes-256-cfb`, `aes-128-gcm`, `aes-192-gcm`, `aes-256-gcm`<br/>(`-c (conversion){enum}`) |
 | cipher_allowed | string | Returned by node API. Valid literals include `aes-128` and `none`.<br/>(C)<br/>Allowed values: `none`, `aes-128`, `aes-192`, `aes-256`, `aes-128-cfb`, `aes-192-cfb`, `aes-256-cfb`, `aes-128-gcm`, `aes-192-gcm`, `aes-256-gcm` |
-| content_protection | string | Enable client-side encryption at rest (CSEAR).<br/>Allowed values: `encrypt`, `decrypt`<br/>(`--file-crypt={enum}`) |
-| content_protection_password | string | Specifies CSEAR password.<br/>(env:`ASPERA_SCP_FILEPASS`) |
+| content_protection | string | Enable client-side content protection (CSEAR, encryption-at-rest).<br/>For uploads, set to `encrypt` to transfer encrypted files and store them on the server with the extension `.aspera-env`. (`aspera.conf` parameter `transfer_encryption_content_protection_extension`). To download and decrypt encrypted files, set to `decrypt`<br/>`content_protection_password` must be specified if this option is set.<br/>Allowed values: `encrypt`, `decrypt`<br/>(`--file-crypt={enum}`) |
+| content_protection_password | string | Password for encryption/decryption of transferred assets.<br/>(env:`ASPERA_SCP_FILEPASS`) |
 | cookie | string | Metadata for transfer specified by application.<br/>(env:`ASPERA_SCP_COOKIE`) |
-| create_dir | boolean | Specifies whether to create new directories.<br/>(`-d`) |
+| create_dir | boolean | Create target directory if it doesn't already exist.<br/>If **all** the following conditions are met, then the `destination_root` specifies a filename instead of destination folder:<br/>- `create_dir` is `false`<br/>- A single source file is given on **command line**<br/>- The target folder specified by `destination_root` does not exist<br/>In all other cases, `destination_root` specifies a folder, and it is created if it does not already exist. I.e. if **any** of those conditions is met:<br/>- `create_dir` is `true`<br/>- Multiple source files are provided<br/>- List of source files are provided in a file (list or pair), default for Node API and `ascli`.<br/>- The target folder exists<br/>(`-d`) |
 | delete_before_transfer | boolean | Before transfer, delete files that exist at the destination but not at the source.<br/>The source and destination arguments must be directories that have matching names.<br/>Objects on the destination that have the same name but different type or size as objects on the source are not deleted.<br/>(`--delete-before-transfer`) |
 | delete_source | boolean | Remove transfered source files after transfer success. Equivalent to `remove_after_transfer` + `remove_empty_directories` + `remove_empty_source_directory`. Take precedence over those.<br/>(A, N, T) |
 | destination_root | string | Destination root directory. |
@@ -3924,7 +4055,7 @@ ascli config ascp schema transferd --format=jsonpp
 | src_base64 | string | The folder name below which the directory structure is preserved (base64 encoded).<br/>(A, T)<br/>(`--src-base64={string}`) |
 | ssh_args | array | Add arguments to the command-line arguments passed to the external ssh program (implies -SSH). The arguments are inserted before any key file(s) supplied to `ascp` and before the user/host arguments.<br/>(A, T)<br/>(special:`--ssh-arg={array}`) |
 | ssh_port | integer | Specifies SSH (TCP) port.<br/>(`-P {integer}`) |
-| ssh_private_key | string | Private key used for SSH authentication.<br/>Shall look like: -----BEGIN RSA PRIV4TE KEY-----\nMII...<br/>Note the JSON encoding: \n for newlines.<br/>(A, T)<br/>(env:`ASPERA_SCP_KEY`) |
+| ssh_private_key | string | Private key used for SSH authentication.<br/>Shall look like: -----BEGIN RSA PRIV4TE KEY-----&bsol;nMII...<br/>Note the JSON encoding: &bsol;n for newlines.<br/>(A, T)<br/>(env:`ASPERA_SCP_KEY`) |
 | ssh_private_key_passphrase | string | The passphrase associated with the transfer user's SSH private key. Available as of 3.7.2.<br/>(A, T)<br/>(env:`ASPERA_SCP_PASS`) |
 | ssh_private_key_path | string | Path to private key for SSH.<br/>(A, T)<br/>(`-i {string}`) |
 | sshfp | string | Check it against server SSH host key fingerprint.<br/>(`--check-sshfp={string}`) |
@@ -3936,7 +4067,7 @@ ascli config ascp schema transferd --format=jsonpp
 | title | string | Title of the transfer.<br/>(C, N, T) |
 | token | string | Authorization token. Type: Bearer, Basic or ATM. (Also arg -W)<br/>(env:`ASPERA_SCP_TOKEN`) |
 | use_ascp4 | boolean | Specify version of protocol. Do not use `ascp4`.<br/>(A, N, T) |
-| use_system_ssh | string | Use an external ssh program instead of the built-in libssh2 implementation to establish the connection to the remote host. The desired ssh program must be in the environment's PATH.<br/>To enable debugging of the ssh process, supply `-DD` and `--ssh-arg=-vv` arguments to `ascp`.<br/>(A, T)<br/>(`-SSH {string}`) |
+| use_system_ssh | boolean | Use an external `ssh` program instead of the built-in `libssh2` implementation to establish the connection to the remote host. The desired `ssh` program must be in the environment's `PATH`.<br/>To enable debugging of the `ssh` process, supply `-DD` and `--ssh-arg=-vv` arguments to `ascp`.<br/>(A, T)<br/>(`-SSH`) |
 | wss_enabled | boolean | Server has Web Socket service enabled.<br/>(special:`--ws-connect`) |
 | wss_port | integer | TCP port used for Web Socket service feed. |
 | xfer_max_retries | integer | Maximum number of retries, for node API initiated transfers. Shall not exceed aspera.conf `transfer_manager_max_retries` (default 5).<br/>(N) |
@@ -4132,8 +4263,13 @@ When multi-session is used, one separate UDP port is used per session (refer to
 
 #### Content protection
 
-Also known as Client-side encryption at rest (CSEAR), content protection allows a client to send files to a server which will store them encrypted (upload), and decrypt files as they are being downloaded from a server, both using a passphrase, only known by users sharing files.
-Files stay encrypted on server side.
+Content protection (Client-Side Encryption at Rest, CSEAR)) ensures that files remain encrypted while stored on the server.
+With CSEAR, the client encrypts files during upload and decrypts files during download, using a passphrase known only to the users sharing the files.
+
+- Upload: Files are encrypted on the client side before being sent to the server.
+- Download: Files are decrypted on the client side as they are retrieved from the server.
+
+At all times, files remain encrypted on the server; encryption and decryption occur exclusively on the client side.
 
 Activating CSEAR consists in using transfer spec parameters:
 
@@ -4146,6 +4282,11 @@ Example: parameter to download a Faspex package and decrypt on the fly
 --ts=@json:'{"content_protection":"decrypt","content_protection_password":"my_password_here"}'
 ```
 
+> [!NOTE]
+> Faspex 5 requires package parameter `ear_enabled` set to `true` for CSEAR.
+> In that case the transfer spec parameter `content_protection` is automatically set.
+> `content_protection_password` is then required in all cases.
+
 #### Transfer Spec Examples
 
 - Change target rate
@@ -4454,7 +4595,7 @@ ascli server upload "faux:///mydir?file=testfile&count=1000&size=1" --to-folder=
 ```text
 ascli -h
 NAME
-        ascli -- a command line tool for Aspera Applications (v4.24.2)
+        ascli -- a command line tool for Aspera Applications (v4.25.0.pre)
 
 SYNOPSIS
         ascli COMMANDS [OPTIONS] [ARGS]
@@ -4476,7 +4617,7 @@ COMMANDS
 OPTIONS
         Options begin with a '-' (minus), and value is provided on command line.
         Special values are supported beginning with special prefix @pfx:, where pfx is one of:
-        val, base64, csvt, env, file, uri, json, lines, list, none, path, re, ruby, secret, stdin, stdbin, yaml, zlib, extend, preset, vault
+        val, base64, csvt, env, file, uri, json, lines, list, none, path, re, ruby, secret, stdin, stdbin, yaml, zlib, extend, preset, vault, 
         Dates format is 'DD-MM-YY HH:MM:SS', or 'now' or '-<num>h'
 
 ARGS
@@ -4485,11 +4626,10 @@ ARGS
 OPTIONS: global
         --interactive=ENUM           Use interactive input of missing params: [no], yes
         --ask-options=ENUM           Ask even optional options: [no], yes
-        --struct-parser=ENUM         Default parser when expected value is a struct: json, ruby
         --format=ENUM                Output format: text, nagios, ruby, json, jsonpp, yaml, [table], csv, image
-        --output=VALUE               Destination for results (String)
+        --output=VALUE               Destination for results
         --display=ENUM               Output only some information: [info], data, error
-        --fields=VALUE               Comma separated list of: fields, or ALL, or DEF (String, Array, Regexp, Proc)
+        --fields=VALUE               Comma separated list of: fields, or ALL, or DEF (Array, Regexp, Proc)
         --select=VALUE               Select only some items in lists: column, value (Hash, Proc)
         --table-style=VALUE          (Table) Display style (Hash)
         --flat-hash=ENUM             (Table) Display deep values as additional keys: no, [yes]
@@ -4503,15 +4643,16 @@ OPTIONS: global
         --ui=ENUM                    Method to start browser: text, [graphical]
         --invalid-characters=VALUE   Replacement character and invalid filename characters
         --log-level=ENUM             Log level: trace2, trace1, debug, info, [warn], error, fatal, unknown
-        --log-format=VALUE           Log formatter (Proc, Logger::Formatter, String)
+        --log-format=VALUE           Log formatter (Proc, Logger::Formatter)
         --logger=ENUM                Logging method: [stderr], stdout, syslog
         --lock-port=VALUE            Prevent dual execution of a command, e.g. in cron (Integer)
         --once-only=ENUM             Process only new items (some commands): [no], yes
         --log-secrets=ENUM           Show passwords in logs: [no], yes
         --clean-temp=ENUM            Cleanup temporary files on exit: no, [yes]
         --temp-folder=VALUE          Temporary folder
-        --pid-file=VALUE             Write process identifier to file, delete on exit (String)
-        --home=VALUE                 Home folder for tool (String)
+        --pid-file=VALUE             Write process identifier to file, delete on exit
+        --parser=ENUM                Default parser for structured parameters and options: none, json, ruby, yaml
+        --home=VALUE                 Home folder for tool
         --config-file=VALUE          Path to YAML file with preset configuration
         --secret=VALUE               Secret for access keys
         --vault=VALUE                Vault for secrets (Hash)
@@ -4522,16 +4663,15 @@ OPTIONS: global
         --bfail=ENUM                 Bulk operation error handling: no, [yes]
     -N, --no-default                 Do not load default configuration for plugin
     -P, --presetVALUE                Load the named option preset from current config file
-        --version-check-days=VALUE   Period in days to check new version (zero to disable)
+        --version-check-days=VALUE   Period in days to check new version (zero to disable) (Integer)
         --plugin-folder=VALUE        Folder where to find additional plugins
         --override=ENUM              Wizard: override existing value: [no], yes
         --default=ENUM               Wizard: set as default configuration for specified plugin (also: update): no, [yes]
         --key-path=VALUE             Wizard: path to private key for JWT
-        --ascp-path=VALUE            Ascp: Path to ascp
-        --use-product=VALUE          Ascp: Use ascp from specified product
         --sdk-url=VALUE              Ascp: URL to get Aspera Transfer Executables
-        --locations-url=VALUE        Ascp: URL to get locations of Aspera Transfer Daemon
-        --sdk-folder=VALUE           Ascp: SDK folder path
+        --ascp-path=VALUE            Ascp: Path to ascp (or product with "product:")
+        --locations-url=VALUE        Ascp: URL to get download locations of Aspera Transfer Daemon
+        --sdk-folder=VALUE           Ascp: SDK installation folder path
         --progress-bar=ENUM          Display progress bar: [no], yes
         --smtp=VALUE                 Email: SMTP configuration (Hash)
         --notify-to=VALUE            Email: Recipient for notification of transfers
@@ -4539,9 +4679,9 @@ OPTIONS: global
         --insecure=ENUM              HTTP/S: Do not validate any certificate: [no], yes
         --ignore-certificate=VALUE   HTTP/S: Do not validate certificate for these URLs (Array)
         --warn-insecure=ENUM         HTTP/S: Issue a warning if certificate is ignored: no, [yes]
-        --cert-stores=VALUE          HTTP/S: List of folder with trusted certificates (Array, String)
+        --cert-stores=VALUE          HTTP/S: List of folder with trusted certificates (Array)
         --http-options=VALUE         HTTP/S: Options for HTTP/S socket (Hash)
-        --http-proxy=VALUE           HTTP/S: URL for proxy with optional credentials (String)
+        --http-proxy=VALUE           HTTP/S: URL for proxy with optional credentials
         --cache-tokens=ENUM          Save and reuse OAuth tokens: no, [yes]
         --fpac=VALUE                 Proxy auto configuration script
         --proxy-credentials=VALUE    HTTP proxy credentials for fpac: user, password (Array)
@@ -4565,7 +4705,7 @@ OPTIONS:
 
 
 COMMAND: node
-SUBCOMMANDS: access_keys api_details asperabrowser async basic_token bearer_token browse cat central delete download events health info license mkdir mkfile mklink rename search service simulator slash space ssync stream sync telemetry transfer transport upload watch_folder
+SUBCOMMANDS: access_keys api_details asperabrowser async basic_token bearer_token browse cat central delete download events health info license mkdir mkfile mklink rename search service simulator slash space spec ssync stream sync telemetry transfer transport upload watch_folder
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
         --username=VALUE             User's identifier
@@ -4591,7 +4731,7 @@ OPTIONS:
 
 
 COMMAND: orchestrator
-SUBCOMMANDS: health info plugins processes workflow
+SUBCOMMANDS: health info monitors plugins processes workflows workorders workstep
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
         --username=VALUE             User's identifier
@@ -4677,11 +4817,11 @@ OPTIONS:
         --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
         --username=VALUE             User's identifier
         --password=VALUE             User's password
-        --skip-format=ENUM           Skip this preview format (multiple possible): png, mp4
+        --skip-format=ENUM           Skip this preview format: png, mp4
         --folder-reset-cache=ENUM    Force detection of generated preview by refresh cache: [no], header, read
-        --skip-types=VALUE           Skip types in comma separated list
+        --skip-types=VALUE           Skip generation for those types of files (Array)
         --previews-folder=VALUE      Preview folder in storage root
-        --skip-folders=VALUE         List of folder to skip
+        --skip-folders=VALUE         List of folder to skip (Array)
         --base=VALUE                 Basename of output for for test
         --scan-path=VALUE            Subpath in folder id to start scan in (default=/)
         --scan-id=VALUE              Folder id in storage to start scan in, default is access key main folder id
@@ -4719,10 +4859,10 @@ OPTIONS:
         --private-key=VALUE          OAuth (JWT) RSA private key PEM value (prefix file path with @file:)
         --passphrase=VALUE           OAuth (JWT) RSA private key passphrase
         --scope=VALUE                OAuth scope for API calls
-        --workspace=VALUE            Name of workspace (String, NilClass)
+        --workspace=VALUE            Name of workspace
         --new-user-option=VALUE      New user creation option for unknown package recipients (Hash)
         --validate-metadata=ENUM     Validate shared inbox metadata: no, [yes]
-        --package-folder=VALUE       Field of package to use as folder name, or @none: (String, NilClass)
+        --package-folder=VALUE       Field of package to use as folder name, or @none:
 
 
 COMMAND: server
@@ -4731,7 +4871,7 @@ OPTIONS:
         --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
         --username=VALUE             User's identifier
         --password=VALUE             User's password
-        --ssh-keys=VALUE             SSH key path list (Array or single)
+        --ssh-keys=VALUE             SSH key path list (Array)
         --passphrase=VALUE           SSH private key passphrase
         --ssh-options=VALUE          SSH options (Hash)
 
@@ -4758,18 +4898,17 @@ This option is available only for some resources: if you need it: try and see if
 ### Option: `query`
 
 The `query` option can generally be used to add URL parameters to commands that list resources.
-It takes either a `Hash` or an `Array`, corresponding to key/value pairs that appear in the query part of request.
+It takes either a `Hash`, corresponding to key/value pairs that appear in the query part of request.
 
 For example: `--query=@json:'{"p1":"v1","p2":"v2"}'` leads to query: `?p1=v1&p2=v2`.
 
-If the same parameter needs to be provided several times, then it's possible as well to provide an `Array` or 2-element `Array`: `--query=@json:'[["p1":,"v1"],["p2":"v2"]]'` leads to the same result as previously.
+If the same parameter needs to be provided several times, then it's possible as well to provide an `Array`.
 
-If PHP's style array is used, then one can use either:
+For example: `--query=@json:'{"p":["v1","v2"]}'` leads to query: `?p=v1&p=v2`.
 
-- `--query=@json:'{"a":["[]","v1","v2"]}'`
-- `--query=@json:'[["a[]","v1"],["a[]","v2"]]'`
+If PHP's style array is expected in the API, then just add `[]` to the name of the parameter.
 
-Both result in: `?a[]=v1&a[]=v2`.
+For example: `--query=@json:'{"p[]":["v1","v2"]}'` leads to query: `?p[]=v1&p[]=v2`.
 
 ### Plugins
 
@@ -5138,7 +5277,7 @@ ascli aoc files bearer_token_node /
 ```
 
 ```shell
-ascli aoc admin node v4 _my_node_id_ --secret=_ak_secret_here_ bearer_token_node /
+ascli aoc admin node v4 <node_id> --secret=_ak_secret_here_ bearer_token_node /
 ```
 
 ### Administration
@@ -5741,13 +5880,13 @@ ascli aoc packages send @json:'{"name":"my title","note":"my note","recipients":
 ##### Example: Send a package to a shared inbox with metadata
 
 ```shell
-ascli aoc packages send --workspace="my ws" @json:'{"name":"my pack title","recipients":["Shared Inbox With Meta"],"metadata":{"Project Id":"123","Type":"Opt2","CheckThose":["Check1","Check2"],"Optional Date":"2021-01-13T15:02:00.000Z"}}' ~/Documents/Samples/200KB.1
+ascli aoc packages send --workspace="<workspace_name>" @json:'{"name":"my pack title","recipients":["Shared Inbox With Meta"],"metadata":{"Project Id":"123","Type":"Opt2","CheckThose":["Check1","Check2"],"Optional Date":"2021-01-13T15:02:00.000Z"}}' ~/Documents/Samples/200KB.1
 ```
 
 It is also possible to use identifiers and API parameters:
 
 ```shell
-ascli aoc packages send --workspace="my ws" @json:'{"name":"my pack title","recipients":[{"type":"dropbox","id":"12345"}],"metadata":[{"input_type":"single-text","name":"Project Id","values":["123"]},{"input_type":"single-dropdown","name":"Type","values":["Opt2"]},{"input_type":"multiple-checkbox","name":"CheckThose","values":["Check1","Check2"]},{"input_type":"date","name":"Optional Date","values":["2021-01-13T15:02:00.000Z"]}]}' ~/Documents/Samples/200KB.1
+ascli aoc packages send --workspace="<workspace_name>" @json:'{"name":"my pack title","recipients":[{"type":"dropbox","id":"12345"}],"metadata":[{"input_type":"single-text","name":"Project Id","values":["123"]},{"input_type":"single-dropdown","name":"Type","values":["Opt2"]},{"input_type":"multiple-checkbox","name":"CheckThose","values":["Check1","Check2"]},{"input_type":"date","name":"Optional Date","values":["2021-01-13T15:02:00.000Z"]}]}' ~/Documents/Samples/200KB.1
 ```
 
 ##### Example: Send a package with files from the Files app
@@ -5938,7 +6077,7 @@ ascli aoc files download <single file path>
 
 #### Shared folders
 
-Like in AoC web UI, "Shared Folders" can be created and shared with either **Private** or **Public** links.
+Like in AoC web UI, **Shared Folders** can be created and shared with either **Private** or **Public** links.
 **Private** links require the collaborator to log in to access the shared folder.
 **Public** links include a passcode that enables the user to access the shared folder without login-in.
 
@@ -5976,8 +6115,8 @@ The basic payload to create a permission, i.e. a Shared Folder (last argument at
 | `link_name`     |  `ascli`          | Name of the link file created in the user's home folder for private links. |
 | `as`            |  `ascli`          | Name of the link file created in the user's home folder for admin shared folders. |
 
-In order to declare/create the shared folder in the workspace, a special value for `access_id` is used: `ASPERA_ACCESS_KEY_ADMIN_WS_[workspace ID]]`.
-This is conveniently set by `ascli` using an empty string for field `with`.
+In order to declare/create the shared folder in the workspace, a special value for `access_id` is used: `ASPERA_ACCESS_KEY_ADMIN_WS_[workspace ID]`, with a `access_type` of `user`.
+This is conveniently set by `ascli` using an **empty string** for field `with`.
 In order to share a folder with a different, special tags are set, but this is conveniently done by `ascli` using the `as` field.
 
 ##### User Shared Folders
@@ -5994,7 +6133,7 @@ ascli aoc files permission --workspace=<workspace name> <path to folder> ...
 
 ##### Admin Shared Folders
 
-Admin shared folders, created by administrators in a workspace follow the syntax:
+Admin shared folders, created by administrators in a workspace, follow the syntax:
 
 ```shell
 ascli aoc admin node do <node ID> permission --workspace=<workspace name> <path to folder>
@@ -6006,7 +6145,7 @@ ascli aoc admin node do <node ID> permission --workspace=<workspace name> <path
 > The path is identifier by a path, one can specify a file id, with `%id:123`.
 > If the id is left blank: `%id:`, then if means `*`, i.e. all.
 
-##### Example: List permissions on a shared folder
+##### Example: List permissions on a user shared folder
 
 ```shell
 ascli aoc files permission /shared_folder_test1 list
@@ -6053,7 +6192,7 @@ To remove a password:
 > [!NOTE]
 > Access level cannot be customized in this version.
 
-An expiration date can be set with parameter `expires_at`, using ISO 8601 format.
+An expiration date can be set with parameter `expires_at`, using [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) format.
 E.g. `2025-08-29T08:10:31.000Z`.
 If only a date is provided, it will be set to midnight UTC of that date.
 
@@ -6061,16 +6200,16 @@ If only a date is provided, it will be set to midnight UTC of that date.
 
 First, identify the node ID where the shared folder will be created.
 
-To get the node ID of the default node for workspace `my ws`, use the command:
+To get the node ID of the default node for workspace `<workspace_name>`, use the command:
 
 ```shell
-ascli aoc admin workspace show %name:'my ws' --fields=node_id
+ascli aoc admin workspace show %name:'<workspace_name>' --fields=node_id
 ```
 
 Alternatively (longer):
 
 ```shell
-ascli aoc admin workspace list --select=@json:'{"name":"my ws"}' --fields=node_id
+ascli aoc admin workspace list --select=@json:'{"name":"<workspace_name>"}' --fields=node_id
 ```
 
 Or select a node identifier manually from the list of nodes:
@@ -6081,24 +6220,22 @@ ascli aoc admin node list --fields=id,name
 
 In the following commands, replace:
 
-- `_my_node_id_` with the node ID
-- `my ws` with the workspace name
-- `/folder_on_node` with the name of the folder on the node: it can also be a folder deeper than level 1.
-
-The node can also be conveniently identified using the **percent selector** instead of numerical ID: `%name:"my node"`.
+- `<node_id>` with the node ID, or with `%name:<node_name>`.
+- `<workspace_name>` with the workspace name, or with `%id:<workspace_id>`.
+- `<folder_path>` with the path of the folder to share on the node (e.g. `/my_folder` or simply `my_folder`). It can also be a folder deeper than level 1.
 
 If the shared folder does not exist, then create it:
 
 ```shell
-ascli aoc admin node do _my_node_id_ mkdir /folder_on_node
+ascli aoc admin node do <node_id> mkdir <folder_path>
 ```
 
-Create the shared folder in workspace `my ws` (set `with` to empty string, or do not specify it).
-Optionally use `as` to set the name of the shared folder if different from the folder name on the node.
+Create the shared folder in workspace `<workspace_name>` (set `with` to empty string, or do not specify it).
+**Optionally**, use `as` to set the name of the shared folder if different from the folder name on the node.
 For other options, refer to the previous section on shared folders.
 
 ```shell
-ascli aoc admin node do _my_node_id_ permission /folder_on_node create @json:'{"with":"","as":"folder_for_users"}' --workspace="my ws"
+ascli aoc admin node do <node_id> permission <folder_path> create @json:'{"with":"","as":"folder_for_users"}' --workspace="<workspace_name>"
 ```
 
 > [!NOTE]
@@ -6109,30 +6246,67 @@ The `"with"` parameter will perform a lookup, and set fields `access_type` and `
 The native fields `access_type` and `access_id` can also be used, instead of `with`.
 
 ```shell
-ascli aoc admin node do _my_node_id_ permission /folder_on_node create @json:'{"with":"john@example.com","as":"folder_for_one_user"}' --workspace="my ws"
+ascli aoc admin node do <node_id> permission <folder_path> create @json:'{"with":"john@example.com","as":"folder_for_one_user"}' --workspace="<workspace_name>"
 ```
 
 ```shell
-ascli aoc admin node do _my_node_id_ permission /folder_on_node create @json:'{"with":"group 1","as":"folder_for_a_group"}' --workspace="my ws"
+ascli aoc admin node do <node_id> permission <folder_path> create @json:'{"with":"group 1","as":"folder_for_a_group"}' --workspace="<workspace_name>"
 ```
 
 ```shell
-ascli aoc admin node do _my_node_id_ permission /folder_on_node create @json:'{"with":"my ws","as":"folder_for_all_workspace"}' --workspace="my ws"
+ascli aoc admin node do <node_id> permission <folder_path> create @json:'{"with":"<workspace_name>","as":"folder_for_all_workspace"}' --workspace="<workspace_name>"
 ```
 
 > [!NOTE]
 > In the previous commands, field `as` is optional.
 
+##### Example: List all workspace admin shared folder in a workspace
+
+```shell
+ascli aoc admin workspace shared_folder %name:'<workspace_name>' list
+```
+
+```text
+╭───────┬───────────┬─────────┬─────────┬───────────┬──────────────────────────────────────╮
+│ id    │ node_name │ node_id │ file_id │ file.path │ tags.aspera.files.workspace.share_as │
+╞═══════╪═══════════╪═════════╪═════════╪═══════════╪══════════════════════════════════════╡
+│ 198   │ eudemo    │ 8666    │ 2465    │ /project1 │                                      │
+│ 785   │ eudemo    │ 8666    │ 9       │ /folder2  │ project2                             │
+│ 4788  │ eudemo    │ 8666    │ 3691    │ /backup   │                                      │
+╰───────┴───────────┴─────────┴─────────┴───────────┴──────────────────────────────────────╯
+```
+
+To list members:
+
+```shell
+ascli aoc admin workspace shared_folder %name:'<workspace_name>' member 198 list
+```
+
+```text
+╭─────────────┬──────────────────────────────────┬──────────────┬──────────────────────╮
+│ access_type │ access_id                        │ access_level │ last_updated_at      │
+╞═════════════╪══════════════════════════════════╪══════════════╪══════════════════════╡
+│ user        │ ASPERA_ACCESS_KEY_ADMIN_WS_45071 │ edit         │ 2020-11-29T22:48:49Z │
+│ group       │ 160270                           │ edit         │ 2024-05-13T15:58:02Z │
+╰─────────────┴──────────────────────────────────┴──────────────┴──────────────────────╯
+```
+
+If you have the node id of the shared folder, than it is equivalent to:
+
+```shell
+ascli aoc admin node do 8669 perm /project1 list --query=@json:'{"tag":"aspera.files.workspace.id=<workspace_id>"}'
+```
+
 ##### Example: List all workspace admin shared folder on a node
 
 First get the workspace identifier:
 
 ```shell
-ascli aoc admin workspace list --select=@json:'{"name":"my ws"}' --fields=id
+ascli aoc admin workspace list --select=@json:'{"name":"<workspace_name>"}' --fields=id
 ```
 
 ```text
-111111
+<workspace_id>
 ```
 
 Then, identify the node id on which to list, see previous section.
@@ -6140,7 +6314,7 @@ Then, identify the node id on which to list, see previous section.
 Finally, list all shared folders, as permissions:
 
 ```shell
-ascli aoc admin node do _my_node_id_ perm %id: list --query=@json:'{"access_type":"user","access_id":"ASPERA_ACCESS_KEY_ADMIN_WS_111111"}'
+ascli aoc admin node do <node_id> perm %id: list --query=@json:'{"access_type":"user","access_id":"ASPERA_ACCESS_KEY_ADMIN_WS_<workspace_id>"}'
 ```
 
 > [!NOTE]
@@ -6197,11 +6371,11 @@ For instructions, refer to section `find` for plugin `node`.
 > Add `ascli aoc` in front of the following commands:
 
 ```bash
-admin analytics transfers nodes
+admin analytics files organization '' aoc_transfer_id
 admin analytics transfers organization --query=@json:'{"status":"completed","direction":"receive","limit":2}' --notify-to=my_email_external --notify-template=@ruby:'%Q{From: <%=from_name%> <<%=from_email%>>\nTo: <<%=to%>>\nSubject: <%=ev["files_completed"]%> files received\n\n<%=ev.to_yaml%>}'
 admin analytics transfers users --once-only=yes
 admin application list
-admin ats access_key create --cloud=aws --region=my_region @json:'{"id":"ak_aws","name":"my test key AWS","storage":{"type":"aws_s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
+admin ats access_key create --cloud=aws --region=my_region @json:'{"id":"ak_aws_aoc","name":"my test key AWS","storage":{"type":"aws_s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
 admin ats access_key create --cloud=softlayer --region=my_region @json:'{"id":"ak1ibmcloud","secret":"my_secret_here","name":"my test key","storage":{"type":"ibm-s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
 admin ats access_key delete ak1ibmcloud
 admin ats access_key list --fields=name,id
@@ -6247,15 +6421,18 @@ admin subscription usage
 admin subscription usage MONTH
 admin user list
 admin user modify %name:my_user_email @json:'{"deactivated":false}'
+admin workspace dropbox %name:my_other_workspace list
 admin workspace list
+admin workspace shared_folder %name:my_other_workspace list
+admin workspace shared_folder %name:my_other_workspace member shared_folder_id list
 admin workspace_membership list
 admin workspace_membership list --fields=ALL --query=@json:'{"page":1,"per_page":50,"embed":"member","inherited":false,"workspace_id":11363,"sort":"name"}'
-automation workflow action wf_id create @json:'{"name":"toto"}' \
+automation workflow action wf_id create @json:'{"name":"toto"}'
 automation workflow create @json:'{"name":"test_workflow"}'
 automation workflow delete wf_id
 automation workflow list
 automation workflow list --query=@json:'{"show_org_workflows":"true"}' --scope=admin:all
-automation workflow list --select=@json:'{"name":"test_workflow"}' --fields=id --format=csv --display=data --output=test
+automation workflow list --select=@json:'{"name":"test_workflow"}' --fields=id
 bearer_token --display=data --scope=user:all
 files bearer /
 files bearer_token_node / --cache-tokens=no
@@ -6268,7 +6445,7 @@ files browse my_remote_folder
 files browse my_remote_folder/
 files cat testdst/test_file.bin
 files delete /testsrc
-files down --to-folder=. testdst/test_file.bin testdst/test_file.bin
+files download --to-folder=. testdst/test_file.bin testdst/test_file.bin
 files download --transfer=connect testdst/test_file.bin
 files download --transfer=desktop testdst/test_file.bin
 files find /
@@ -6276,7 +6453,6 @@ files find / '\.partial$'
 files find / @ruby:'->(f){f["type"].eql?("file")}'
 files mkdir /testsrc
 files modify /some_folder @json:'{"mount_point":false}'
-files modify my_test_folder
 files permission my_test_folder list
 files rename /some_folder testdst
 files short_link /testdst private create
@@ -6293,9 +6469,8 @@ files transfer push /testsrc --to-folder=/testdst test_file.bin
 files upload --to-folder=/ test_file.bin --url=my_public_link_folder_no_pass
 files upload --to-folder=/testsrc test_file.bin
 files upload --to-folder=/testsrc test_file.bin test_file.bin
-files upload --workspace=my_other_workspace --to-folder=my_other_folder test_file.bin --transfer=node --transfer-info=@json:@stdin:
 files v3 info
-gateway --pid-file=pid_aoc_faspex_gateway @json:'{"url":"https://localhost:12345/aspera/faspex"}' &
+gateway @json:'{"url":"https://localhost:12345/aspera/faspex"}'
 organization
 organization --format=image --fields=background_image_url --ui=text
 organization --url=my_public_link_recv_from_aoc_user
@@ -6307,14 +6482,13 @@ packages receive ALL --once-only=yes --to-folder=. --lock-port=12345 --query=@js
 packages receive INIT --once-only=yes --query=@json:'{"dropbox_name":"my_shared_inbox_name"}'
 packages receive package_id3 --to-folder=.
 packages receive package_id3 --to-folder=. / --package-folder=name
-packages send --workspace=my_workspace_shared_inbox --validate-metadata=yes @json:'{"name":"$(notdir test) PACKAGE_TITLE_BASE","recipients":["my_shared_inbox_meta"],"metadata":[{"input_type":"single-text","name":"Project Id","values":["123"]},{"input_type":"single-dropdown","name":"Type","values":["Opt2"]},{"input_type":"multiple-checkbox","name":"CheckThose","values":["Check1","Check2"]},{"input_type":"date","name":"Optional Date","values":["2021-01-13T15:02:00.000Z"]}]}' test_file.bin
-packages send --workspace=my_workspace_shared_inbox --validate-metadata=yes @json:'{"name":"$(notdir test) PACKAGE_TITLE_BASE","recipients":["my_shared_inbox_meta"],"metadata":{"Project Id":"456","Type":"Opt2","CheckThose":["Check1","Check2"],"Optional Date":"2021-01-13T15:02:00.000Z"}}' test_file.bin
-packages send --workspace=my_workspace_shared_inbox --validate-metadata=yes @json:'{"name":"$(notdir test) PACKAGE_TITLE_BASE","recipients":["my_shared_inbox_meta"],"metadata":{"Type":"Opt2","CheckThose":["Check1","Check2"],"Optional Date":"2021-01-13T15:02:00.000Z"}}' test_file.bin
-packages send --workspace=my_workspace_shared_inbox @json:'{"name":"$(notdir test) PACKAGE_TITLE_BASE","recipients":["my_shared_inbox_name"]}' test_file.bin
-packages send @json:'{"name":"$(notdir test) PACKAGE_TITLE_BASE","recipients":["my_email_external"]}' --new-user-option=@json:'{"package_contact":true}' test_file.bin
-packages send @json:'{"name":"$(notdir test) PACKAGE_TITLE_BASE","recipients":["my_email_internal"],"note":"my note"}' test_file.bin
-packages send @json:'{"name":"$(notdir test) PACKAGE_TITLE_BASE"}' test_file.bin --url=my_public_link_send_aoc_user --password=my_public_link_send_use_pass
-packages send @json:'{"name":"$(notdir test) PACKAGE_TITLE_BASE"}' test_file.bin --url=my_public_link_send_shared_inbox
+packages send --workspace=my_workspace_shared_inbox --validate-metadata=yes @json:'{"name":"package title","recipients":["my_shared_inbox_meta"],"metadata":[{"input_type":"single-text","name":"Project Id","values":["123"]},{"input_type":"single-dropdown","name":"Type","values":["Opt2"]},{"input_type":"multiple-checkbox","name":"CheckThose","values":["Check1","Check2"]},{"input_type":"date","name":"Optional Date","values":["2021-01-13T15:02:00.000Z"]}]}' test_file.bin
+packages send --workspace=my_workspace_shared_inbox --validate-metadata=yes @json:'{"name":"package title","recipients":["my_shared_inbox_meta"],"metadata":{"Project Id":"456","Type":"Opt2","CheckThose":["Check1","Check2"],"Optional Date":"2021-01-13T15:02:00.000Z"}}' test_file.bin
+packages send --workspace=my_workspace_shared_inbox @json:'{"name":"package title","recipients":["my_shared_inbox_name"]}' test_file.bin
+packages send @json:'{"name":"package title","recipients":["my_email_external"]}' --new-user-option=@json:'{"package_contact":true}' test_file.bin
+packages send @json:'{"name":"package title","recipients":["my_email_internal"],"note":"my - note"}' test_file.bin
+packages send @json:'{"name":"package title"}' test_file.bin --url=my_public_link_send_aoc_user --password=my_public_link_send_use_pass
+packages send @json:'{"name":"package title"}' test_file.bin --url=my_public_link_send_shared_inbox
 packages shared_inboxes list
 packages shared_inboxes show %name:my_shared_inbox_name
 remind --username=my_user_email
@@ -6464,7 +6638,6 @@ access_key cluster ak2ibmcloud --secret=my_secret_here
 access_key create --cloud=aws --region=my_region @json:'{"id":"ak_aws","name":"my test key AWS","storage":{"type":"aws_s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
 access_key create --cloud=softlayer --region=my_region @json:'{"id":"ak2ibmcloud","secret":"my_secret_here","name":"my test key","storage":{"type":"ibm-s3","bucket":"my_bucket","credentials":{"access_key_id":"my_access_key","secret_access_key":"my_secret_key"},"path":"/"}}'
 access_key delete ak2ibmcloud
-access_key delete ak_aws
 access_key entitlement ak2ibmcloud
 access_key list --fields=name,id
 access_key node ak2ibmcloud browse / --secret=my_secret_here
@@ -6504,7 +6677,7 @@ ascli server --url=ssh://hsts.example.com:33001 --username=john --ssh-keys=~/.ss
 
 ```bash
 browse /
-browse / --password=@none: --ssh-options=@json:'{"number_of_password_prompts":0}' --ssh-keys=$aspera_key_path
+browse / --password=@none: --ssh-options=@json:'{"number_of_password_prompts":0}' --ssh-keys=serv_key_path
 browse my_inside_folder/test_file.bin
 browse my_upload_folder/target_hot
 cp my_inside_folder/test_file.bin my_upload_folder/200KB.2
@@ -6521,18 +6694,19 @@ md5sum my_inside_folder/test_file.bin
 mkdir my_inside_folder --logger=stdout
 mkdir my_upload_folder/target_hot
 mv my_upload_folder/200KB.2 my_upload_folder/to.delete
+sync admin file_info /data/local_sync
+sync admin overview /data/local_sync
 sync admin status /data/local_sync
+sync pull my_inside_folder --to-folder=/data/local_sync @json:'{"name":"serv_sync_pull_conf","reset":true,"transport":{"target_rate":my_bps}}'
 sync pull my_inside_folder --to-folder=/data/local_sync @json:'{"name":"serv_sync_pull_conf"}'
-upload 'faux:///test1?100m' 'faux:///test2?100m' --to-folder=/Upload --ts=@json:'{"target_rate_kbps":1000000,"resume_policy":"none","precalculate_job_size":true}'
-upload 'faux:///test1?100m' 'faux:///test2?100m' --to-folder=/Upload --ts=@json:'{"target_rate_kbps":1000000,"resume_policy":"none","precalculate_job_size":true}' --transfer-info=@json:'{"quiet":false}' --progress=no
-upload 'test_file.bin' --to-folder=my_inside_folder --ts=@json:'{"multi_session":3,"multi_session_threshold":1,"resume_policy":"none","target_rate_kbps":100000}' --transfer-info=@json:'{"spawn_delay_sec":2.5,"multi_incr_udp":false}' --progress-bar=yes
 upload --sources=@ts --transfer-info=@json:'{"ascp_args":["--file-list","filelist.txt"]}' --to-folder=my_inside_folder
 upload --sources=@ts --transfer-info=@json:'{"ascp_args":["--file-pair-list","file_pair_list.txt"]}'
 upload --sources=@ts --ts=@json:'{"paths":[{"source":"test_file.bin","destination":"my_inside_folder/other_name_4"}]}' --transfer=transferd
-upload --src-type=pair 'test_file.bin' my_inside_folder/other_name_2 --notify-to=my_email_external --transfer-info=@json:'{"ascp_args":["-l","100m"]}'
 upload --src-type=pair --sources=@json:'["test_file.bin","my_inside_folder/other_name_3"]' --transfer-info.quiet=false --progress=no
+upload --src-type=pair test_file.bin my_inside_folder/other_name_2 --notify-to=my_email_external --transfer-info=@json:'{"ascp_args":["-l","100m"]}'
 upload --src-type=pair test_file.bin my_upload_folder/other_name_5 --ts=@json:'{"cipher":"aes-192-gcm","content_protection":"encrypt","content_protection_password":"my_secret_here","cookie":"biscuit","create_dir":true,"delete_before_transfer":false,"delete_source":false,"exclude_newer_than":"-1","exclude_older_than":"-10000","fasp_port":33001,"http_fallback":false,"multi_session":0,"overwrite":"diff+older","precalculate_job_size":true,"preserve_access_time":true,"preserve_creation_time":true,"rate_policy":"fair","resume_policy":"sparse_csum","symlink_policy":"follow"}'
 upload --to-folder=my_upload_folder/target_hot --lock-port=12345 --transfer-info=@json:'{"ascp_args":["--remove-after-transfer","--remove-empty-directories","--exclude-newer-than=-8","--src-base","source_hot"]}' source_hot
+upload test_file.bin --to-folder=my_inside_folder --ts=@json:'{"multi_session":3,"multi_session_threshold":1,"resume_policy":"none","target_rate_kbps":100000}' --transfer-info=@json:'{"spawn_delay_sec":2.5,"multi_incr_udp":false}' --progress-bar=yes
 ```
 
 ### Authentication on Server with SSH session
@@ -7076,7 +7250,7 @@ ascli node -N --url=https://... --password="Bearer $(cat bearer.txt)" --root-id=
 > Add `ascli node` in front of the following commands:
 
 ```bash
---url=https://tst.example.com/path --password="Bearer bearer_666" --root-id=root_id access_key do self br /
+--url=https://tst.example.com/path --password='Bearer node_bearer_token' --root-id=bearer_root_id access_key do self browse /
 access_key create @json:'{"id":"my_username","secret":"my_password_here","storage":{"type":"local","path":"/"}}'
 access_key delete my_username
 access_key do my_ak_name browse /
@@ -7087,32 +7261,29 @@ access_key do my_ak_name find my_test_folder
 access_key do my_ak_name find my_test_folder @re:'\.jpg$'
 access_key do my_ak_name find my_test_folder @ruby:'->(f){f["name"].end_with?(".jpg")}'
 access_key do my_ak_name mkdir /tst_nd_ak
-access_key do my_ak_name mkfile /mkfile.txt "hello world"
+access_key do my_ak_name mkfile /mkfile.txt 'hello world'
 access_key do my_ak_name mklink /mklink.txt --query=@json:'{"target":"/mkfile.txt","target_node_id":"123"}'
 access_key do my_ak_name node_info /
 access_key do my_ak_name rename /tst_nd_ak test_nd_ak2
 access_key do my_ak_name show %id:1
-access_key do my_ak_name show /test_nd_ak3
 access_key do my_ak_name upload 'faux:///test_nd_ak3?100k' --default-ports=no
-access_key do self permission %id:root_id create @json:'{"access_type":"user","access_id":"666"}'
+access_key do self permission %id:bearer_root_id create @json:'{"access_type":"user","access_id":"666"}'
 access_key do self permission / delete 1
 access_key do self permission / show 1
-access_key do self show / --fields=id --output=root_id
 access_key list
 access_key set_bearer_key self @file:my_private_key
 access_key show %id:self
 api_details
 asperabrowser
-async bandwidth %name:SYNC_NAME
-async counters %name:SYNC_NAME
+async bandwidth %name:my_sync_session_name
+async counters %name:my_sync_session_name
 async delete ALL
-async files %name:SYNC_NAME
-async files %name:SYNC_NAME --once-only=yes
+async files %name:my_sync_session_name
+async files %name:my_sync_session_name --once-only=yes
 async list
-async show %name:SYNC_NAME
+async show %name:my_sync_session_name
 async show ALL
 basic_token
-bearer_token @file:my_private_key @json:'{"user_id":"666"}' --output=bearer_666
 browse / --log-level=trace2
 cat my_upload_folder/test_file.bin
 central file list
@@ -7125,7 +7296,7 @@ health
 info --fpac='function FindProxyForURL(url,host){return "DIRECT"}'
 license
 mkdir my_upload_folder/a_folder
-mkfile my_upload_folder/a_file1 "hello world"
+mkfile my_upload_folder/a_file1 'hello world'
 mklink my_upload_folder/a_folder my_upload_folder/tdlink
 rename my_upload_folder a_file1 a_file
 search / --query=@json:'{"sort":"mtime"}'
@@ -7134,6 +7305,7 @@ service delete service1
 service list
 slash
 space /
+spec
 ssync bandwidth %name:my_node_sync
 ssync counters %name:my_node_sync
 ssync create @json:'{"configuration":{"name":"my_node_sync","local":{"path":"my_local_path_real"},"remote":{"host":"my_host","port":my_port,"user":"my_username","pass":"my_password_here","path":"my_remote_path"}}}'
@@ -7147,21 +7319,20 @@ ssync stop %name:my_node_sync
 ssync summary %name:my_node_sync
 stream list
 sync admin status /data/local_sync
-sync pull /aspera-test-dir-tiny --to-folder=/data/local_sync @json:'{"name":"SYNC_NAME","reset":true}'
+sync pull /aspera-test-dir-tiny --to-folder=/data/local_sync @json:'{"name":"my_sync_session_name","reset":true}'
 sync pull /aspera-test-dir-tiny --to-folder=/data/local_sync @json:'{"reset":true}'
 transfer bandwidth_average
 transfer cancel nd_xfer_id
-transfer list --once-only=yes
-transfer list --query=@json:'{"active_only":true,"count":1}' --fields=id --output=nd_xfer_id
 transfer list --query=@json:'{"active_only":true}'
 transfer list --query=@json:'{"reset":true}' --once-only=yes
 transfer modify nd_xfer_id @json:'{"target_rate_kbps":10000}'
 transfer sessions
 transfer show nd_xfer_id
 transport
+upload 'faux:///testfile1?1m' --to-folder=my_local_path
 upload --to-folder=my_upload_folder --sources=@ts --ts=@json:'{"paths":[{"source":"/aspera-test-dir-small/10MB.2"}],"precalculate_job_size":true}' --transfer=node --transfer-info=@json:'{"url":"https://node.example.com/path@","username":"my_username","password":"my_password_here"}'
 upload --username=my_ak_name --password=my_ak_secret test_file.bin
-upload test_file.bin --to-folder=my_upload_folder --ts=@json:'{"target_rate_cap_kbps":10000}'
+upload my_mxf my_docx --ts=@json:'{"target_rate_kbps":1000000,"resume_policy":"none"}'
 watch_folder list
 ```
 
@@ -7415,8 +7586,8 @@ admin distribution_lists delete %name:test4
 admin distribution_lists list --query=@json:'{"type":"global"}'
 admin email_notifications list
 admin email_notifications show welcome_email
-admin event app --query=@json:'{"max":20}'
-admin event web
+admin event application --query=@ruby:'{"event_type[]"=>["login_success"],"created_at_start"=>(Time.now.utc-60).strftime("%Y-%m-%dT%H:%M:%S.%LZ")}'
+admin event webhook
 admin jobs list --query=@json:'{"job_type":"email","status":"failed"}' --fields=id,error_desc
 admin metadata_profiles list
 admin node browse %name:Local
@@ -7431,7 +7602,7 @@ admin saml_configs list
 admin shared_inboxes invite %name:my_shared_box_name johnny@example.com
 admin shared_inboxes list
 admin shared_inboxes list --query=@json:'{"all":true}'
-admin shared_inboxes members %name:my_shared_box_name create %name:john@example.com
+admin shared_inboxes members %name:my_shared_box_name create %name:john@example.com submit_only
 admin shared_inboxes members %name:my_shared_box_name delete %name:john@example.com
 admin shared_inboxes members %name:my_shared_box_name delete %name:johnny@example.com
 admin shared_inboxes members %name:my_shared_box_name list
@@ -7441,33 +7612,34 @@ admin smtp show
 admin smtp test my_email_external
 admin workgroups list
 bearer_token
-gateway --pid-file=pid_f5_fxgw @json:'{"url":"https://localhost:12346/aspera/faspex"}' &
+gateway @json:'{"url":"https://localhost:12346/aspera/faspex"}'
 health --url=https://faspex5.example.com/path
 invitation list
 invitations create @json:'{"email_address":"aspera.user1+u@gmail.com"}'
-packages browse f5_pack_id --query=@json:'{"recursive":true}'
-packages delete f5_pack_id
+packages browse f5_package_id --query=@json:'{"recursive":true}'
+packages delete f5_package_id
 packages list --box=ALL
 packages list --box=my_shared_box_name
 packages list --box=my_workgroup --group-type=workgroups
 packages list --box=outbox --fields=DEF,sender.email,recipients.0.recipient_type
 packages list --query=@json:'{"mailbox":"inbox","status":"completed"}'
-packages receive --box=my_shared_box_name package_box_id1 --to-folder=.
+packages receive --box=my_shared_box_name f5_pack_shboxc --to-folder=.
 packages receive --box=my_workgroup --group-type=workgroups workgroup_package_id1 --to-folder=.
 packages receive ALL --once-only=yes --to-folder=.
 packages receive INIT --once-only=yes
-packages receive f5_pack_id --to-folder=. --ts=@json:'{"content_protection_password":"my_secret_here"}'
-packages send --shared-folder=%name:my_shared_folder_name @json:'{"title":"test title","recipients":["my_email_internal"]}' my_shared_folder_file --fields=id --display=data --output=f5_pack_id
+packages receive f5_package_id --to-folder=. --ts=@json:'{"content_protection_password":"my_secret_here"}'
 packages send --url=my_public_link_send_f5_user @json:'{"title":"test title"}' test_file.bin
 packages send --url=my_public_link_send_shared_box @json:'{"title":"test title"}' test_file.bin
 packages send @json:'{"title":"test title","recipients":["my_shared_box_name"],"metadata":{"Options":"Opt1","TextInput":"example text"}}' test_file.bin
 packages send @json:'{"title":"test title","recipients":["my_workgroup"]}' test_file.bin
 packages send @json:'{"title":"test title","recipients":[{"name":"my_username"}]my_meta}' test_file.bin --ts=@json:'{"content_protection_password":"my_secret_here"}'
-packages show --box=my_shared_box_name package_box_id1
+packages send @json:'{"title":"test_webhook_ascli","recipients":["my_shared_box_name"]}' 'faux:///test1?1m'
+packages show --box=my_shared_box_name f5_pack_shboxc
 packages show --box=my_workgroup --group-type=workgroups workgroup_package_id1
-packages show f5_pack_id
-packages status f5_pack_id
-postprocessing --pid-file=pid_f5_postproc @json:'{"url":"https://localhost:8553/asclihook","script_folder":"","cert":"localhost.p12","key":"changeit"}' &
+packages show f5_package_id
+packages status f5_p3a @list:,failed,completed
+packages status f5_package_id
+postprocessing @json:'{"url":"https://localhost:8553/asclihook","script_folder":"$(TST)","cert":"$(TMP / "localhost.p12")","key":"changeit"}'
 shared browse %name:my_src
 shared list
 shared_folders browse %name:my_shared_folder_name
@@ -7560,6 +7732,14 @@ If the lookup needs to be only on certain types, you can specify the field: `rec
 {"title":"test title","recipient_types":"user","recipients":["user1@example.com","user2@example.com"]}
 ```
 
+To enable content protection (CSEAR), set parameter `ear_enabled` to `true` in the package creation payload (refer to Faspex package creation API).
+
+The following error is returned by Faspex, if CSEAR was not specified in the package creation and if it is configured as mandatory on the server:
+
+```text
+the provided encryption value (no) does not match the expected server side encryption value (yes)
+```
+
 ### Faspex 5: Send a package with metadata
 
 It's the same as sending a package, but with an extra field `metadata` in the package info.
@@ -8061,27 +8241,23 @@ ascli faspex packages recv ALL --once-only=yes --lock-port=12345
 
 ```bash
 address_book
-dropbox list --recipient="*my_dbx"
+dropbox list --recipient='*my_dbx'
 health
 login_methods
 me
-package list --box=sent --query.max=1 --fields=package_id --display=data --format=csv --output=f4_prs2
-package list --query.max=1 --fields=package_id --display=data --format=csv --output=f4_prs1
 package list --query.max=5
-package list --recipient="*my_dbx" --format=csv --fields=package_id --query.max=1 --output=f4_db_id1
-package list --recipient="*my_wkg" --format=csv --fields=package_id --query.max=1 --output=f4_db_id2
-package receive --to-folder=. --link=https://app.example.com/recv_from_user_path
 package receive ALL --once-only=yes --to-folder=. --query=@json:'{"max":10}'
-package receive f4_db_id1 --recipient="*my_dbx" --to-folder=.
-package receive f4_db_id2 --recipient="*my_wkg" --to-folder=.
-package receive f4_pri1 --to-folder=.
-package receive f4_prs2 --to-folder=. --box=sent
-package send --delivery-info=@json:'{"title":"$(notdir test) PACKAGE_TITLE_BASE","recipients":["*my_dbx"]}' test_file.bin
-package send --delivery-info=@json:'{"title":"$(notdir test) PACKAGE_TITLE_BASE","recipients":["*my_wkg"]}' test_file.bin
-package send --delivery-info=@json:'{"title":"$(notdir test) PACKAGE_TITLE_BASE","recipients":["my_email_internal","my_username"]}' test_file.bin
-package send --delivery-info=@json:'{"title":"$(notdir test) PACKAGE_TITLE_BASE","recipients":["my_email_internal"]}' --remote-source=%name:my_src sample_source.txt
-package send --link=https://app.example.com/send_to_dropbox_path --delivery-info=@json:'{"title":"$(notdir test) PACKAGE_TITLE_BASE"}' test_file.bin
-package send --link=https://app.example.com/send_to_user_path --delivery-info=@json:'{"title":"$(notdir test) PACKAGE_TITLE_BASE"}' test_file.bin
+package receive f4_db1c --recipient='*my_dbx' --to-folder=.
+package receive f4_db1g --recipient='*my_wkg' --to-folder=.
+package receive f4_pria --to-folder=.
+package receive f4_prs --to-folder=.
+package receive f4_prsc --to-folder=. --box=sent
+package send --delivery-info=@json:'{"title":"package title","recipients":["my_email_internal","my_username"]}' test_file.bin
+package send --delivery-info=@json:'{"title":"package title","recipients":["my_email_internal"]}' --remote-source=%name:my_src sample_source.txt
+package send --delivery-info=@json:'{"title":"package title","recipients":[*my_dbx]}' test_file.bin
+package send --delivery-info=@json:'{"title":"package title","recipients":[*my_wkg]}' test_file.bin
+package send --link=https://app.example.com/send_to_dropbox_path --delivery-info=@json:'{"title":"package title"}' test_file.bin
+package send --link=https://app.example.com/send_to_user_path --delivery-info=@json:'{"title":"package title"}' test_file.bin
 source info %name:my_src --storage=@preset:faspex4_storage
 source list
 source node %name:my_src br / --storage=@preset:faspex4_storage
@@ -8138,12 +8314,12 @@ ascli shares admin share user_permissions $share_id create @json:'{"user_id":'$u
 admin group all list
 admin node list
 admin share list --fields=DEF,-status,status_message
-admin share user_permissions 1 list
-admin user all app_authorizations 1 modify @json:'{"app_login":true}'
-admin user all app_authorizations 1 show
+admin share user_permissions %name:my_share list
+admin user all app_authorizations %username:my_username modify @json:'{"app_login":true}'
+admin user all app_authorizations %username:my_username show
 admin user all list
-admin user all share_permissions 1 list
-admin user all share_permissions 1 show 1
+admin user all share_permissions %username:my_username list
+admin user all share_permissions %username:my_username show %name:my_share
 admin user ldap add the_name
 admin user local list
 admin user saml import @json:'{"id":"the_id","name_id":"the_name"}'
@@ -8155,10 +8331,10 @@ files download --to-folder=. my_share_folder/test_file.bin my_share_folder/test_
 files mkdir my_share_folder/new_folder
 files sync push /data/local_sync --to-folder=my_share_folder/synctst
 files sync push /data/local_sync --to-folder=my_share_folder/synctst @json:'{"reset":true}'
-files upload --to-folder=my_share_folder 'faux:///testfile?1m' --transfer=httpgw --transfer-info=@json:'{"url":"https://tst.example.com/path@","synchronous":true,"api_version":"v1","upload_chunk_size":100000}'
-files upload --to-folder=my_share_folder sendfolder --transfer=httpgw --transfer-info=@json:'{"url":"https://tst.example.com/path@","synchronous":true,"api_version":"v1","upload_chunk_size":100000}'
+files upload 'faux:///testfile?1m' --to-folder=my_share_folder --transfer=httpgw --transfer-info=@json:'{"url":"https://tst.example.com/path@","synchronous":true,"api_version":"v1","upload_chunk_size":100000}'
 files upload --to-folder=my_share_folder test_file.bin
 files upload --to-folder=my_share_folder test_file.bin --transfer=httpgw --transfer-info=@json:'{"url":"https://tst.example.com/path@"}'
+files upload sendfolder --to-folder=my_share_folder --transfer=httpgw --transfer-info=@json:'{"url":"https://tst.example.com/path@","synchronous":true,"api_version":"v1","upload_chunk_size":100000}'
 health
 ```
 
@@ -8186,7 +8362,7 @@ transfer current list --query.filter='(transfer_name contain aoc)'
 transfer current list --query=@json:'{"filter1":"transfer_name","comp1":"contain","val1":"aoc"}'
 transfer current show console_xfer_id
 transfer smart list
-transfer smart sub my_smart_id @json:'{"source":{"paths":["my_smart_file"]},"source_type":"user_selected"}'
+transfer smart sub my_smart_id @: source.paths.0=my_smart_file source_type=user_selected
 ```
 
 ## Plugin: `orchestrator`:IBM Aspera Orchestrator
@@ -8213,17 +8389,22 @@ workflow status my_workflow_id
 
 ## Plugin: `cos`: IBM Cloud Object Storage
 
-The IBM Cloud Object Storage provides the possibility to execute transfers using FASP.
-It uses the same transfer service as Aspera on Cloud, called Aspera Transfer Service (ATS).
-Available ATS regions: [https://status.aspera.io](https://status.aspera.io)
+IBM Cloud Object Storage supports high-speed transfers using the FASP protocol.
+These transfers leverage the same service used by Aspera on Cloud, called the Aspera Transfer Service (ATS).
+You can check the list of available ATS regions here: <https://status.aspera.io>.
+There are two ways to provide credentials:
+
+- Using existing credentials
 
-There are two possibilities to provide credentials.
-If you already have the endpoint, API key and Resource Instance ID (CRN), use the first method.
-If you don't have credentials but have access to the IBM Cloud console, then use the second method.
+  If you already have the endpoint, API key, and Resource Instance ID (CRN), use this method.
+
+- Using IBM Cloud Console access
+
+  If you do not have credentials but have access to the IBM Cloud Console, use this alternative method.
 
 ### Using endpoint, API key and Resource Instance ID (CRN)
 
-If you have those parameters already, then following options shall be provided:
+If you already have these parameters, provide the following options to `ascli`:
 
 | Option     | Description                                       |
 |------------|---------------------------------------------------|
@@ -8232,20 +8413,21 @@ If you have those parameters already, then following options shall be provided:
 | `apikey`   | API Key                                           |
 | `crn`      | Resource instance ID                              |
 
-For example, let us create a default configuration:
+Example: Create a Default Configuration
 
 ```shell
 ascli config preset update mycos --bucket=mybucket --endpoint=https://s3.us-east.cloud-object-storage.appdomain.cloud --apikey=abcdefgh --crn=crn:v1:bluemix:public:iam-identity::a/xxxxxxx
 ascli config preset set default cos mycos
 ```
 
-Then, jump to the [transfer example](#operations-transfers).
+Once configured, proceed to the [transfer example](#operations-transfers).
 
 ### Using service credential file
 
-If you are the COS administrator and don't have yet the credential:
-Service credentials are directly created using the IBM cloud Console (web UI).
-Navigate to:
+If you are the COS administrator and do not yet have credentials,
+you can create them directly from the IBM Cloud Console (Web UI):
+
+Steps:
 
 - &rarr; Navigation Menu
 - &rarr; [Resource List](https://cloud.ibm.com/resources)
@@ -8255,7 +8437,7 @@ Navigate to:
 - &rarr; New credentials (Leave default role: Writer, no special options)
 - &rarr; Copy to clipboard
 
-Then save the copied value to a file, e.g. : `$HOME/cos_service_creds.json`
+Save the copied JSON value to a file, for example: `$HOME/cos_service_creds.json`
 
 or using the IBM Cloud CLI:
 
@@ -8264,9 +8446,10 @@ ibmcloud resource service-keys
 ibmcloud resource service-key _service_key_name_here_ --output JSON|jq '.[0].credentials'>$HOME/service_creds.json
 ```
 
-(if you don't have `jq` installed, extract the structure as follows)
+> [!NOTE]
+> If `jq` is not installed, you can manually extract the credentials section from the JSON output.
 
-It consists in the following structure:
+The service credential file consists of the following structure:
 
 ```json
 {
@@ -8284,33 +8467,32 @@ It consists in the following structure:
 }
 ```
 
-The field `resource_instance_id` is for option `crn`
+The field mappings are as follows:
 
-The field `apikey` is for option `apikey`
+- `resource_instance_id` &rarr; option `crn`
+- `apikey` &rarr; option `apikey`
 
 > [!NOTE]
-> Endpoints for regions can be found by querying the `endpoints` URL from file or from the IBM Cloud Console.
+> Endpoints for regions can be found by querying the `endpoints` URL in the JSON file or from the IBM Cloud Console.
 
 The required options for this method are:
 
-| Option                | Description |
+| Option                | Description                                    |
 |-----------------------|------------------------------------------------|
-| `bucket`              | Bucket name |
-| `region`              | Bucket region<br/>e.g. `eu-de` |
+| `bucket`              | Bucket name                                    |
+| `region`              | Bucket region<br/>e.g. `eu-de`               |
 | `service_credentials` | JSON information saved from IBM Cloud console. |
 
-For example, let us create a default configuration:
+Example: Create a Default Configuration
 
 ```shell
-ascli config preset update mycos --bucket=laurent --service-credentials=@val:@json:@file:~/service_creds.json --region=us-south
+ascli config preset update mycos --bucket=mybucket --service-credentials=@val:@json:@file:~/service_creds.json --region=us-south
 ascli config preset set default cos mycos
 ```
 
 ### Operations, transfers
 
-Let's assume you created a default configuration from one of the two previous steps (else specify the access options on command lines).
-
-A subset of `node` plugin operations are supported, basically Node API:
+Once you have created a default configuration using one of the previous methods (otherwise, specify the access options directly on the command line), you can perform a subset of `node` plugin operations, which correspond to the Node API.
 
 ```shell
 ascli cos node info
@@ -8318,7 +8500,8 @@ ascli cos node upload 'faux:///sample1G?1g'
 ```
 
 > [!NOTE]
-> A dummy file `sample1G` of size 2 GB is generated using the `faux` PVCL scheme (see previous section and `man ascp`), but you can, of course, send a real file by specifying a real file path instead.
+> The file `sample1G` is a dummy file of size 2 GB, generated using the `faux` PVCL scheme (see previous section and `man ascp`).
+> To upload a real file, simply replace the `faux:///...` URI with the actual file path.
 
 ### Tested commands for `cos`
 
@@ -8347,6 +8530,10 @@ info
 
 ## Plugin: `faspio`: Faspio Gateway
 
+IBM Aspera faspio Gateway is a high-performance proxy that bridges traditional TCP/UDP applications with the Aspera FASP protocol, enabling secure, ultra-fast transfers over any network, even with high latency or packet loss.
+It integrates seamlessly into existing workflows and supports use cases such as server-to-server transfers, database replication, and messaging systems.
+Using `ascli`, you can remotely create and manage bridges on faspio Gateway, simplifying configuration and automation.
+
 ### Tested commands for `faspio`
 
 > [!NOTE]
@@ -8354,7 +8541,7 @@ info
 
 ```bash
 bridges create @json:'{"name":"test1","local":{"protocol":"tcp","tls_enabled":false,"port":"3000","bind_address":"127.0.0.1"},"forward":{"protocol":"fasp","tls_enabled":false,"port":"3994","bind_address":"127.0.0.1","host":["10.0.0.1"]}}'
-bridges delete --bulk=yes @json:@stdin:
+bridges delete --bulk=yes @json:faspio_bclean_list
 bridges list
 health
 ```
@@ -8370,20 +8557,34 @@ Retrieve information on subscription.
 
 ```bash
 entitlement
-health -N
+health
 ```
 
 ## Plugin: `preview`: Preview generator for AoC
 
-The `preview` generates thumbnails (office, images, video) and video previews on storage for use primarily in the Aspera on Cloud application.
-It uses the **Node API** of Aspera HSTS and requires use of Access Keys and its **storage root**.
-Several options can be used to tune several aspects:
+The `preview` plugin is responsible for generating thumbnails (Office documents, images, videos) and video previews on storage, primarily for use within the Aspera on Cloud (AoC) application.
+This plugin leverages the **Node API** of Aspera HSTS and requires:
 
-- Methods for detection of new files needing generation
-- Methods for generation of video preview
-- Parameters for video handling
+- An Access Key
+- The associated **storage root**
 
-See also <https://github.com/IBM/aspera-on-cloud-file-previews>
+### Key Features and Options
+
+You can configure several aspects of the preview generation process:
+
+- File Detection Methods
+
+  Define how new files requiring previews are identified.
+
+- Video Preview Generation Methods
+  
+  Choose the approach for creating video previews (e.g., transcoding options).
+
+- Video Handling Parameters
+  
+  Fine-tune video processing, such as resolution, bitrate, and format.
+
+Using `ascli` is an alternative to <https://github.com/IBM/aspera-on-cloud-file-previews>.
 
 ### Aspera Server configuration
 
@@ -8708,7 +8909,7 @@ If the preview generator does not have access to files on the file system (it is
 check --skip-types=office
 events --once-only=yes --skip-types=office --log-level=info
 scan --scan-id=1 --skip-types=office --log-level=info --file-access=remote --ts=@json:'{"target_rate_kbps":1000000}'
-scan --skip-types=office --log-level=info
+scan --skip-types=office --log-level=info --skip-folder=/special/folder
 show --base=test /etc/hosts
 show --base=test my_docx
 show --base=test my_mpg --video-png-conv=animated
@@ -8752,6 +8953,12 @@ Some `sync` parameters are filled by the related plugin using transfer spec para
 To start a sync session, use one of the three sync directions followed by a folder path (remote path for `pull`, local path otherwise).
 The path on the other side is specified using option: `to_folder`.
 
+The general syntax is:
+
+```shell
+ascli ... sync <direction> <path> [<sync_info>] [--to-folder=<path>]
+```
+
 | Direction<br/>(parameter) | Path<br/>(parameter)   | `to_folder`<br/>(option) |
 |-----------|--------|-------------|
 | `push`    | Local  | Remote      |
@@ -8762,6 +8969,11 @@ An optional positional `Hash` argument (`sync_info`) can be provided in either `
 
 A single session can be specified using either formats.
 
+If argument `<sync_info>` is not provided, then a default configuration is generated in the `conf` format as specified in the next sectin.
+
+If argument `<sync_info>` is provided, it defines the format to use.
+If parameter `sessions` or `instance` is present, then `args` is used, else `conf` is used.
+
 #### `sync_info`: `conf` format
 
 This is the **preferred** syntax.
@@ -8769,138 +8981,155 @@ It is the same payload as specified on the `async` option `--conf` or in Node AP
 
 Documentation on Async Node API can be found on [IBM Developer Portal](https://developer.ibm.com/apis/catalog?search=%22aspera%20sync%20api%22).
 
-Parameters `local.path` and `remote.path` are not allowed since they are provided on command line.
+The following parameters are automatically filled from mandatory arguments, and are not allowed:
+
+- `direction`
+- `local.path`
+- `remote.path`
+
+Parameter `name` is set to a default value if not provided in `sync_info`.
+Parameter `quiet` is set to `false` if not provided in `sync_info` and a terminal is detected.
+
+The documentation is available in the terminal with:
+
+```shell
+ascli config sync spec
+```
 
 | Field | Type | Description |
-| ---------------------------------------- | ------- | -------------------------------------------------------------------------------- |
+|------------------------------------------|---------|----------------------------------------------------------------------------------|
 | ascp_dir | string | Directory containing ascp executable to use. |
-| assume_no_mods | boolean | Assume that the directory structure has not been modified.<br/>(`--assume-no-mods={boolean}`) |
-| checksum | string | Use the specified checksum type. Default is none on cloud storage.<br/>Allowed values: `sha1`, `md5`, `sha1_sparse`, `md5_sparse`, `none` |
-| clean_excluded | boolean | Removes any existing entries in the snapshot database for excluded paths |
-| cookie | string | User-defined identification string. |
+| assume_no_mods | boolean | Assume that the directory structure has not been modified.<br/>(`--assume-no-mods`) |
+| checksum | string | Use the specified checksum type. Default is none on cloud storage.<br/>Allowed values: `sha1`, `md5`, `sha1_sparse`, `md5_sparse`, `none`<br/>(`--checksum={enum}`)(-k) |
+| clean_excluded | boolean | Removes any existing entries in the snapshot database for excluded paths<br/>(`--clean-excluded`) |
+| cookie | string | User-defined identification string.<br/>(`--cookie={string}`) |
 | cooloff_max_seconds | integer | Wait up to the specified time for a file to stop changing before skipping synchronization of the file. 0 for disabled<br/>(`--cooloff-max={integer}`) |
 | cooloff_seconds | integer | Delay the start of the transfer to confirm that the content is not changing. Value must be between 0 and 60<br/>(`--cooloff={integer}`) |
-| create_dir | boolean | Create the source directory, target directory, or both, if they do not exist. |
+| create_dir | boolean | Create the source directory, target directory, or both, if they do not exist.<br/>(`--create-dir`) |
 | db_cache_size | integer | Specify DB cache size. |
 | db_journal_off | boolean | Turn off DB journal. |
 | db_sync_on | boolean | Enable synchronous write in DB. |
-| dedup | string | Take the specified action when async detects duplicate files on the source.<br/>Allowed values: `copy`, `inode`, `hardlink`, `none` |
-| delete_before | boolean | Schedule deletes before transfers. |
-| delete_delay | boolean | Delay actual deletes until the end of the synchronization. |
-| direction | string | The direction of replication relative to the local.<br/>Allowed values: `bidi`, `pull`, `push` |
+| dedup | string | Take the specified action when async detects duplicate files on the source.<br/>Allowed values: `copy`, `inode`, `hardlink`, `none`<br/>(`--dedup={enum}`) |
+| delete_before | boolean | Schedule deletes before transfers.<br/>(`--delete-before`) |
+| delete_delay | boolean | Delay actual deletes until the end of the synchronization.<br/>(`--delete-delay`) |
+| direction | string | The direction of replication relative to the local.<br/>Allowed values: `bidi`, `pull`, `push`<br/>(`--direction={enum}`)(-K) |
 | exclude_dirs_older_than | object | Don't scan directories with a recursive modified time older than absolute or async start time - relative_seconds |
 | exclude_dirs_older_than.absolute | string | UTC timestamp. Empty value for disabled. |
 | exclude_dirs_older_than.relative_seconds | integer | Relative to async start time. `-1` for disabled. |
 | filters | array | The filters allow to further specify which files have to be excluded and included from the transfer list. Each filter is defined by a rule and a value. Order of filters matters |
-| ignore_delete | boolean | Do not copy removals to the peer. |
-| ignore_mode | boolean | Source files that have had their mode changed after the initial. transfer will not update the destination file mode. |
+| filters[].rule | string | The rule for the filter.<br/>Allowed values: `include`, `exclude`, `include_from`, `exclude_from` |
+| filters[].value | string | On include or exclude, the filter's pattern. On include_from or exclude_from, the path containing filter specifications |
+| ignore_delete | boolean | Do not copy removals to the peer.<br/>(`--ignore-delete`) |
+| ignore_mode | boolean | Source files that have had their mode changed after the initial. transfer will not update the destination file mode.<br/>(`--ignore-mode`) |
 | ignore_remote_host_sync_name | boolean | Do not check that the remote host being used for the current. transfer matches the host used when the local database was created |
 | local | object | &nbsp; |
 | local.pass | string | Authenticate the local async with the specified password. |
-| local.path | string | The directory to be synchronized on the local host.<br/>(`--local-dir={string}`) |
-| local_apply_docroot | boolean | Prepend the docroot to the directory on the local host.<br/>(`--apply-local-docroot={boolean}`) |
-| local_checksum_threads | integer | Maximum number of threads to do checksum on the local host. Value must be between 1 and 99. |
-| local_db_dir | string | Use the specified database directory on the local host. Default is `.private-asp` at the root level of the synchronized directory.<br/>(`--local-db-dir={string}`) |
-| local_db_store_dir | string | Store/Restore the database to/from the specified directory on the local host. The value can be an absolute path, an URI or - (use the local sync dir) |
-| local_force_stat | boolean | Forces the local async to retrieve file information even when no changes are detected by the scanner or monitor. |
-| local_fs_threads | integer | Maximum number of threads to do file system operations on the local host. Value must be between 1 and 99. |
-| local_keep_dir | string | Move deleted files into the specified directory on the local host. |
-| local_mount_signature | string | Verify that the file system is mounted by the existence of this file on the local host. |
-| local_move_cache_timeout_seconds | integer | Delay in seconds before aborting moving a file from local cache to final destination. `-1` for disabled. |
-| local_preserve_acls | string | Preserve access control lists on the local host.<br/>Allowed values: `native`, `metafile`, `none` |
-| local_preserve_xattrs | string | Preserve extended attributes on the local.<br/>Allowed values: `native`, `metafile`, `none` |
-| local_scan_interval_milliseconds | integer | Enable periodic scans on the local host during a continuous sync. `-1` for disabled |
-| local_scan_threads | integer | Number of directory scanning threads on the local host. Value must be between 1 and 99 |
+| local.path | string | The directory to be synchronized on the local host.<br/>(`--local-dir={string}`)(-d) |
+| local_apply_docroot | boolean | Prepend the docroot to the directory on the local host.<br/>(`--apply-local-docroot`) |
+| local_checksum_threads | integer | Maximum number of threads to do checksum on the local host. Value must be between 1 and 99.<br/>(`--local-checksum-threads={integer}`) |
+| local_db_dir | string | Use the specified database directory on the local host. Default is `.private-asp` at the root level of the synchronized directory.<br/>(`--local-db-dir={string}`)(-b) |
+| local_db_store_dir | string | Store/Restore the database to/from the specified directory on the local host. The value can be an absolute path, an URI or - (use the local sync dir)<br/>(`--local-db-store-dir={string}`) |
+| local_force_stat | boolean | Forces the local async to retrieve file information even when no changes are detected by the scanner or monitor.<br/>(`--local-force-stat`) |
+| local_fs_threads | integer | Maximum number of threads to do file system operations on the local host. Value must be between 1 and 99.<br/>(`--local-fs-threads={integer}`) |
+| local_keep_dir | string | Move deleted files into the specified directory on the local host.<br/>(`--keep-dir-local={string}`) |
+| local_mount_signature | string | Verify that the file system is mounted by the existence of this file on the local host.<br/>(`--local-mount-signature={string}`) |
+| local_move_cache_timeout_seconds | integer | Delay in seconds before aborting moving a file from local cache to final destination. `-1` for disabled.<br/>(`--local-move-cache-timeout={integer}`) |
+| local_preserve_acls | string | Preserve access control lists on the local host.<br/>Allowed values: `native`, `metafile`, `none`<br/>(`--preserve-acls={enum}`) |
+| local_preserve_xattrs | string | Preserve extended attributes on the local.<br/>Allowed values: `native`, `metafile`, `none`<br/>(`--preserve-xattrs={enum}`) |
+| local_scan_interval_milliseconds | integer | Enable periodic scans on the local host during a continuous sync. `-1` for disabled<br/>(`--scan-interval={integer}`) |
+| local_scan_threads | integer | Number of directory scanning threads on the local host. Value must be between 1 and 99<br/>(`--scan-threads={integer}`) |
 | local_stat_cache_size | integer | Set stat cache size on the local host. 0 for disabled. |
 | log | object | &nbsp; |
-| log.level | &nbsp; | Use the specified log level.<br/>Allowed values: `log`, `dbg1`, `dbg2` |
-| log.local_dir | string | Use the specified logging directory on the local host.<br/>(`--alt-logdir={string}`) |
-| log.remote_dir | string | Use the specified logging directory on the remote host. |
+| log.level | string | Use the specified log level.<br/>Allowed values: `log`, `dbg1`, `dbg2`<br/>(special:`-D`) |
+| log.local_dir | string | Use the specified logging directory on the local host.<br/>(`--alt-logdir={string}`)(-L) |
+| log.remote_dir | string | Use the specified logging directory on the remote host.<br/>(`--remote-logdir={string}`)(-R) |
 | manifest_path | string | A directory path where ascp will create manifest TEXT files (passed to ascp as --file-manifest-path) |
 | mirror | boolean | Force the pulling side to be exactly like the pushing side, removing files on the destination that don't exist on the source and resending source files that don't have an exact match on the destination. Cannot be used in bi-directional mode.<br/>(`--mirror`) |
-| mode | string | Specify whether async runs continuously or not. In one_time mode, async stops after the first full synchronization.<br/>Allowed values: `one_time`, `continuous`<br/>(special:`--continuous={enum}`) |
+| mode | string | Specify whether async runs continuously or not. In `one_time` mode, async stops after the first full synchronization. `continuous` supported only if the source is Windows or Linux.<br/>Allowed values: `one_time`, `continuous`<br/>(special:`--continuous`)(-C) |
 | monitor_buffer_size | integer | Bytes to allocate for the change monitor buffer. Applies to any Windows machine on either side. `-1` to use the computed value. |
-| name | string | Name of the synchronization pair.<br/>(`--name={string}`) |
-| no_log | string | Suppress log messages for ITEM. The only currently supported ITEM is 'stats', which suppresses both STATS and PROG log messages. |
-| no_preserve_root_attrs | boolean | Disable the preservation of attributes on the Sync root. |
-| no_scan | boolean | Skip initial scanning. |
+| name | string | Name of the synchronization pair.<br/>(`--name={string}`)(-N) |
+| no_log | string | Suppress log messages for ITEM. The only currently supported ITEM is 'stats', which suppresses both STATS and PROG log messages.<br/>(`--no-log={string}`) |
+| no_preserve_root_attrs | boolean | Disable the preservation of attributes on the Sync root.<br/>(`--no-preserve-root-attrs`) |
+| no_scan | boolean | Skip initial scanning.<br/>(`--no-scan`) |
 | notifications_sharing_retry_max | integer | Retry processing filesystem notifications up to the specified maximum number after a sharing violation. |
-| overwrite | string | Overwrite files according to the specified policy. Default is determined by the direction: conflict for bidi, otherwise always.<br/>Allowed values: `always`, `older`, `conflict` |
-| pending_max | integer | Allow the maximum number of files that are pending transfer to be no more than the specified number. |
-| preserve_access_time | boolean | Preserve file access time from the source to the destination. |
-| preserve_creation_time | boolean | Preserve file creation time from the source to the destination. |
-| preserve_gid | boolean | Preserve the file owner's GID. |
-| preserve_modification_time | boolean | Preserve file modification time from the source to the destination. |
-| preserve_object_lock_legal_hold | boolean | Preserve object lock legal hold status from the source to the destination. |
-| preserve_object_lock_retention | boolean | Preserve object lock retention from the source to the destination. |
-| preserve_object_metadata | boolean | Preserve object metadata from the source to the destination. |
-| preserve_uid | boolean | Preserve the file owner's UID. |
-| quiet | boolean | Disable progress display. |
+| overwrite | string | Overwrite files according to the specified policy. Default is determined by the direction: `conflict` for `bidi`, otherwise `always`.<br/>Allowed values: `always`, `older`, `conflict`<br/>(`--overwrite={enum}`)(-o) |
+| pending_max | integer | Allow the maximum number of files that are pending transfer to be no more than the specified number.<br/>(`--pending-max={integer}`) |
+| preserve_access_time | boolean | Preserve file access time from the source to the destination.<br/>(`--preserve-access-time`) |
+| preserve_creation_time | boolean | Preserve file creation time from the source to the destination.<br/>(`--preserve-creation-time`) |
+| preserve_gid | boolean | Preserve the file owner's GID.<br/>(`--preserve-gid`)(-j) |
+| preserve_modification_time | boolean | Preserve file modification time from the source to the destination.<br/>(`--preserve-modification-time`) |
+| preserve_object_lock_legal_hold | boolean | Preserve object lock legal hold status from the source to the destination.<br/>(`--preserve-object-lock-legal-hold`) |
+| preserve_object_lock_retention | boolean | Preserve object lock retention from the source to the destination.<br/>(`--preserve-object-lock-retention`) |
+| preserve_object_metadata | boolean | Preserve object metadata from the source to the destination.<br/>(`--preserve-object-metadata`) |
+| preserve_uid | boolean | Preserve the file owner's UID.<br/>(`--preserve-uid`)(-u) |
+| quiet | boolean | Disable progress display.<br/>(`--quiet`)(-q) |
 | remote | object | &nbsp; |
-| remote.connect_mode | &nbsp; | Define how to connect to the remote.<br/>Allowed values: `ssh`, `ws` |
+| remote.connect_mode | string | Define how to connect to the remote.<br/>Allowed values: `ssh`, `ws`<br/>(special:`--ws-connect`) |
 | remote.fingerprint | string | Check it against server SSH host key fingerprint. |
-| remote.host | string | Use the specified host name or address of the remote host. |
-| remote.pass | string | Authenticate the transfer with the specified password. |
-| remote.path | string | Synchronize the specified directory on the remote host. |
-| remote.port | integer | Use the specified TCP port for SSH. Used when connect_mode is `ssh` |
-| remote.private_key_paths | array | Authenticate with the specified SSH private key file. |
-| remote.proxy | object | Specify the address of the Aspera high-speed proxy server. |
+| remote.host | string | Use the specified host name or address of the remote host.<br/>(`--host={string}`) |
+| remote.pass | string | Authenticate the transfer with the specified password.<br/>(`--pass={string}`)(-w) |
+| remote.path | string | Synchronize the specified directory on the remote host.<br/>(`--remote-dir={string}`)(-r) |
+| remote.port | integer | Use the specified TCP port for SSH. Used when connect_mode is `ssh`<br/>(`--tcp-port={integer}`)(-P) |
+| remote.private_key_paths | array | Authenticate with the specified SSH private key file.<br/>(`--private-key-path={array}`)(-i) |
+| remote.proxy | object | Specify the address of the Aspera high-speed proxy server.<br/>(special:`--proxy={object}`) |
 | remote.proxy.host | string | Use the specified host name or address of the proxy. |
 | remote.proxy.pass | string | Authenticate to the proxy with the specified password. |
 | remote.proxy.port | integer | Use the specified port, default is 9091 for dnat, 9092. for dnats |
-| remote.proxy.protocol | &nbsp; | The protocol to be used.<br/>Allowed values: `none`, `dnat`, `dnats` |
+| remote.proxy.protocol | string | The protocol to be used.<br/>Allowed values: `none`, `dnat`, `dnats` |
 | remote.proxy.user | string | Authenticate to the proxy with the specified username. |
 | remote.token | string | Token string passed to server's authentication service. |
 | remote.token_node_user | string | Node API user identity associated with the token. Required for node user bearer tokens |
-| remote.user | string | Authenticate the transfer with the specified username. |
+| remote.user | string | Authenticate the transfer with the specified username.<br/>(`--user={string}`) |
 | remote.ws_port | integer | Use the specified port for Websocket. Used when connect_mode is `ws`. |
-| remote_checksum_threads | integer | Maximum number of threads to do checksum on the remote host. Value must be between 1 and 99 |
-| remote_db_dir | string | Use the specified database directory on the remote host. Default is `.private-asp` at the root level of the synchronized directory. |
-| remote_db_store_dir | string | Store/Restore the database to/from the specified directory on the remote host. The value can be an absolute path, an URI or - (use the remote sync dir). |
-| remote_force_stat | boolean | Forces the remote async to retrieve file information even when no changes are detected by the scanner or monitor. |
-| remote_fs_threads | integer | Maximum number of threads to do file system operations on the remote host. Value must be between 1 and 99. |
-| remote_keep_dir | string | Move deleted files into the specified directory on the remote host. |
-| remote_mount_signature | string | Verify that the file system is mounted by the existence of this file on the remote host. |
-| remote_move_cache_timeout_seconds | integer | Delay in seconds before aborting moving a file from remote cache to final destination. `-1` for disabled. |
-| remote_preserve_acls | string | Preserve access control lists on the remote host. If not specified, the default behavior is to use the same storage mode as specified by `preserve_acls`.<br/>Allowed values: `native`, `metafile`, `none` |
-| remote_preserve_xattrs | string | Preserve extended attributes on the remote host. If not specified, the default behavior is to use the same storage mode as specified by `preserve_xattrs`.<br/>Allowed values: `native`, `metafile`, `none` |
-| remote_scan_interval_milliseconds | integer | Enable periodic scans on the remote host. `-1` for disabled. |
-| remote_scan_threads | integer | Number of directory scanning threads on the remote host. Value must be between 1 and 99. |
+| remote_checksum_threads | integer | Maximum number of threads to do checksum on the remote host. Value must be between 1 and 99<br/>(`--remote-checksum-threads={integer}`) |
+| remote_db_dir | string | Use the specified database directory on the remote host. Default is `.private-asp` at the root level of the synchronized directory.<br/>(`--remote-db-dir={string}`)(-B) |
+| remote_db_store_dir | string | Store/Restore the database to/from the specified directory on the remote host. The value can be an absolute path, an URI or - (use the remote sync dir).<br/>(`--remote-db-store-dir={string}`) |
+| remote_force_stat | boolean | Forces the remote async to retrieve file information even when no changes are detected by the scanner or monitor.<br/>(`--remote-force-stat`) |
+| remote_fs_threads | integer | Maximum number of threads to do file system operations on the remote host. Value must be between 1 and 99.<br/>(`--remote-fs-threads={integer}`) |
+| remote_keep_dir | string | Move deleted files into the specified directory on the remote host.<br/>(`--keep-dir-remote={string}`) |
+| remote_mount_signature | string | Verify that the file system is mounted by the existence of this file on the remote host.<br/>(`--remote-mount-signature={string}`) |
+| remote_move_cache_timeout_seconds | integer | Delay in seconds before aborting moving a file from remote cache to final destination. `-1` for disabled.<br/>(`--remote-move-cache-timeout={integer}`) |
+| remote_preserve_acls | string | Preserve access control lists on the remote host. If not specified, the default behavior is to use the same storage mode as specified by `preserve_acls`.<br/>Allowed values: `native`, `metafile`, `none`<br/>(`--remote-preserve-acls={enum}`) |
+| remote_preserve_xattrs | string | Preserve extended attributes on the remote host. If not specified, the default behavior is to use the same storage mode as specified by `preserve_xattrs`.<br/>Allowed values: `native`, `metafile`, `none`<br/>(`--remote-preserve-xattrs={enum}`) |
+| remote_scan_interval_milliseconds | integer | Enable periodic scans on the remote host. `-1` for disabled.<br/>(special:`--remote-scan-interval={integer}`) |
+| remote_scan_threads | integer | Number of directory scanning threads on the remote host. Value must be between 1 and 99.<br/>(`--remote-scan-threads={integer}`) |
 | remote_stat_cache_size | integer | Set stat cache size on the remote host. 0 for disabled. |
-| remove_after_transfer | boolean | Remove source files after they are successfully synchronized. |
-| reset | boolean | Clear the snapshot database and rescan the synchronized directories and files to create a fresh snapshot |
+| remove_after_transfer | boolean | Remove source files after they are successfully synchronized.<br/>(`--remove-after-transfer`) |
+| reset | boolean | Clear the snapshot database and rescan the synchronized directories and files to create a fresh snapshot<br/>(`--reset`)(-x) |
 | resume | object | Partial transfers may exist if communication disruptions caused the underlying ascp processes to terminate early. Note that transfer resumption can only happen if the `reset` option is disabled. If an async session starts with `reset` enabled and resume enabled, transfers interrupted during that session will be resumeable, but only if async is then restarted with 'reset' disabled. |
 | resume.enabled | boolean | Enable the possibility of resuming individual file transfers between async sessions. |
-| resume.max_age | integer | Sets the age limit in days for temporary files that will be preserved on cleanup (usually at async's start and stop) for potential transfer resume. Temp files older than the given value will be removed regardless of whether they might be resumeable. |
-| resume.min_size | integer | This field specifies the minimum size of files that will be allowed to resume. |
-| resume_scan | boolean | Resume the scan from where the previous execution left off. |
-| scan_dir_rename | boolean | Enable the detection of renamed directories and files compared. to the previous scan, based on matching inodes |
-| scan_file_rename | boolean | Enable the detection of renamed files compared to the previous scan, based on matching inodes. |
-| scan_intensity | string | Scan at the set intensity. `vlow` minimizes system activity. `vhigh` maximizes system activity by continuously scanning files without rest.<br/>Allowed values: `vlow`, `low`, `medium`, `high`, `vhigh` |
-| sharing_retry_max | integer | Retry synchronizations up to the specified maximum number after a sharing violation. |
-| store_metadata_records | boolean | Store the acls or xattrs in the snapshot database. |
-| symbolic_links | string | Handle symbolic links with the specified method. Default is `skip` on windows, `copy` otherwise.<br/>Allowed values: `copy`, `skip`, `follow`<br/>(`--symbolic-links={enum}`) |
-| tags | object | User-defined metadata tags. |
-| transfer_threads | array | Use the specified number of dedicated transfer threads to process files smaller or equal to the specified size |
+| resume.max_age | integer | Sets the age limit in days for temporary files that will be preserved on cleanup (usually at async's start and stop) for potential transfer resume. Temp files older than the given value will be removed regardless of whether they might be resumeable.<br/>(`--resume-age-days={integer}`) |
+| resume.min_size | integer | This field specifies the minimum size of files that will be allowed to resume.<br/>(`--support-resume={integer}`) |
+| resume_scan | boolean | Resume the scan from where the previous execution left off.<br/>(`--resume-scan`) |
+| scan_dir_rename | boolean | Enable the detection of renamed directories and files compared. to the previous scan, based on matching inodes<br/>(`--scan-dir-rename`) |
+| scan_file_rename | boolean | Enable the detection of renamed files compared to the previous scan, based on matching inodes.<br/>(`--scan-file-rename`) |
+| scan_intensity | string | Scan at the set intensity. `vlow` minimizes system activity. `vhigh` maximizes system activity by continuously scanning files without rest.<br/>Allowed values: `vlow`, `low`, `medium`, `high`, `vhigh`<br/>(`--scan-intensity={enum}`)(-H) |
+| sharing_retry_max | integer | Retry synchronizations up to the specified maximum number after a sharing violation.<br/>(`--sharing-retry-max={integer}`) |
+| store_metadata_records | boolean | Store the acls or xattrs in the snapshot database.<br/>(`--store-metadata-records`) |
+| symbolic_links | string | Handle symbolic links with the specified method. Default is `skip` on windows, `copy` otherwise.<br/>Allowed values: `copy`, `skip`, `follow`<br/>(`--symbolic-links={enum}`)(-n) |
+| tags | object | User-defined metadata tags.<br/>(special:`--tags64={object}`) |
+| transfer_threads | array | Use the specified number of dedicated transfer threads to process files smaller or equal to the specified size<br/>(special:`--transfer-threads={array}`) |
+| transfer_threads[].size | integer | Upper limit. `-1` for infinity. |
+| transfer_threads[].threads | integer | The number of threads. |
 | transport | object | &nbsp; |
-| transport.cipher | &nbsp; | Specify encryption algorithm for file data.<br/>Allowed values: `none`, `aes128`, `aes192`, `aes256`, `aes128cfb`, `aes192cfb`, `aes256cfb`, `aes128gcm`, `aes192gcm`, `aes256gcm`<br/>(`--cipher={enum}`) |
-| transport.compression | &nbsp; | Compress a file before transfer using the specified MODE.<br/>Allowed values: `none`, `zlib`<br/>(`--compression={enum}`) |
-| transport.datagram_size | integer | Specify the datagram size (MTU) for FASP. By default it uses the detected path MTU. |
-| transport.min_rate | integer | Attempt to transfer no slower than the specified rate (in bps). |
-| transport.rate_policy | &nbsp; | Defines how `ascp` will manage the bandwidth.<br/>Allowed values: `fair`, `fixed`, `high`, `low` |
-| transport.raw_options | array | Pass arbitrary arguments to `ascp`. |
-| transport.read_block_size | integer | Use the specified block size (in bytes) for reading. Default is determined by `aspera.conf`. |
-| transport.rexmsg_size | integer | Use the specified size (in bytes) for a retransmission request. Default is determined by `aspera.conf`. |
-| transport.target_rate | integer | Transfer no faster than the specified rate (in bps). |
-| transport.udp_port | integer | Use the specified UDP port for FASP data transfer. |
-| transport.write_block_size | integer | Use the specified block size (in bytes) for writing. Default is determined by `aspera.conf`. |
+| transport.cipher | string | Specify encryption algorithm for file data.<br/>Allowed values: `none`, `aes128`, `aes192`, `aes256`, `aes128cfb`, `aes192cfb`, `aes256cfb`, `aes128gcm`, `aes192gcm`, `aes256gcm`<br/>(`--cipher={enum}`)(-c) |
+| transport.compression | string | Compress a file before transfer using the specified MODE.<br/>Allowed values: `none`, `zlib`<br/>(`--compression={enum}`) |
+| transport.datagram_size | integer | Specify the datagram size (MTU) for FASP. By default it uses the detected path MTU.<br/>(`--datagram-size={integer}`)(-Z) |
+| transport.min_rate | integer | Attempt to transfer no slower than the specified rate (in bps).<br/>(`--min-rate={integer}`)(-m) |
+| transport.rate_policy | string | Defines how `ascp` will manage the bandwidth.<br/>Allowed values: `fair`, `fixed`, `high`, `low`<br/>(`--rate-policy={enum}`)(-a) |
+| transport.raw_options | array | Pass arbitrary arguments to `ascp`.<br/>(special:`--raw-options={array}`) |
+| transport.read_block_size | integer | Use the specified block size (in bytes) for reading. Default is determined by `aspera.conf`.<br/>(`--read-block-size={integer}`)(-g) |
+| transport.rexmsg_size | integer | Use the specified size (in bytes) for a retransmission request. Default is determined by `aspera.conf`.<br/>(`--rexmsg-size={integer}`)(-X) |
+| transport.target_rate | integer | Transfer no faster than the specified rate (in bps).<br/>(`--target-rate={integer}`)(-l) |
+| transport.udp_port | integer | Use the specified UDP port for FASP data transfer.<br/>(`--udp-port={integer}`)(-O) |
+| transport.write_block_size | integer | Use the specified block size (in bytes) for writing. Default is determined by `aspera.conf`.<br/>(`--write-block-size={integer}`)(-G) |
 | watchd | object | When connection is configured, `asperawatchd` is used to detect the changes on the source directory.<br/>(special:`--watchd={object}`) |
-| watchd.datastore | &nbsp; | Specify the type of datastore, `none` for disabled.<br/>Allowed values: `none`, `redis`, `scalekv` |
+| watchd.datastore | string | Specify the type of datastore, `none` for disabled.<br/>Allowed values: `none`, `redis`, `scalekv` |
 | watchd.domain | string | Specify the domain. Default is the current username. |
 | watchd.host | string | Use the specified host name or address to connect to the datastore. |
 | watchd.port | integer | Use the specified port. |
-| write_gid | string | Try to write files as the specified group. |
-| write_uid | string | Try to write files as the specified user. |
+| write_gid | string | Try to write files as the specified group.<br/>(`--write-gid={string}`) |
+| write_uid | string | Try to write files as the specified user.<br/>(`--write-uid={string}`) |
 
 #### `sync_info`: `args` format
 
@@ -8911,13 +9140,26 @@ Technically, it allows definition of multiple sync sessions in a single command,
 
 This is the mode selection if there are either keys `sessions` or `instance` in option `sync_info`.
 
-Parameters `local_dir` and `remote_dir` are not allowed since they are provided on command line.
+The following parameters are automatically filled from mandatory arguments, and are not allowed:
+
+- `direction`
+- `local_dir`
+- `remote_dir`
+
+Parameter `name` is set to a default value if not provided in `sync_info`.
 
 ### Sync management and monitoring: `admin`
 
 The `admin` command provides several sub commands that access directly the Async snap database (`snap.db`).
 (With the exception of `status` which uses the utility `asyncadmin`, available only on server products.)
 
+This command does not require any communication to the server and accesses only the local database.
+It can be executed also from the `config` plugin:
+
+```shell
+ascli config sync admin
+```
+
 To use the `admin` command, the gem `sqlite3` shall be installed:
 
 ```shell
@@ -9349,6 +9591,16 @@ If you want to use `ed25519` keys, then install the required gems:
 gem install ed25519 bcrypt_pbkdf
 ```
 
+In addition, if those two gems are not installed, and if you are using Private Keys encoded using the OpenSSH format, then you'll get the message:
+
+```text
+OpenSSH keys only supported if ED25519 is available (NotImplementedError)
+net-ssh requires the following gems for ed25519 support:
+ * ed25519 (>= 1.2, < 2.0)
+ * bcrypt_pbkdf (>= 1.0, < 2.0)
+See https://github.com/net-ssh/net-ssh/issues/565 for more information
+```
+
 In addition, if **JRuby** is used, host keys of type: `ecdsa-sha2` and `ecdh-sha2` are also deactivated by default.
 To activate, set env var `ASCLI_ENABLE_ECDSHA2` to `true`.