aspera-cli 4.25.0.pre → 4.25.0

data/README.md

@@ -2,7 +2,7 @@
 <!--
 DO NOT EDIT: THIS FILE IS GENERATED, edit docs/README.erb.md, for details, read docs/README.md
 PANDOC_META_BEGIN
-subtitle: "ascli 4.25.0.pre"
+subtitle: "ascli 4.25.0"
 author: "Laurent MARTIN"
 PANDOC_META_END
 -->
@@ -22,7 +22,7 @@ PANDOC_META_END
 
 Hootput lives in the terminal, watching over every command with wide, unblinking eyes.
 Known for concise output and sharp insight, this owl thrives where others get lost in the dark.
-It doesn’t chatter; it hoots—clear, precise, and always on time.
+It doesn’t chatter; it hoots-clear, precise, and always on time.
 
 Like `ascli`, Hootput is built for action: launching transfers, parsing options, and navigating APIs without hesitation.
 Light on feathers but heavy on wisdom, it turns complexity into simple one-liners.
@@ -30,7 +30,7 @@ When you hear Hootput’s call, you know your data is already in flight.
 
 ---
 
-"Hey, I’m `ascli` — your data’s personal courier.
+"Hey, I’m `ascli` - your data’s personal courier.
 I don’t do flashy dashboards; I’m happiest in a terminal window.
 Hand me a command, and I’ll zip your files across the network faster than you thought possible.
 
@@ -42,7 +42,7 @@ Need to debug? I’ll show you what’s going on under the hood.
 
 Think of me as Aspera’s command-line sidekick: quick, reliable, and a little no-nonsense. You bring the files; I’ll bring the horsepower."
 
-Version : 4.25.0.pre
+Version : 4.25.0
 
 Laurent/2016-2026
 
@@ -76,6 +76,10 @@ For debugging, use `--log-level=debug` to view the underlying API calls.
 
 ### When to use and when not to use
 
+> [!NOTE]
+> If you are scripting or automating transfers from the command line, `ascli` is the right choice.
+> If you are developing an application, prefer the APIs or SDKs instead.
+
 The `ascli` tool is designed for command-line interaction with IBM Aspera products, enabling users to execute remote commands and perform file transfers efficiently.
 It supports both interactive terminal operations (e.g., maintenance tasks on VT100-compatible terminals) and scripting use cases (e.g., batch jobs via shell scripts or cron).
 
@@ -95,7 +99,7 @@ These include:
 Using these APIs is generally more suitable for long-term development and maintenance.
 Example implementations can be found at: <https://github.com/laurent-martin/aspera-api-examples>.
 
-For scripting and ad hoc command-line tasks, `ascli` is ideal.
+For scripting and ad-hoc command-line tasks, `ascli` is ideal.
 It is developer-friendly and well-suited for quickly testing and learning Aspera APIs (See [Logging, Debugging](#logging-debugging)).
 
 Clarifying the CLI landscape:
@@ -135,7 +139,7 @@ ascli --version
 ```
 
 ```text
-4.25.0.pre
+4.25.0
 ```
 
 > [!NOTE]
@@ -430,6 +434,7 @@ One can remove all installed gems, for example to start fresh:
 
 ```shell
 ls $(gem env gemdir)/gems/|sed -e 's/-[^-]*$//'|sort -u|xargs gem uninstall -axI
+rm -f Gemfile.lock
 ```
 
 #### Unix-like: RVM: Single user installation (not root)
@@ -587,33 +592,57 @@ Those are not installed as part of dependencies because they involve compilation
 See [Gemfile](Gemfile):
 
 | name | version | comment |
-|----------------------|---------|-----------------------------------------------------|
+|----------------------|----------|-----------------------------------------------------|
 | grpc | ~> 1.71 | (no jruby) for Aspera Transfer Daemon |
 | marcel | ~> 1.1 | for preview |
-| rmagick | ~> 6.1 | (no jruby) for terminal view |
 | symmetric-encryption | ~> 4.6 | for encrypted hash file secrets |
 | bigdecimal | ~> 3.1 | if RUBY_VERSION >= '3.4' for symmetric-encryption ? |
+| base64 | ~> 0.3 | if RUBY_VERSION >= '3.4' remove from standard gems |
 | sqlite3 | ~> 2.7 | (no jruby) for async DB |
 | jdbc-sqlite3 | ~> 3.46 | (jruby) for async DB |
 | sequel | ~> 5.96 | (jruby) for async DB |
 | ed25519 | ~> 1.4 | (no jruby) for ed25519 and OpenSSH file format |
 | bcrypt_pbkdf | ~> 1.1 | (no jruby) for ed25519 and OpenSSH file format |
 | syslog | ~> 0.3 | (no jruby) for logger=syslog |
+| rmagick | ~> 6.1 | (no jruby) for terminal view |
+| debug | ~> 1.11 | (no jruby) |
+| grpc-tools | ~> 1.67 |  |
+| rake | ~> 13.0 |  |
+| reek | ~> 6.5.0 |  |
+| rspec | ~> 3.0 |  |
+| rubocop | ~> 1.75 |  |
+| rubocop-ast | ~> 1.4 |  |
+| rubocop-performance | ~> 1.10 | (no jruby) |
+| rubocop-shopify | ~> 2.0 |  |
+| simplecov | ~> 0.22 |  |
+| solargraph | ~> 0.48 | (no jruby) |
 
 Install like this:
 
 ```shell
 gem install grpc -v '~> 1.71'
 gem install marcel -v '~> 1.1'
-gem install rmagick -v '~> 6.1'
 gem install symmetric-encryption -v '~> 4.6'
 gem install bigdecimal -v '~> 3.1'
+gem install base64 -v '~> 0.3'
 gem install sqlite3 -v '~> 2.7'
 gem install jdbc-sqlite3 -v '~> 3.46'
 gem install sequel -v '~> 5.96'
 gem install ed25519 -v '~> 1.4'
 gem install bcrypt_pbkdf -v '~> 1.1'
 gem install syslog -v '~> 0.3'
+gem install rmagick -v '~> 6.1'
+gem install debug -v '~> 1.11'
+gem install grpc-tools -v '~> 1.67'
+gem install rake -v '~> 13.0'
+gem install reek -v '~> 6.5.0'
+gem install rspec -v '~> 3.0'
+gem install rubocop -v '~> 1.75'
+gem install rubocop-ast -v '~> 1.4'
+gem install rubocop-performance -v '~> 1.10'
+gem install rubocop-shopify -v '~> 2.0'
+gem install simplecov -v '~> 0.22'
+gem install solargraph -v '~> 0.48'
 ```
 
 ### Ruby Gem: `aspera-cli`
@@ -621,7 +650,7 @@ gem install syslog -v '~> 0.3'
 Once you have Ruby and rights to install gems, install the `aspera-cli` gem and its dependencies:
 
 ```shell
-gem install aspera-cli --pre
+gem install aspera-cli
 ```
 
 To upgrade to the latest version:
@@ -777,11 +806,11 @@ Necessary gems can be packed in a `tar.gz` like this:
 
 ```bash
 mkdir temp_folder
-gem install aspera-cli:4.25.0.pre --no-document --install-dir temp_folder
+gem install aspera-cli:4.25.0 --no-document --install-dir temp_folder
 find temp_folder
-mv temp_folder/cache aspera-cli-4.25.0.pre-gems
+mv temp_folder/cache aspera-cli-4.25.0-gems
 rm -fr temp_folder
-tar zcvf aspera-cli-4.25.0.pre-gems aspera-cli-4.25.0.pre-gems.tgz
+tar zcvf aspera-cli-4.25.0-gems aspera-cli-4.25.0-gems.tgz
 ```
 
 #### Unix-like
@@ -926,7 +955,7 @@ ascli -v
 ```
 
 ```text
-4.25.0.pre
+4.25.0
 ```
 
 In order to keep persistency of configuration on the host, you should specify your user's configuration folder as a volume for the container.
@@ -1366,7 +1395,7 @@ Details can be found here:
 
 - [quoting rules](https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_quoting_rules)
 
-##### PowserShell 5
+##### PowerShell 5
 
 - Check your powershell version:
 
@@ -1408,9 +1437,9 @@ $var="v"
 ascli conf echo  $('@json:{"""k""":"""' + $var + '""","""x""":true}')
 ```
 
-##### PowserShell 7
+##### PowerShell 7
 
-- Check your powershell version:
+- Check your PowerShell version:
 
 ```powershell
 $psversiontable.psversion.Major
@@ -1684,14 +1713,14 @@ ascli config ascp info
 - `ascli` is the executable executed by the shell
 - `conf` is the first level command: name of the plugin to be used
 - `ascp` is the second level command: name of the component (singleton)
-- `info` is the third level command: action to be performed
+- `info` is the third level command: action to be performed (verb)
 
 Typically, **Commands** are located at the **beginning** of the command line.
 The provided command must match one of the supported commands in the given context.
 If wrong, or no command is provided when expected, an error message is displayed and the list of supported commands is displayed.
 
 Standard **Commands** are: `create`, `show`, `list`, `modify`, `delete`.
-Some entities also support additional commands.
+Some entities also support additional commands, especially to select sub-entities.
 When those additional commands are related to an entity also reachable in another context, then those commands are located below command `do`.
 For example sub-commands appear after entity selection (identifier), e.g. `ascli aoc admin node do <node_id> browse /`: `browse` is a sub-command of `node`.
 
@@ -1731,6 +1760,18 @@ ascli conf echo @: a.b=1 a.c=2 a.d.0=hello a.d.1=world --format=json
 {"a":{"b":1,"c":2,"d":["hello","world"]}}
 ```
 
+The general structure of positional arguments is:
+
+```text
+ascli <plugin> <entity> <command> [<ID>] [<parameters>]
+```
+
+If a sub-entity is used:
+
+```text
+ascli <plugin> <entity1> <sub-entity> [<ID>1] <command2> [<ID2>] [<parameters>]
+```
+
 #### Options
 
 Command-line options, such as `--log-level=debug`, follow these conventions:
@@ -1769,7 +1810,7 @@ Exceptions and Special Cases:
   If a specific type is required, it can be specified using the `@json:` or `@ruby:` syntax.
   For example, `--a.b.c=1` is equivalent to `--a=@json'{"b":{"c":1}}'`.
   This allows specifying nested keys directly on the command line using a concise **dot-separated** syntax.
-- **Cummulative Hashes**:
+- **Cumulative Hashes**:
   When an option of type `Hash` is set, the value is deep-merged to an existing or default value.
   Setting to `@none:` is equivalent to setting to `@json:{}`, i.e. an empty `Hash`.
   This can be used to start from an empty value, and not used existing default value.
@@ -1878,17 +1919,17 @@ ascli config echo @json:'{"ni":null,"es":"","ea":[],"eh":{}}'
 
 The style of output can be set using the `format` option:
 
-| `format` | Output formatting       |
-|----------|-------------------------|
-| `table`  | Text table (default)    |
-| `text`   | Value as `String`       |
-| `ruby`   | Ruby code               |
-| `json`   | JSON code               |
-| `jsonpp` | JSON pretty printed     |
-| `yaml`   | YAML                    |
-| `csv`    | Comma Separated Values  |
-| `image`  | Image URL or data       |
-| `nagios` | Suitable for Nagios     |
+| `format` | Output formatting         |
+|----------|---------------------------|
+| `table`  | Text table (default)      |
+| `text`   | Value as `String`         |
+| `ruby`   | Ruby code                 |
+| `json`   | JSON code                 |
+| `jsonpp` | JSON pretty printed       |
+| `yaml`   | YAML                      |
+| `csv`    | Comma Separated Values    |
+| `image`  | URL or data for a [picture/video](#image-and-video-thumbnails) |
+| `nagios` | Suitable for Nagios       |
 
 By default, result of type `single_object` and `object_list` are displayed using format `table`.
 
@@ -2192,8 +2233,7 @@ The following decoders are supported:
 | `re`     | `String` | `Regexp` | Ruby Regular Expression (short for `@ruby:/.../`) |
 | `ruby`   | `String` | Any      | Execute specified Ruby code. |
 | `secret` | None     | `String` | Ask password interactively (hides input). |
-| `stdin`  | None     | `String` | Read from stdin in text mode (no value on right). |
-| `stdbin` | None     | `String` | Read from stdin in binary mode (no value on right). |
+| `stdin`  | None     | `String` | Read from stdin in text mode (with arg: empty, `bin` or `chomp`). |
 | `uri`    | `String` | `String` | Read value from specified URL. e.g. `--fpac=@uri:http://serv/f.pac` |
 | `val`    | `String` | `String` | Prevent decoders on the right to be decoded. e.g. `--key=@val:@file:foo` sets the option `key` to value `@file:foo`. |
 | `yaml`   | `String` | Any      | Decode YAML. |
@@ -2209,7 +2249,7 @@ To display the result of an extended value, use the `config echo` command.
 The `extend` decoder is useful to evaluate embedded extended value syntax in a string.
 It expects a `@` to close the embedded extended value syntax.
 
-Option `parser` allows definition of a default parser when the positinal parameter or option expects a `Hash` or `Array`.
+Option `parser` allows definition of a default parser when the positional parameter or option expects a `Hash` or `Array`.
 For example, with `--parser=json`, the parameter `{}` will be parsed as an empty JSON Hash, even without prefix `@json:`.
 
 Example: Create a `Hash` value with the convenient `@json:` decoder:
@@ -2357,7 +2397,7 @@ The option `invalid_characters` allows specifying a replacement character for a
 
 The first character specifies the replacement character, and the following characters are the invalid ones.
 This is used when a folder or file is created from a value that potentially contains invalid characters.
-For example, using the option `package_folder`.
+For example, using the option `package_folder`, a package name may contain characters not allowed, such as `/`.
 The default value is `_<>:"/\|?*`, corresponding to replacement character `_` and characters not allowed on Windows.
 
 > [!NOTE]
@@ -2551,7 +2591,7 @@ detect https://tst.example.com/path httpgw
 detect my_org aoc
 doc
 doc transfer-parameters
-echo '<svg viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg"><circle cx="50" cy="50" r="50" fill="#006699"/></svg>' --format=image
+echo '<svg viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg"><circle cx="50" cy="50" r="50" fill="#069"/></svg>' --format=image --image.text=true
 echo -- --special-string
 echo @base64:SGVsbG8gV29ybGQK
 echo @csvt:@stdin:
@@ -2561,7 +2601,7 @@ echo @json:'[{"user":{"id":1,"name":"foo"},"project":"bar"}]' --multi-single=yes
 echo @lines:@stdin:
 echo @list:,1,2,3
 echo @secret:
-echo @stdbin:
+echo @stdin:bin
 echo @uri:/etc/hosts
 echo @uri:file:/etc/hosts
 echo @uri:http://ifconfig.me
@@ -2591,6 +2631,8 @@ preset delete conf_name
 preset initialize conf_name @json:'{"p1":"v1","p2":"v2"}'
 preset list
 preset overview
+preset set GLOBAL vault @: type=file file=/secure/vault_file
+preset set GLOBAL vault_password _simple_one_
 preset set GLOBAL version_check_days 0
 preset set conf_name param value
 preset set default shares conf_name
@@ -2608,7 +2650,8 @@ tokens flush
 tokens list
 transferd install
 transferd list
-vault create @json:'{"label":"my_label","password":"my_password_here","description":"my secret"}'
+vault create @: label=my_label password=my_password_here 'description=my secret'
+vault delete foo --vault.type=system
 vault delete my_label
 vault info
 vault list
@@ -2923,7 +2966,7 @@ ascli config vault create @json:'{"label":"mylabel","password":"my_password_here
 
 #### Configuration Finder
 
-When a secret is needed by a sub command, the command can search for existing configurations in the configuration file.
+When a secret is needed by a sub command, the command can search for existing configurations in the configuration file by setting option `secret` to the special value `PRESET`.
 
 The lookup is done by comparing the service URL and username (or access key).
 
@@ -3067,33 +3110,42 @@ Parameter `url` (base URL) defines:
 
 ### Image and video thumbnails
 
-`ascli` can display thumbnails for images and videos in the terminal.
-This is available:
+`ascli` can display thumbnails for images and videos in the **terminal**, using [iTerm2 inline image protocol](https://iterm2.com/documentation-images.html) or through colorized text.
+
+This feature can be used:
 
 - In the `thumbnail` command of `node` when using **gen4/access key** API.
 - When using the `show` command of `preview` plugin.
 - `coffee` and `image` commands of `config` plugin.
 - Any displayed value which is a URL to image can be displayed with option `format` set to `image`
 
-The following options can be specified in the option `image`:
+The following options can be specified in the `image` option:
 
-| Option     | Type      | Description                                       |
+| Option     | Type      | Description                                                             |
 |------------|-----------|---------------------------------------------------|
-| reserve    | `Integer` | Lines reserved to display a status.               |
-| text       | `Bool`    | Display text instead of image.                    |
-| double     | `Bool`    | Display double text resolution (half characters). |
-| font_ratio | `Float`   | Font height/width ratio in terminal.              |
+| reserve    | `Integer` | Lines reserved to display a status.<br/>Default: `3`                  |
+| text       | `Bool`    | Display text instead of image (iTerm).<br/>Default: `false`           |
+| double     | `Bool`    | Display double text resolution (half characters).<br/>Default: `true` |
+| font_ratio | `Float`   | Font height/width ratio in terminal.<br/>Default: `2.3`               |
+
+Examples:
+
+- Display image as colorized text (requires `rmagick`)
 
 ```shell
-ascli config image https://eudemo.asperademo.com/wallpaper.jpg --ui=text --image=@json:'{"text":true}'
+ascli config image https://eudemo.asperademo.com/wallpaper.jpg --ui=text --image.text=true
 ```
 
+- Display image from byte stream as image in terminal (requires iTerm2-compatible terminal)
+
 ```shell
-curl -so - https://eudemo.asperademo.com/wallpaper.jpg | ascli config image @stdbin:
+curl -so - https://eudemo.asperademo.com/wallpaper.jpg | ascli config image @stdin:bin
 ```
 
+- Display image from file (requires iTerm2-compatible terminal)
+
 ```shell
-echo -n https://eudemo.asperademo.com/wallpaper.jpg | ascli config image @uri:@stdin:
+ascli config image @stdin:bin < A-team.jpg
 ```
 
 ### Graphical Interactions: Browser and Text Editor
@@ -3193,22 +3245,22 @@ To disable this warning, set the option `warn_insecure` to `no`.
 
 HTTP connection parameters (not `ascp` WSS) can be adjusted using option `http_options`:
 
-| Parameter                 | Type      | Default         | Handler         |
+| Parameter                 | Type      | Default         | Handler       |
 |-------------------------|---------|---------------|---------------|
-| `read_timeout`            | `Integer` | `60`            | Ruby            |
-| `write_timeout`           | `Integer` | `60`            | Ruby            |
-| `open_timeout`            | `Integer` | `60`            | Ruby            |
-| `keep_alive_timeout`      | `Integer` | `2`             | Ruby            |
-| `ssl_options`             | `Array`   | See below       | Ruby            |
-| `user_agent`              | `Integer` | `ascli`       | `ascli` Rest  |
-| `download_partial_suffix` | `Integer` | `.http_partial` | `ascli` Rest  |
-| `retry_on_error`          | `Bool`    | `false`         | `ascli` Rest  |
-| `retry_on_timeout`        | `Bool`    | `true`          | `ascli` Rest  |
-| `retry_on_unavailable`    | `Bool`    | `true`          | `ascli` Rest  |
-| `retry_max`               | `Integer` | `1`             | `ascli` Rest  |
-| `retry_sleep`             | `Integer` | `4`             | `ascli` Rest  |
-| `token_cache_max_age`     | `Integer` | `1800`          | `ascli` OAuth |
-| `token_refresh_threshold` | `Integer` | `120`           | `ascli` OAuth |
+| `read_timeout`            | `Integer` | `60`            | Ruby          |
+| `write_timeout`           | `Integer` | `60`            | Ruby          |
+| `open_timeout`            | `Integer` | `60`            | Ruby          |
+| `keep_alive_timeout`      | `Integer` | `2`             | Ruby          |
+| `ssl_options`             | `Array`   | See below       | Ruby          |
+| `user_agent`              | `Integer` | `ascli`       | `Rest` class  |
+| `download_partial_suffix` | `Integer` | `.http_partial` | `Rest` class  |
+| `retry_on_error`          | `Bool`    | `false`         | `Rest` class  |
+| `retry_on_timeout`        | `Bool`    | `true`          | `Rest` class  |
+| `retry_on_unavailable`    | `Bool`    | `true`          | `Rest` class  |
+| `retry_max`               | `Integer` | `1`             | `Rest` class  |
+| `retry_sleep`             | `Integer` | `4`             | `Rest` class  |
+| `token_cache_max_age`     | `Integer` | `1800`          | `OAuth` class |
+| `token_refresh_threshold` | `Integer` | `120`           | `OAuth` class |
 
 Time values are in set **seconds** and can be of type either `Integer` or `Float`.
 Default values are the ones of Ruby:
@@ -3396,7 +3448,7 @@ If the path has spaces, read section: [Shell and Command line parsing](#command-
 
 A special value `product:<product name>` can be used for option `ascp_path`.
 It specifies to use `ascp` from the given product name.
-A special valuefor product name is `FIRST`, which means: use the first found.
+A special value for product name is `FIRST`, which means: use the first found.
 
 Locally installed Aspera products can be listed with:
 
@@ -3538,15 +3590,15 @@ The `transfer_info` option accepts the following optional parameters to control
 | Name                   | Type      | Description                                                                 |
 |------------------------|-----------|-----------------------------------------------------------------------------|
 | `wss`                  | `Bool`    | Web Socket Session<br/>Enable use of web socket session in case it is available<br/>Default: `true` |
-| `quiet`                | `Bool`    | If `true`, then `ascp` progress bar is not shown.<br/>Default: `false` |
-| `trusted_certs`        | `Array`   | List of repositories for trusted certificates. |
+| `quiet`                | `Bool`    | If `true`, then `ascp` progress bar is not shown.<br/>Default: `false`    |
+| `trusted_certs`        | `Array`   | List of repositories for trusted certificates.                              |
 | `client_ssh_key`       | `String`  | SSH Keys to use for token-based transfers.<br/>One of: `dsa_rsa`, `rsa`, `per_client`.<br/>Default: `rsa` |
-| `ascp_args`            | `Array`   | `Array` of strings with native `ascp` arguments.<br/>Default: `[]` |
+| `ascp_args`            | `Array`   | `Array` of strings with native `ascp` arguments.<br/>Default: `[]`        |
 | `spawn_timeout_sec`    | `Float`   | Multi session<br/>Verification time that `ascp` is running<br/>Default: `3` |
-| `spawn_delay_sec`      | `Float`   | Multi session<br/>Delay between startup of sessions<br/>Default: `2` |
+| `spawn_delay_sec`      | `Float`   | Multi session<br/>Delay between startup of sessions<br/>Default: `2`    |
 | `multi_incr_udp`       | `Bool`    | Multi Session<br/>Increment UDP port on multi-session<br/>If `true`, each session will have a different UDP port starting at `fasp_port` (or default 33001)<br/>Else, each session will use `fasp_port` (or `ascp` default)<br/>Default: `true` on Windows, else `false` |
-| `resume`               | `Hash`    | Resume parameters. See below. |
-| `resume.iter_max`      | `Integer` | Max number of retry on error<br/>Default: `7` |
+| `resume`               | `Hash`    | Resume parameters. See below.                                               |
+| `resume.iter_max`      | `Integer` | Max number of retry on error<br/>Default: `7`                             |
 | `resume.sleep_initial` | `Integer` | First Sleep before retry<br/>Default: `2` |
 | `resume.sleep_factor`  | `Integer` | Multiplier of sleep period between attempts<br/>Default: `2` |
 | `resume.sleep_max`     | `Integer` | Default: `60` |
@@ -3628,12 +3680,12 @@ In addition to standard methods described in section [File List](#list-of-files-
 ##### Agent: Direct: Management messages
 
 By default, `ascli` gets notification from `ascp` on its management port.
-This can be de-activated with parameter: `monitor=false` of `transfer_info`.
+This can be disabled with parameter: `monitor=false` of `transfer_info`.
 
-It is also possible to send local messages to this management port.
+It is also possible to send messages to `ascp` using this management port.
 A typical use is to change the target rate of a running transfer.
 
-The communication is done through a flat JSON file that shall be created in `ascli` config folder as displayed with:
+The communication is done through a JSON file that shall be created in `ascli`'s config folder as displayed with:
 
 ```shell
 ascli config folder
@@ -3655,6 +3707,11 @@ echo '{"type":"RATE","Rate":300000}' > ~/.aspera/ascli/send_67470
 
 When `ascli` detects this file, it uses it during a transfer and then deletes it.
 
+> [!NOTE]
+> The JSON's keys use **snake case**, i.e. lower case with `_` as word separator.
+> The list of message `type` can be found in `aspera/ascp/management.rb` : `OPERATIONS`.
+> The list of parameters (capitalized) is `PARAMETERS`.
+
 ##### Agent: Direct: `aspera.conf`: Virtual Links
 
 This agent supports a local configuration file: `aspera.conf` where Virtual links can be configured:
@@ -3662,8 +3719,8 @@ This agent supports a local configuration file: `aspera.conf` where Virtual link
 On a server (HSTS), the following commands can be used to set a global virtual link:
 
 ```shell
-asconfigurator -x 'set_trunk_data;id,1;trunk_name,in;trunk_capacity,45000;trunk_on,true'
-asconfigurator -x 'set_trunk_data;id,2;trunk_name,out;trunk_capacity,45000;trunk_on,true'
+asconfigurator -x 'set_trunk_data;id,1;trunk_name,in;trunk_capacity,100000;trunk_on,true'
+asconfigurator -x 'set_trunk_data;id,2;trunk_name,out;trunk_capacity,100000;trunk_on,true'
 asconfigurator -x 'set_node_data;transfer_in_bandwidth_aggregate_trunk_id,1'
 asconfigurator -x 'set_node_data;transfer_out_bandwidth_aggregate_trunk_id,2'
 ```
@@ -3928,7 +3985,18 @@ ascli config ascp info --fields=ts --flat-hash=no
 ```
 
 It is possible to specify `ascp` options when the `transfer` option is set to [`direct`](#agent-direct) using `transfer_info` option parameter: `ascp_args`.
-Example: `--transfer-info=@json:'{"ascp_args":["-l","100m"]}'`.
+Example:
+
+```json
+--transfer-info=@json:'{"ascp_args":["-l","100m"]}'
+```
+
+Or an equivalent (using dotted expression):
+
+```json
+--transfer-info.ascp_args=@list:' -l 100m'
+```
+
 This is especially useful for `ascp` command line parameters not supported in the transfer spec.
 
 The use of a [**transfer-spec**](#transfer-specification) instead of `ascp` command line arguments has the advantage of:
@@ -3990,7 +4058,7 @@ ascli config ascp schema transferd --format=jsonpp
 | cookie | string | Metadata for transfer specified by application.<br/>(env:`ASPERA_SCP_COOKIE`) |
 | create_dir | boolean | Create target directory if it doesn't already exist.<br/>If **all** the following conditions are met, then the `destination_root` specifies a filename instead of destination folder:<br/>- `create_dir` is `false`<br/>- A single source file is given on **command line**<br/>- The target folder specified by `destination_root` does not exist<br/>In all other cases, `destination_root` specifies a folder, and it is created if it does not already exist. I.e. if **any** of those conditions is met:<br/>- `create_dir` is `true`<br/>- Multiple source files are provided<br/>- List of source files are provided in a file (list or pair), default for Node API and `ascli`.<br/>- The target folder exists<br/>(`-d`) |
 | delete_before_transfer | boolean | Before transfer, delete files that exist at the destination but not at the source.<br/>The source and destination arguments must be directories that have matching names.<br/>Objects on the destination that have the same name but different type or size as objects on the source are not deleted.<br/>(`--delete-before-transfer`) |
-| delete_source | boolean | Remove transfered source files after transfer success. Equivalent to `remove_after_transfer` + `remove_empty_directories` + `remove_empty_source_directory`. Take precedence over those.<br/>(A, N, T) |
+| delete_source | boolean | Remove transferred source files after transfer success. Equivalent to `remove_after_transfer` + `remove_empty_directories` + `remove_empty_source_directory`. Take precedence over those.<br/>(A, N, T) |
 | destination_root | string | Destination root directory. |
 | destination_root_id | string | The file ID of the destination root directory.<br/>Required when using Bearer token auth for the destination node.<br/>(T) |
 | dgram_size | integer | UDP datagram size in bytes.<br/>(`-Z {integer}`) |
@@ -4070,7 +4138,7 @@ ascli config ascp schema transferd --format=jsonpp
 | use_system_ssh | boolean | Use an external `ssh` program instead of the built-in `libssh2` implementation to establish the connection to the remote host. The desired `ssh` program must be in the environment's `PATH`.<br/>To enable debugging of the `ssh` process, supply `-DD` and `--ssh-arg=-vv` arguments to `ascp`.<br/>(A, T)<br/>(`-SSH`) |
 | wss_enabled | boolean | Server has Web Socket service enabled.<br/>(special:`--ws-connect`) |
 | wss_port | integer | TCP port used for Web Socket service feed. |
-| xfer_max_retries | integer | Maximum number of retries, for node API initiated transfers. Shall not exceed aspera.conf `transfer_manager_max_retries` (default 5).<br/>(N) |
+| xfer_max_retries | integer | Maximum number of retries, for node API initiated transfers. Shall not exceed `aspera.conf` parameter `transfer_manager_max_retries` (default 5).<br/>(N) |
 
 #### Destination folder for transfers
 
@@ -4263,7 +4331,7 @@ When multi-session is used, one separate UDP port is used per session (refer to
 
 #### Content protection
 
-Content protection (Client-Side Encryption at Rest, CSEAR)) ensures that files remain encrypted while stored on the server.
+Content protection (Client-Side Encryption at REST, CSEAR)) ensures that files remain encrypted while stored on the server.
 With CSEAR, the client encrypts files during upload and decrypts files during download, using a passphrase known only to the users sharing the files.
 
 - Upload: Files are encrypted on the client side before being sent to the server.
@@ -4594,8 +4662,9 @@ ascli server upload "faux:///mydir?file=testfile&count=1000&size=1" --to-folder=
 
 ```text
 ascli -h
+WARN No config file found. New configuration file: /home/runner/.aspera/ascli/config.yaml
 NAME
-        ascli -- a command line tool for Aspera Applications (v4.25.0.pre)
+        ascli -- a command line tool for Aspera Applications (v4.25.0)
 
 SYNOPSIS
         ascli COMMANDS [OPTIONS] [ARGS]
@@ -4617,7 +4686,7 @@ COMMANDS
 OPTIONS
         Options begin with a '-' (minus), and value is provided on command line.
         Special values are supported beginning with special prefix @pfx:, where pfx is one of:
-        val, base64, csvt, env, file, uri, json, lines, list, none, path, re, ruby, secret, stdin, stdbin, yaml, zlib, extend, preset, vault, 
+        val, base64, csvt, env, file, uri, json, lines, list, none, path, re, ruby, secret, stdin, yaml, zlib, extend, preset, vault, 
         Dates format is 'DD-MM-YY HH:MM:SS', or 'now' or '-<num>h'
 
 ARGS
@@ -4640,7 +4709,7 @@ OPTIONS: global
         --bash-comp                  Generate bash completion for command
         --show-config                Display parameters used for the provided action
     -v, --version                    Display version
-        --ui=ENUM                    Method to start browser: text, [graphical]
+        --ui=ENUM                    Method to start browser: [text], graphical
         --invalid-characters=VALUE   Replacement character and invalid filename characters
         --log-level=ENUM             Log level: trace2, trace1, debug, info, [warn], error, fatal, unknown
         --log-format=VALUE           Log formatter (Proc, Logger::Formatter)
@@ -4689,15 +4758,38 @@ OPTIONS: global
         --to-folder=VALUE            Destination folder for transferred files
         --sources=VALUE              How list of transferred files is provided (@args,@ts,Array)
         --src-type=ENUM              Type of file list: [list], pair
-        --transfer=ENUM              Type of transfer agent: desktop, node, [direct], transferd, httpgw, connect
+        --transfer=ENUM              Type of transfer agent: httpgw, transferd, node, desktop, [direct], connect
         --transfer-info=VALUE        Parameters for transfer agent (Hash)
 
 COMMAND: config
 SUBCOMMANDS: ascp check_update coffee detect documentation download echo email_test file folder gem genkey image initdemo open platform plugins preset proxy_check pubkey remote_certificate smtp_settings sync test tokens transferd vault wizard
 
 
-COMMAND: shares
-SUBCOMMANDS: admin files health
+COMMAND: httpgw
+SUBCOMMANDS: health info
+OPTIONS:
+        --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
+
+
+COMMAND: faspex5
+SUBCOMMANDS: admin bearer_token gateway health invitations packages postprocessing shared_folders user version
+OPTIONS:
+        --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
+        --username=VALUE             User's identifier
+        --password=VALUE             User's password
+        --auth=ENUM                  OAuth type of authentication: web, [jwt], boot
+        --client-id=VALUE            OAuth client identifier
+        --client-secret=VALUE        OAuth client secret
+        --redirect-uri=VALUE         OAuth (Web) redirect URI for web authentication
+        --private-key=VALUE          OAuth (JWT) RSA private key PEM value (prefix file path with @file:)
+        --passphrase=VALUE           OAuth (JWT) RSA private key passphrase
+        --box=VALUE                  Package inbox, either shared inbox name or one of: inbox, inbox_history, inbox_all, inbox_all_history, outbox, outbox_history, pending, pending_history, all or ALL
+        --shared-folder=VALUE        Send package with files from shared folder
+        --group-type=ENUM            Type of shared box: [shared_inboxes], workgroups
+
+
+COMMAND: alee
+SUBCOMMANDS: entitlement health
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
         --username=VALUE             User's identifier
@@ -4718,36 +4810,33 @@ OPTIONS:
         --dynamic-key=VALUE          Private key PEM to use for dynamic key auth
 
 
-COMMAND: faspio
-SUBCOMMANDS: bridges health
+COMMAND: aoc
+SUBCOMMANDS: admin automation bearer_token files gateway organization packages reminder servers tier_restrictions user
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
         --username=VALUE             User's identifier
         --password=VALUE             User's password
-        --auth=ENUM                  OAuth type of authentication: jwt, basic
+        --auth=ENUM                  OAuth type of authentication: web, [jwt], boot
         --client-id=VALUE            OAuth client identifier
-        --private-key=VALUE          OAuth JWT RSA private key PEM value (prefix file path with @file:)
-        --passphrase=VALUE           OAuth JWT RSA private key passphrase
-
-
-COMMAND: orchestrator
-SUBCOMMANDS: health info monitors plugins processes workflows workorders workstep
-OPTIONS:
-        --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
-        --username=VALUE             User's identifier
-        --password=VALUE             User's password
-        --result=VALUE               Specify result value as: 'work_step:parameter'
-        --synchronous=ENUM           Wait for completion: [no], yes
-        --ret-style=ENUM             How return type is requested in api: header, [arg], ext
-        --auth-style=ENUM            Authentication type: arg_pass, [head_basic], apikey
+        --client-secret=VALUE        OAuth client secret
+        --redirect-uri=VALUE         OAuth (Web) redirect URI for web authentication
+        --private-key=VALUE          OAuth (JWT) RSA private key PEM value (prefix file path with @file:)
+        --passphrase=VALUE           OAuth (JWT) RSA private key passphrase
+        --workspace=VALUE            Name of workspace
+        --new-user-option=VALUE      New user creation option for unknown package recipients (Hash)
+        --validate-metadata=ENUM     Validate shared inbox metadata: no, [yes]
+        --package-folder=VALUE       Handling of reception of packages in folders (Hash)
 
 
-COMMAND: alee
-SUBCOMMANDS: entitlement health
+COMMAND: server
+SUBCOMMANDS: browse cp delete df download du health info ls md5sum mkdir mv rename rm sync upload
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
         --username=VALUE             User's identifier
         --password=VALUE             User's password
+        --ssh-keys=VALUE             SSH key path list (Array)
+        --passphrase=VALUE           SSH private key passphrase
+        --ssh-options=VALUE          SSH options (Hash)
 
 
 COMMAND: ats
@@ -4761,56 +4850,6 @@ OPTIONS:
         --region=VALUE               Cloud region
 
 
-COMMAND: faspex5
-SUBCOMMANDS: admin bearer_token gateway health invitations packages postprocessing shared_folders user version
-OPTIONS:
-        --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
-        --username=VALUE             User's identifier
-        --password=VALUE             User's password
-        --auth=ENUM                  OAuth type of authentication: web, [jwt], boot
-        --client-id=VALUE            OAuth client identifier
-        --client-secret=VALUE        OAuth client secret
-        --redirect-uri=VALUE         OAuth (Web) redirect URI for web authentication
-        --private-key=VALUE          OAuth (JWT) RSA private key PEM value (prefix file path with @file:)
-        --passphrase=VALUE           OAuth (JWT) RSA private key passphrase
-        --scope=VALUE                OAuth scope for API calls
-        --box=VALUE                  Package inbox, either shared inbox name or one of: inbox, inbox_history, inbox_all, inbox_all_history, outbox, outbox_history, pending, pending_history, all or ALL
-        --shared-folder=VALUE        Send package with files from shared folder
-        --group-type=ENUM            Type of shared box: [shared_inboxes], workgroups
-
-
-COMMAND: cos
-SUBCOMMANDS: node
-OPTIONS:
-        --bucket=VALUE               Bucket name
-        --endpoint=VALUE             Storage endpoint (URL)
-        --apikey=VALUE               Storage API key
-        --crn=VALUE                  Resource instance id (CRN)
-        --service-credentials=VALUE  IBM Cloud service credentials (Hash)
-        --region=VALUE               Storage region
-        --identity=VALUE             Authentication URL (https://iam.cloud.ibm.com/identity)
-
-
-COMMAND: httpgw
-SUBCOMMANDS: health info
-OPTIONS:
-        --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
-
-
-COMMAND: faspex
-SUBCOMMANDS: address_book dropbox health login_methods me package source v4
-OPTIONS:
-        --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
-        --username=VALUE             User's identifier
-        --password=VALUE             User's password
-        --link=VALUE                 Public link for specific operation
-        --delivery-info=VALUE        Package delivery information (Hash)
-        --remote-source=VALUE        Remote source for package send (id or %name:)
-        --storage=VALUE              Faspex local storage definition (for browsing source)
-        --recipient=VALUE            Use if recipient is a dropbox (with *)
-        --box=ENUM                   Package box: [inbox], archive, sent
-
-
 COMMAND: preview
 SUBCOMMANDS: check events scan show test trevents
 OPTIONS:
@@ -4846,44 +4885,72 @@ OPTIONS:
         --clips-length=VALUE         Mp4: clips: length in seconds of each clips
 
 
-COMMAND: aoc
-SUBCOMMANDS: admin automation bearer_token files gateway organization packages reminder servers tier_restrictions user
+COMMAND: orchestrator
+SUBCOMMANDS: health info monitors plugins processes workflows workorders workstep
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
         --username=VALUE             User's identifier
         --password=VALUE             User's password
-        --auth=ENUM                  OAuth type of authentication: web, [jwt], boot
-        --client-id=VALUE            OAuth client identifier
-        --client-secret=VALUE        OAuth client secret
-        --redirect-uri=VALUE         OAuth (Web) redirect URI for web authentication
-        --private-key=VALUE          OAuth (JWT) RSA private key PEM value (prefix file path with @file:)
-        --passphrase=VALUE           OAuth (JWT) RSA private key passphrase
-        --scope=VALUE                OAuth scope for API calls
-        --workspace=VALUE            Name of workspace
-        --new-user-option=VALUE      New user creation option for unknown package recipients (Hash)
-        --validate-metadata=ENUM     Validate shared inbox metadata: no, [yes]
-        --package-folder=VALUE       Field of package to use as folder name, or @none:
+        --result=VALUE               Specify result value as: 'work_step:parameter'
+        --synchronous=ENUM           Wait for completion: [no], yes
+        --ret-style=ENUM             How return type is requested in api: header, [arg], ext
+        --auth-style=ENUM            Authentication type: arg_pass, [head_basic], apikey
 
 
-COMMAND: server
-SUBCOMMANDS: browse cp delete df download du health info ls md5sum mkdir mv rename rm sync upload
+COMMAND: console
+SUBCOMMANDS: health transfer
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
         --username=VALUE             User's identifier
         --password=VALUE             User's password
-        --ssh-keys=VALUE             SSH key path list (Array)
-        --passphrase=VALUE           SSH private key passphrase
-        --ssh-options=VALUE          SSH options (Hash)
 
 
-COMMAND: console
-SUBCOMMANDS: health transfer
+COMMAND: shares
+SUBCOMMANDS: admin files health
 OPTIONS:
         --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
         --username=VALUE             User's identifier
         --password=VALUE             User's password
 
 
+COMMAND: cos
+SUBCOMMANDS: node
+OPTIONS:
+        --bucket=VALUE               Bucket name
+        --endpoint=VALUE             Storage endpoint (URL)
+        --apikey=VALUE               Storage API key
+        --crn=VALUE                  Resource instance id (CRN)
+        --service-credentials=VALUE  IBM Cloud service credentials (Hash)
+        --region=VALUE               Storage region
+        --identity=VALUE             Authentication URL (https://iam.cloud.ibm.com/identity)
+
+
+COMMAND: faspio
+SUBCOMMANDS: bridges health
+OPTIONS:
+        --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
+        --username=VALUE             User's identifier
+        --password=VALUE             User's password
+        --auth=ENUM                  OAuth type of authentication: jwt, basic
+        --client-id=VALUE            OAuth client identifier
+        --private-key=VALUE          OAuth JWT RSA private key PEM value (prefix file path with @file:)
+        --passphrase=VALUE           OAuth JWT RSA private key passphrase
+
+
+COMMAND: faspex
+SUBCOMMANDS: address_book dropbox health login_methods me package source v4
+OPTIONS:
+        --url=VALUE                  URL of application, e.g. https://app.example.com/aspera/app
+        --username=VALUE             User's identifier
+        --password=VALUE             User's password
+        --link=VALUE                 Public link for specific operation
+        --delivery-info=VALUE        Package delivery information (Hash)
+        --remote-source=VALUE        Remote source for package send (id or %name:)
+        --storage=VALUE              Faspex local storage definition (for browsing source)
+        --recipient=VALUE            Use if recipient is a dropbox (with *)
+        --box=ENUM                   Package box: [inbox], archive, sent
+
+
 ```
 
 > [!NOTE]
@@ -5261,7 +5328,7 @@ empty
 
 ### Calling AoC APIs from command line
 
-The command `ascli aoc bearer` can be used to generate an OAuth token suitable to call any AoC API (use the `scope` option to change the scope, default is `user:all`).
+The command `ascli aoc bearer` can be used to generate an OAuth token suitable to call any AoC API.
 This can be useful when a command is not yet available.
 
 Example:
@@ -5928,39 +5995,38 @@ Option `once_only` is supported, see below.
 To download only some files from the package, just add the path of the files on the command line: `[<file> ...]`, see option `sources`.
 By default, all files in the package are downloaded, i.e. `.` is used as the file list.
 
-Option `package_folder` defines the attribute of folder used as destination sub folder in the `to_folder` path (see description earlier).
-The following syntax is supported
+##### Option `package_folder`
 
-| Syntax               | Description                                                                            |
-|----------------------|----------------------------------------------------------------------------------------|
-| `@none:`             | No subfolder is created, files are downloaded directly into the specified `to_folder`. |
-| `<field>`            | A subfolder named after the package's specified field is created inside `to_folder`.   |
-| `<field1>+<field2>`  | A subfolder named after the combination of two package fields with a `.` is created inside `to_folder`. |
-| `<field1>+<field2>?` | A subfolder named after the package's specified field1 is created, unless it already exists.<br/>Else it falls back to the combination of both fields with `.`. |
+The option `package_folder` (Hash) allows downloading packages in sub-folders of the `to_folder` path (see description earlier).
+If this option is not specified (or Hash is empty), then packages are downloaded in the folder specified by the `to_folder` option.
 
-The special value `seq` for `<field2>` will append an incrementing number to the folder name starting at `1`.
-If `?` is used, then the sequence number is used only if the folder already exists.
+The following fields are supported to define the name of the sub-folder:
 
-Examples:
+| Field | Type    | Description                                                               |
+|-------|---------|---------------------------------------------------------------------------|
+| none  | -       | (Default) No subfolder.                                                   |
+| `fld` | `Array` | The package's specified fields (`.`-joined). (max size: 2)                |
+| `seq` | `Bool`  | If `true`, add an incrementing number to the folder name starting at `1`. |
+| `opt` | `Bool`  | If `false` (default), then all fields are used.<br/>Else, only if the folder does not already exist. |
+| `inf` | `Bool`  | If `true`, then a file is created (`<ID>.info.json`) with package information (metadata, same information as sidecar file). |
 
-- `id` :
-  Subfolder named after package ID.
+Examples (JSON):
+
+- `{"fields":["id"]}` :
+  Subfolder is the package ID.
   If the same package is downloaded several times, it will always be placed in the same folder.
-- `name` :
-  Subfolder named after package name.
+- `{"fields":["name"]}` :
+  Subfolder is the package name.
   If two packages with the same name are downloaded, they will be combined in the same folder.
-- `name+id` :
-  Subfolder named after the combination of package name and ID.
-- `name+id?` :
-  Subfolder named after the package's name is created, unless it already exists.
-  Else it falls back to the combination of both fields with `.`.
-- `name+seq?` :
-  Subfolder named after the package's name is created, unless it already exists.
-  Else it falls back to the combination of name and sequence number.
-
-> [!NOTE]
-> When `<field1>+<field2>?` is used, if two packages are downloaded and have the same fields, they will be downloaded in the same folder.
-> If `name+seq?` is used, if the same package is downloaded multiple times, it will be placed in different folders with a sequence number.
+- `{"fields":["name","id"]}` :
+  Subfolder is the combination of package name and ID.
+- `{"fields":["name","id"],"opt":true}` :
+  Subfolder is the package's name is created, unless it already exists.
+  If it exists, then the combination of both fields joined with `.` is used.
+- `{"fields":["name"],"seq":true,"opt":true}` :
+  Subfolder is the package's name, unless it already exists.
+  If it exists, then the combination of name and sequence number.
+  If the same package is downloaded multiple times, it will be placed in different folders with a sequence number.
 
 ##### Example: Receive all packages from a given shared inbox
 
@@ -6371,6 +6437,7 @@ For instructions, refer to section `find` for plugin `node`.
 > Add `ascli aoc` in front of the following commands:
 
 ```bash
+admin analytics application_events
 admin analytics files organization '' aoc_transfer_id
 admin analytics transfers organization --query=@json:'{"status":"completed","direction":"receive","limit":2}' --notify-to=my_email_external --notify-template=@ruby:'%Q{From: <%=from_name%> <<%=from_email%>>\nTo: <<%=to%>>\nSubject: <%=ev["files_completed"]%> files received\n\n<%=ev.to_yaml%>}'
 admin analytics transfers users --once-only=yes
@@ -6385,6 +6452,7 @@ admin ats cluster list
 admin ats cluster show --cloud=aws --region=eu-west-1
 admin ats cluster show 1f412ae7-869a-445c-9c05-02ad16813be2
 admin auth_providers list
+admin bearer_token --display=data
 admin client list
 admin client_access_key list
 admin client_registration_token create @json:'{"data":{"name":"test_client_reg1","client_subject_scopes":["alee","aejd"],"client_subject_enabled":true}}'
@@ -6394,7 +6462,9 @@ admin contact list
 admin dropbox list
 admin dropbox_membership list
 admin group list
+admin group_membership list --fields=ALL --query=@json:'{"page":1,"per_page":50,"embed":"member","inherited":false,"workspace_id":11363,"sort":"name"}'
 admin kms_profile list
+admin node bearer_token %name:my_node_name
 admin node do %name:my_node_name --secret=my_ak_secret browse /
 admin node do %name:my_node_name --secret=my_ak_secret browse /folder_sub --node-cache=no
 admin node do %name:my_node_name --secret=my_ak_secret delete /folder1
@@ -6431,9 +6501,9 @@ automation workflow action wf_id create @json:'{"name":"toto"}'
 automation workflow create @json:'{"name":"test_workflow"}'
 automation workflow delete wf_id
 automation workflow list
-automation workflow list --query=@json:'{"show_org_workflows":"true"}' --scope=admin:all
+automation workflow list --query=@json:'{"show_org_workflows":"true"}'
 automation workflow list --select=@json:'{"name":"test_workflow"}' --fields=id
-bearer_token --display=data --scope=user:all
+bearer_token --display=data
 files bearer /
 files bearer_token_node / --cache-tokens=no
 files browse /
@@ -6448,9 +6518,9 @@ files delete /testsrc
 files download --to-folder=. testdst/test_file.bin testdst/test_file.bin
 files download --transfer=connect testdst/test_file.bin
 files download --transfer=desktop testdst/test_file.bin
-files find /
-files find / '\.partial$'
-files find / @ruby:'->(f){f["type"].eql?("file")}'
+files find /sample_video
+files find /sample_video '\.partial$'
+files find /sample_video @ruby:'->(f){f["type"].eql?("file")}'
 files mkdir /testsrc
 files modify /some_folder @json:'{"mount_point":false}'
 files permission my_test_folder list
@@ -6470,18 +6540,18 @@ files upload --to-folder=/ test_file.bin --url=my_public_link_folder_no_pass
 files upload --to-folder=/testsrc test_file.bin
 files upload --to-folder=/testsrc test_file.bin test_file.bin
 files v3 info
-gateway @json:'{"url":"https://localhost:12345/aspera/faspex"}'
+gateway @json:'{"url":"https://localhost:12346/aspera/faspex"}'
 organization
 organization --format=image --fields=background_image_url --ui=text
 organization --url=my_public_link_recv_from_aoc_user
 packages browse package_id3 /
 packages list
 packages list --query=@json:'{"dropbox_name":"my_shared_inbox_name","sort":"-received_at","archived":false,"received":true,"has_content":true,"exclude_dropbox_packages":false}'
-packages receive ALL --once-only=yes --to-folder=. --lock-port=12345
-packages receive ALL --once-only=yes --to-folder=. --lock-port=12345 --query=@json:'{"dropbox_name":"my_shared_inbox_name","archived":false,"received":true,"has_content":true,"exclude_dropbox_packages":false,"include_draft":false}' --ts=@json:'{"resume_policy":"sparse_csum","target_rate_kbps":50000}'
+packages receive ALL --once-only=yes --to-folder=. --lock-port=50101 --package-folder.fld.0=name --package-folder.fld.1=id --package-folder.opt=true
+packages receive ALL --once-only=yes --to-folder=. --lock-port=50101 --query=@json:'{"dropbox_name":"my_shared_inbox_name","archived":false,"received":true,"has_content":true,"exclude_dropbox_packages":false,"include_draft":false}' --ts=@json:'{"resume_policy":"sparse_csum","target_rate_kbps":50000}'
 packages receive INIT --once-only=yes --query=@json:'{"dropbox_name":"my_shared_inbox_name"}'
 packages receive package_id3 --to-folder=.
-packages receive package_id3 --to-folder=. / --package-folder=name
+packages receive package_id3 --to-folder=. /
 packages send --workspace=my_workspace_shared_inbox --validate-metadata=yes @json:'{"name":"package title","recipients":["my_shared_inbox_meta"],"metadata":[{"input_type":"single-text","name":"Project Id","values":["123"]},{"input_type":"single-dropdown","name":"Type","values":["Opt2"]},{"input_type":"multiple-checkbox","name":"CheckThose","values":["Check1","Check2"]},{"input_type":"date","name":"Optional Date","values":["2021-01-13T15:02:00.000Z"]}]}' test_file.bin
 packages send --workspace=my_workspace_shared_inbox --validate-metadata=yes @json:'{"name":"package title","recipients":["my_shared_inbox_meta"],"metadata":{"Project Id":"456","Type":"Opt2","CheckThose":["Check1","Check2"],"Optional Date":"2021-01-13T15:02:00.000Z"}}' test_file.bin
 packages send --workspace=my_workspace_shared_inbox @json:'{"name":"package title","recipients":["my_shared_inbox_name"]}' test_file.bin
@@ -6513,8 +6583,11 @@ ATS is usable either :
 
 ### IBM Cloud ATS : Creation of API key
 
+> [!NOTE]
+> If you are using ATS as part of AoC, then authentication is through AoC, not IBM Cloud.
+> Refer to the AoC section instead.
+
 This section is about using ATS with an IBM cloud subscription.
-If you are using ATS as part of AoC, then authentication is through AoC, not IBM Cloud.
 
 First get your IBM Cloud API key.
 For instance, it can be created using the IBM Cloud web interface, or using command line:
@@ -6645,6 +6718,7 @@ access_key show ak2ibmcloud
 api_key create
 api_key instances
 api_key list
+aws_trust_policy --region=us-east-1
 cluster clouds
 cluster list
 cluster show --cloud=aws --region=eu-west-1
@@ -6699,13 +6773,14 @@ sync admin overview /data/local_sync
 sync admin status /data/local_sync
 sync pull my_inside_folder --to-folder=/data/local_sync @json:'{"name":"serv_sync_pull_conf","reset":true,"transport":{"target_rate":my_bps}}'
 sync pull my_inside_folder --to-folder=/data/local_sync @json:'{"name":"serv_sync_pull_conf"}'
+upload 'faux:///test.bin?1k' --to-folder=my_upload_folder
 upload --sources=@ts --transfer-info=@json:'{"ascp_args":["--file-list","filelist.txt"]}' --to-folder=my_inside_folder
 upload --sources=@ts --transfer-info=@json:'{"ascp_args":["--file-pair-list","file_pair_list.txt"]}'
 upload --sources=@ts --ts=@json:'{"paths":[{"source":"test_file.bin","destination":"my_inside_folder/other_name_4"}]}' --transfer=transferd
 upload --src-type=pair --sources=@json:'["test_file.bin","my_inside_folder/other_name_3"]' --transfer-info.quiet=false --progress=no
-upload --src-type=pair test_file.bin my_inside_folder/other_name_2 --notify-to=my_email_external --transfer-info=@json:'{"ascp_args":["-l","100m"]}'
-upload --src-type=pair test_file.bin my_upload_folder/other_name_5 --ts=@json:'{"cipher":"aes-192-gcm","content_protection":"encrypt","content_protection_password":"my_secret_here","cookie":"biscuit","create_dir":true,"delete_before_transfer":false,"delete_source":false,"exclude_newer_than":"-1","exclude_older_than":"-10000","fasp_port":33001,"http_fallback":false,"multi_session":0,"overwrite":"diff+older","precalculate_job_size":true,"preserve_access_time":true,"preserve_creation_time":true,"rate_policy":"fair","resume_policy":"sparse_csum","symlink_policy":"follow"}'
-upload --to-folder=my_upload_folder/target_hot --lock-port=12345 --transfer-info=@json:'{"ascp_args":["--remove-after-transfer","--remove-empty-directories","--exclude-newer-than=-8","--src-base","source_hot"]}' source_hot
+upload --src-type=pair test_file.bin my_inside_folder/other_name_2 --notify-to=my_email_external '--transfer-info.ascp_args=@list: -l 100m'
+upload --src-type=pair test_file.bin my_upload_folder/other_name_5 --ts=@json:'{"cipher":"aes-192-gcm","content_protection":"encrypt","content_protection_password":"my_secret_here","cookie":"biscuit","create_dir":true,"delete_before_transfer":false,"delete_source":false,"exclude_newer_than":"-1","exclude_older_than":"-10000","fasp_port":33001,"http_fallback":false,"multi_session":0,"overwrite":"diff+older","precalculate_job_size":true,"preserve_access_time":true,"preserve_creation_time":true,"rate_policy":"fair","resume_policy":"sparse_csum"}'
+upload --to-folder=my_upload_folder/target_hot --lock-port=50101 --transfer-info=@json:'{"ascp_args":["--remove-after-transfer","--remove-empty-directories","--exclude-newer-than=-8","--src-base","hot_folder"]}' hot_folder
 upload test_file.bin --to-folder=my_inside_folder --ts=@json:'{"multi_session":3,"multi_session_threshold":1,"resume_policy":"none","target_rate_kbps":100000}' --transfer-info=@json:'{"spawn_delay_sec":2.5,"multi_incr_udp":false}' --progress-bar=yes
 ```
 
@@ -7253,20 +7328,21 @@ ascli node -N --url=https://... --password="Bearer $(cat bearer.txt)" --root-id=
 --url=https://tst.example.com/path --password='Bearer node_bearer_token' --root-id=bearer_root_id access_key do self browse /
 access_key create @json:'{"id":"my_username","secret":"my_password_here","storage":{"type":"local","path":"/"}}'
 access_key delete my_username
-access_key do my_ak_name browse /
-access_key do my_ak_name delete /test_nd_ak2
-access_key do my_ak_name delete test_nd_ak3
-access_key do my_ak_name download test_nd_ak3 --to-folder=.
-access_key do my_ak_name find my_test_folder
-access_key do my_ak_name find my_test_folder @re:'\.jpg$'
+access_key do my_ak_name browse / --secret=my_ak_secret
+access_key do my_ak_name delete /test_nd_ak2 --secret=my_ak_secret
+access_key do my_ak_name delete test_nd_ak3 --secret=my_ak_secret
+access_key do my_ak_name download test_nd_ak3 --to-folder=. --secret=my_ak_secret
+access_key do my_ak_name find my_test_folder --secret=my_ak_secret
+access_key do my_ak_name find my_test_folder @re:'\.jpg$' --secret=my_ak_secret
 access_key do my_ak_name find my_test_folder @ruby:'->(f){f["name"].end_with?(".jpg")}'
-access_key do my_ak_name mkdir /tst_nd_ak
-access_key do my_ak_name mkfile /mkfile.txt 'hello world'
-access_key do my_ak_name mklink /mklink.txt --query=@json:'{"target":"/mkfile.txt","target_node_id":"123"}'
-access_key do my_ak_name node_info /
-access_key do my_ak_name rename /tst_nd_ak test_nd_ak2
-access_key do my_ak_name show %id:1
-access_key do my_ak_name upload 'faux:///test_nd_ak3?100k' --default-ports=no
+ --secret=my_ak_secret
+access_key do my_ak_name mkdir /tst_nd_ak --secret=my_ak_secret
+access_key do my_ak_name mkfile /mkfile.txt 'hello world' --secret=my_ak_secret
+access_key do my_ak_name mklink /mklink.txt --query=@json:'{"target":"/mkfile.txt","target_node_id":"123"}' --secret=my_ak_secret
+access_key do my_ak_name node_info / --secret=my_ak_secret
+access_key do my_ak_name rename /tst_nd_ak test_nd_ak2 --secret=my_ak_secret
+access_key do my_ak_name show %id:1 --secret=my_ak_secret
+access_key do my_ak_name upload 'faux:///test_nd_ak3?100k' --default-ports=no --secret=my_ak_secret
 access_key do self permission %id:bearer_root_id create @json:'{"access_type":"user","access_id":"666"}'
 access_key do self permission / delete 1
 access_key do self permission / show 1
@@ -7639,7 +7715,7 @@ packages show --box=my_workgroup --group-type=workgroups workgroup_package_id1
 packages show f5_package_id
 packages status f5_p3a @list:,failed,completed
 packages status f5_package_id
-postprocessing @json:'{"url":"https://localhost:8553/asclihook","script_folder":"$(TST)","cert":"$(TMP / "localhost.p12")","key":"changeit"}'
+postprocessing @json:'{"url":"https://localhost:8553/asclihook","script_folder":"$(PATH_SCRIPTS)","cert":"$(TMP / "localhost.p12")","key":"changeit"}'
 shared browse %name:my_src
 shared list
 shared_folders browse %name:my_shared_folder_name
@@ -8246,12 +8322,12 @@ health
 login_methods
 me
 package list --query.max=5
-package receive ALL --once-only=yes --to-folder=. --query=@json:'{"max":10}'
-package receive f4_db1c --recipient='*my_dbx' --to-folder=.
-package receive f4_db1g --recipient='*my_wkg' --to-folder=.
-package receive f4_pria --to-folder=.
-package receive f4_prs --to-folder=.
-package receive f4_prsc --to-folder=. --box=sent
+package receive ALL --once-only=yes --to-folder=. --query.max=10
+package receive f4_package_id --to-folder=.
+package receive f4_package_id2 --to-folder=. --box=sent
+package receive f4_package_id3 --to-folder=.
+package receive f4_package_id4 --recipient='*my_dbx' --to-folder=.
+package receive f4_package_id5 --recipient='*my_wkg' --to-folder=.
 package send --delivery-info=@json:'{"title":"package title","recipients":["my_email_internal","my_username"]}' test_file.bin
 package send --delivery-info=@json:'{"title":"package title","recipients":["my_email_internal"]}' --remote-source=%name:my_src sample_source.txt
 package send --delivery-info=@json:'{"title":"package title","recipients":[*my_dbx]}' test_file.bin
@@ -8375,16 +8451,26 @@ transfer smart sub my_smart_id @: source.paths.0=my_smart_file source_type=user_
 ```bash
 health
 info
+monitors
 plugins
 processes
 workflow details my_workflow_id
 workflow export my_workflow_id
 workflow inputs my_workflow_id
 workflow list
+workflow outputs my_workflow_id
 workflow start my_workflow_id @json:'{"Param":"world !"}'
 workflow start my_workflow_id @json:'{"Param":"world !"}' --result=ResultStep:Complete_status_message
 workflow status ALL
 workflow status my_workflow_id
+workflow workorders my_workflow_id
+workflow workorders my_workflow_id --fields=id --query.max_results=1
+workorder cancel orch_workorder_id
+workorder output orch_workorder_id
+workorder reset orch_workorder_id
+workorder status orch_workorder_id
+workstep cancel 1
+workstep status 1
 ```
 
 ## Plugin: `cos`: IBM Cloud Object Storage
@@ -8946,7 +9032,7 @@ Some `sync` parameters are filled by the related plugin using transfer spec para
 
 > [!NOTE]
 > All `sync` commands require an `async` enabled license and availability of the `async` executable (and `asyncadmin`).
->The Aspera Transfer Daemon 1.3+ includes this.
+> The Aspera Transfer Daemon 1.3+ includes this.
 
 ### Starting a sync session
 
@@ -8969,7 +9055,7 @@ An optional positional `Hash` argument (`sync_info`) can be provided in either `
 
 A single session can be specified using either formats.
 
-If argument `<sync_info>` is not provided, then a default configuration is generated in the `conf` format as specified in the next sectin.
+If argument `<sync_info>` is not provided, then a default configuration is generated in the `conf` format as specified in the next section.
 
 If argument `<sync_info>` is provided, it defines the format to use.
 If parameter `sessions` or `instance` is present, then `args` is used, else `conf` is used.