dash 3.1.5 → 3.2.1

data/lib/{kamal → dash}/configuration/loadbalancer.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Loadbalancer < Kamal::Configuration::Proxy
+class Dash::Configuration::Loadbalancer < Dash::Configuration::Proxy
   CONTAINER_NAME = "load-balancer".freeze
   SHARED_CONTAINER_NAME = "kamal-proxy".freeze
 
@@ -40,7 +40,7 @@ class Kamal::Configuration::Loadbalancer < Kamal::Configuration::Proxy
   # mount and the run command) to boot from, so fall back to an empty config
   # rather than to nil.
   def run
-    @run ||= Kamal::Configuration::Proxy::Run.new(config, run_config: {})
+    @run ||= Dash::Configuration::Proxy::Run.new(config, run_config: {})
   end
 
   # Docker options for the load balancer container: publish/logging/options
@@ -100,7 +100,7 @@ class Kamal::Configuration::Loadbalancer < Kamal::Configuration::Proxy
 
   private
     # The edge half of the layering contract (see
-    # Kamal::Configuration::Proxy::DEPLOY_OPTION_DISPOSITIONS): the load
+    # Dash::Configuration::Proxy::DEPLOY_OPTION_DISPOSITIONS): the load
     # balancer applies the edge and shared concerns, and leaves the per-app
     # ones to the per-host proxies it forwards to.
     def retained_dispositions

data/lib/{kamal → dash}/configuration/logging.rb

@@ -1,7 +1,7 @@
-class Kamal::Configuration::Logging
-  delegate :optionize, :argumentize, to: Kamal::Utils
+class Dash::Configuration::Logging
+  delegate :optionize, :argumentize, to: Dash::Utils
 
-  include Kamal::Configuration::Validation
+  include Dash::Configuration::Validation
 
   attr_reader :logging_config
 

data/lib/{kamal → dash}/configuration/output.rb

@@ -1,9 +1,9 @@
-class Kamal::Configuration::Output
-  include Kamal::Configuration::Validation
+class Dash::Configuration::Output
+  include Dash::Configuration::Validation
 
   LOGGER_TYPES = {
-    "otel" => "Kamal::Output::OtelLogger",
-    "file" => "Kamal::Output::FileLogger"
+    "otel" => "Dash::Output::OtelLogger",
+    "file" => "Dash::Output::FileLogger"
   }
 
   attr_reader :output_config, :loggers

data/lib/{kamal → dash}/configuration/proxy/acme.rb

@@ -8,7 +8,7 @@
 # Credentials go the other way, through an env file uploaded at mode 0600. A DNS
 # API token can rewrite your zone; `docker run --env TOKEN=...` would put it in
 # the host's process listing and in kamal's own audit log.
-class Kamal::Configuration::Proxy::Acme
+class Dash::Configuration::Proxy::Acme
   # The canonical provider names kamal-proxy MINIMUM_VERSION advertises. Kept in
   # step with the proxy by test/proxy_flag_coverage_test.rb, which compares this
   # list against the manifest bin/sync-proxy-flags generates from the image.
@@ -53,7 +53,7 @@ class Kamal::Configuration::Proxy::Acme
   # as a stray argument. Both booleans default to true in the proxy, which makes
   # false the value an operator actually writes.
   def run_command_args
-    Kamal::Utils.optionize(run_command_options, with: "=")
+    Dash::Utils.optionize(run_command_options, with: "=")
   end
 
   # compact, not compact_blank: false is a meaningful value for both booleans.
@@ -63,7 +63,8 @@ class Kamal::Configuration::Proxy::Acme
       "acme-dns-provider": dns_provider_entries,
       "acme-directory": acme_config["directory"],
       "acme-prefer-wildcard": acme_config["prefer_wildcard"],
-      "acme-http-fallback": acme_config["http_fallback"]
+      "acme-http-fallback": acme_config["http_fallback"],
+      "acme-release-probe-interval": Dash::Utils.seconds_duration(acme_config["release_probe_interval"])
     }.compact
   end
 

data/lib/{kamal → dash}/configuration/proxy/boot.rb

@@ -1,6 +1,6 @@
-class Kamal::Configuration::Proxy::Boot
+class Dash::Configuration::Proxy::Boot
   attr_reader :config
-  delegate :argumentize, :optionize, to: Kamal::Utils
+  delegate :argumentize, :optionize, to: Dash::Utils
 
   def initialize(config:)
     @config = config
@@ -11,8 +11,8 @@ class Kamal::Configuration::Proxy::Boot
 
     (bind_ips || [ nil ]).map do |bind_ip|
       bind_ip = format_bind_ip(bind_ip)
-      publish_http = [ bind_ip, http_port, Kamal::Configuration::Proxy::Run::DEFAULT_HTTP_PORT ].compact.join(":")
-      publish_https = [ bind_ip, https_port, Kamal::Configuration::Proxy::Run::DEFAULT_HTTPS_PORT ].compact.join(":")
+      publish_http = [ bind_ip, http_port, Dash::Configuration::Proxy::Run::DEFAULT_HTTP_PORT ].compact.join(":")
+      publish_https = [ bind_ip, https_port, Dash::Configuration::Proxy::Run::DEFAULT_HTTPS_PORT ].compact.join(":")
 
       argumentize "--publish", [ publish_http, publish_https ]
     end.join(" ")
@@ -24,8 +24,8 @@ class Kamal::Configuration::Proxy::Boot
 
   def default_boot_options
     [
-      *(publish_args(Kamal::Configuration::Proxy::Run::DEFAULT_HTTP_PORT, Kamal::Configuration::Proxy::Run::DEFAULT_HTTPS_PORT, nil)),
-      *(logging_args(Kamal::Configuration::Proxy::Run::DEFAULT_LOG_MAX_SIZE))
+      *(publish_args(Dash::Configuration::Proxy::Run::DEFAULT_HTTP_PORT, Dash::Configuration::Proxy::Run::DEFAULT_HTTPS_PORT, nil)),
+      *(logging_args(Dash::Configuration::Proxy::Run::DEFAULT_LOG_MAX_SIZE))
     ]
   end
 
@@ -34,13 +34,15 @@ class Kamal::Configuration::Proxy::Boot
   end
 
   def image_name
-    "kamal-proxy"
+    "dash-proxy"
   end
 
   def image_default
     "#{repository_name}/#{image_name}"
   end
 
+  # Stays kamal-proxy until the server-artifact rename ships a migration
+  # bridge — every deployed host has a running container by this name.
   def container_name
     "kamal-proxy"
   end
@@ -74,7 +76,7 @@ class Kamal::Configuration::Proxy::Boot
   end
 
   def apps_volume
-    Kamal::Configuration::Volume.new \
+    Dash::Configuration::Volume.new \
       host_path: apps_directory,
       container_path: apps_container_directory
   end

data/lib/{kamal → dash}/configuration/proxy/run.rb

@@ -1,12 +1,12 @@
-class Kamal::Configuration::Proxy::Run
-  MINIMUM_VERSION = "v1.0.0.5"
+class Dash::Configuration::Proxy::Run
+  MINIMUM_VERSION = "v1.0.0.7"
   DEFAULT_HTTP_PORT = 80
   DEFAULT_HTTPS_PORT = 443
   DEFAULT_LOG_MAX_SIZE = "10m"
 
   # One env file for everything the proxy must know but nothing may print:
   # ACME DNS credentials and the cache store URL. Also referenced by
-  # Kamal::Commands::Proxy#remove_proxy_secrets_file, which cleans it up when
+  # Dash::Commands::Proxy#remove_proxy_secrets_file, which cleans it up when
   # the config no longer needs it.
   SECRETS_FILENAME = "secrets.env"
 
@@ -15,7 +15,7 @@ class Kamal::Configuration::Proxy::Run
   DIGEST_SCHEMA_VERSION = "v1"
 
   attr_reader :config, :run_config
-  delegate :argumentize, :optionize, :seconds_duration, to: Kamal::Utils
+  delegate :argumentize, :optionize, :seconds_duration, to: Dash::Utils
 
   def initialize(config, run_config:, context: "proxy/run")
     @config = config
@@ -37,13 +37,13 @@ class Kamal::Configuration::Proxy::Run
   # running. The values deliberately stay out — the digest is published as a
   # docker label, and hashing secret material into a world-readable label buys
   # an offline guessing target for nothing. Rotating a credential's value or
-  # the store URL still needs an explicit `kamal proxy reboot`.
+  # the store URL still needs an explicit `dash proxy reboot`.
   def config_digest
     self.class.digest(image, run_command, *docker_options_args, *secret_names)
   end
 
   def acme
-    @acme ||= Kamal::Configuration::Proxy::Acme.new(acme_config: run_config["acme"], secrets: config.secrets)
+    @acme ||= Dash::Configuration::Proxy::Acme.new(acme_config: run_config["acme"], secrets: config.secrets)
   end
 
   def debug?
@@ -95,7 +95,7 @@ class Kamal::Configuration::Proxy::Run
   end
 
   def repository
-    run_config.fetch("repository", "ghcr.io/zoolutions/kamal-proxy")
+    run_config.fetch("repository", "ghcr.io/zoolutions/dash-proxy")
   end
 
   def image
@@ -194,14 +194,14 @@ class Kamal::Configuration::Proxy::Run
   # wakes - which the operator sees as one hung request, not as a misconfiguration.
   def docker_socket_args
     if docker_socket.present?
-      Kamal::Configuration::Volume.new(host_path: docker_socket, container_path: docker_socket).docker_args
+      Dash::Configuration::Volume.new(host_path: docker_socket, container_path: docker_socket).docker_args
     end
   end
 
   # Where the proxy's secrets land on the host - the ACME DNS credentials and
   # the cache store URL, which may embed one. Under the proxy's own directory
   # rather than the app's env directory, because the container is host-scoped
-  # and shared by every app on the host - and so `kamal proxy remove` takes
+  # and shared by every app on the host - and so `dash proxy remove` takes
   # the secrets with it.
   def secrets_path
     File.join host_directory, SECRETS_FILENAME
@@ -212,7 +212,7 @@ class Kamal::Configuration::Proxy::Run
   end
 
   def secrets_io
-    Kamal::EnvFile.new(acme.credentials_env.merge(cache_store_env)).to_io
+    Dash::EnvFile.new(acme.credentials_env.merge(cache_store_env)).to_io
   end
 
   def host_directory
@@ -228,7 +228,7 @@ class Kamal::Configuration::Proxy::Run
   end
 
   def apps_volume
-    Kamal::Configuration::Volume.new \
+    Dash::Configuration::Volume.new \
       host_path: apps_directory,
       container_path: apps_container_directory
   end
@@ -255,7 +255,7 @@ class Kamal::Configuration::Proxy::Run
   end
 
   # Whether an operator turned on PROXY protocol without saying who may speak
-  # it. Kamal::Configuration warns about this: the header rewrites the
+  # it. Dash::Configuration warns about this: the header rewrites the
   # connecting address that allow_ips and rate_limit key on, so honouring it
   # from anywhere is a client-IP spoofing hole.
   def proxy_protocol_unrestricted?
@@ -264,7 +264,7 @@ class Kamal::Configuration::Proxy::Run
 
   private
     # The proxy's own listeners and process-level behaviour, as opposed to the
-    # per-service deadlines in Kamal::Configuration::Proxy#deploy_options. Zero
+    # per-service deadlines in Dash::Configuration::Proxy#deploy_options. Zero
     # disables each of the timeouts, so it is a value rather than an absence.
     def server_options
       {
@@ -295,7 +295,7 @@ class Kamal::Configuration::Proxy::Run
       conflicts = flags.keys.map(&:to_s) & named_run_command_options.keys.map(&:to_s)
       return true if conflicts.empty?
 
-      raise Kamal::ConfigurationError,
+      raise Dash::ConfigurationError,
         "#{@context}/flags: #{conflicts.sort.join(", ")} is already set by a named key - remove one of them"
     end
 

data/lib/{kamal → dash}/configuration/proxy.rb

@@ -1,5 +1,5 @@
-class Kamal::Configuration::Proxy
-  include Kamal::Configuration::Validation
+class Dash::Configuration::Proxy
+  include Dash::Configuration::Validation
 
   DEFAULT_LOG_REQUEST_HEADERS = [ "Cache-Control", "Last-Modified", "User-Agent" ]
   CONTAINER_NAME = "kamal-proxy"
@@ -163,12 +163,12 @@ class Kamal::Configuration::Proxy
   # where it matters.
   def self.disposition(key)
     DEPLOY_OPTION_DISPOSITIONS.fetch(key) do
-      raise Kamal::ConfigurationError,
-        "proxy deploy option --#{key} has no layering disposition - add it to Kamal::Configuration::Proxy::DEPLOY_OPTION_DISPOSITIONS"
+      raise Dash::ConfigurationError,
+        "proxy deploy option --#{key} has no layering disposition - add it to Dash::Configuration::Proxy::DEPLOY_OPTION_DISPOSITIONS"
     end
   end
 
-  delegate :argumentize, :optionize, :seconds_duration, to: Kamal::Utils
+  delegate :argumentize, :optionize, :seconds_duration, to: Dash::Utils
 
   attr_reader :config, :proxy_config, :role_name, :run, :secrets
 
@@ -182,8 +182,8 @@ class Kamal::Configuration::Proxy
     @role_name = role_name
     @load_balanced = load_balanced
     @secrets = secrets
-    validate! @proxy_config, with: Kamal::Configuration::Validator::Proxy, context: context
-    @run = Kamal::Configuration::Proxy::Run.new(config, run_config: @proxy_config["run"], context: "#{context}/run") if @proxy_config && @proxy_config["run"].present?
+    validate! @proxy_config, with: Dash::Configuration::Validator::Proxy, context: context
+    @run = Dash::Configuration::Proxy::Run.new(config, run_config: @proxy_config["run"], context: "#{context}/run") if @proxy_config && @proxy_config["run"].present?
   end
 
   def app_port
@@ -274,7 +274,7 @@ class Kamal::Configuration::Proxy
     ssl_config["on_demand_url"]
   end
 
-  # The name of a secret in .kamal/secrets holding the CA bundle client
+  # The name of a secret in .dash/secrets holding the CA bundle client
   # certificates must chain to - mirroring ssl.certificate_pem, not a local
   # file path. Kamal uploads the content into the app's TLS directory, which
   # the proxy container already mounts, and hands the proxy the path it sees
@@ -287,14 +287,14 @@ class Kamal::Configuration::Proxy
     client_ca_pem.present?
   end
 
-  # Resolved at upload time, not config time, so `kamal app logs` and friends
+  # Resolved at upload time, not config time, so `dash app logs` and friends
   # work on machines without the secret. A blank secret raises like
   # basic_auth.password_secret - silently deploying without the client CA
   # would turn mTLS off.
   def client_ca_pem_content
     secrets[client_ca_pem].tap do |content|
       if content.blank?
-        raise Kamal::ConfigurationError, "proxy/ssl: client_ca_pem secret '#{client_ca_pem}' is empty"
+        raise Dash::ConfigurationError, "proxy/ssl: client_ca_pem secret '#{client_ca_pem}' is empty"
       end
     end
   end
@@ -405,7 +405,7 @@ class Kamal::Configuration::Proxy
   private
     # Which dispositions this layer keeps. The per-app proxy behind a load
     # balancer sheds the edge concerns; without load balancing there is no
-    # other layer to defer to. Kamal::Configuration::Loadbalancer overrides
+    # other layer to defer to. Dash::Configuration::Loadbalancer overrides
     # this to keep the edge and shed the per-app concerns.
     def retained_dispositions
       load_balancing? ? %i[ per_app both ] : %i[ edge per_app both ]
@@ -417,7 +417,7 @@ class Kamal::Configuration::Proxy
 
     # Auto-activation needs a role the load balancer can actually front. The
     # target list is built from roles where `running_proxy?` (see
-    # Kamal::Cli::Proxy#loadbalancer), so a proxy-less primary role would boot a
+    # Dash::Cli::Proxy#loadbalancer), so a proxy-less primary role would boot a
     # load balancer with an empty --target. An explicit `loadbalancer:` setting
     # skips this check — the operator asked for it.
     def auto_load_balanced_primary_role?
@@ -473,7 +473,7 @@ class Kamal::Configuration::Proxy
     # app hosts have the docker socket and the containers).
     #
     # Sleep needs the container runtime socket, which is a run-level setting -
-    # Kamal::Configuration#ensure_sleep_has_a_docker_socket refuses the pairing
+    # Dash::Configuration#ensure_sleep_has_a_docker_socket refuses the pairing
     # rather than letting the first request after an idle period hang.
     def lifecycle_options
       affinity = proxy_config["session_affinity"] || {}
@@ -602,7 +602,7 @@ class Kamal::Configuration::Proxy
 
     # kamal-proxy takes the credential as <username>:<password> and cuts at the
     # first colon, so a password may contain colons but a username may not (the
-    # validator enforces that). The password is read from .kamal/secrets when
+    # validator enforces that). The password is read from .dash/secrets when
     # password_secret names it, so it need not live in deploy.yml.
     def basic_auth_credential
       basic_auth = proxy_config["basic_auth"]
@@ -619,13 +619,13 @@ class Kamal::Configuration::Proxy
       # means the named secret resolved empty. Fail rather than drop the flag —
       # silently deploying an unprotected service is the worse outcome.
       if password.blank?
-        raise Kamal::ConfigurationError, "proxy/basic_auth: password_secret '#{secret_name}' is empty"
+        raise Dash::ConfigurationError, "proxy/basic_auth: password_secret '#{secret_name}' is empty"
       end
 
       # Sensitive, so SSHKit redacts the credential wherever kamal prints the
       # deploy command - at :info verbosity it used to land in plain text
       # (registry-login precedent; Utils.optionize passes the marking through).
-      Kamal::Utils.sensitive("#{basic_auth["username"]}:#{password}")
+      Dash::Utils.sensitive("#{basic_auth["username"]}:#{password}")
     end
 
     # Serves both --path-timeout and --path-request-timeout, which kamal-proxy

data/lib/{kamal → dash}/configuration/registry.rb

@@ -1,10 +1,10 @@
-class Kamal::Configuration::Registry
-  include Kamal::Configuration::Validation
+class Dash::Configuration::Registry
+  include Dash::Configuration::Validation
 
   def initialize(config:, secrets:, context: "registry")
     @registry_config = config["registry"] || {}
     @secrets = secrets
-    validate! registry_config, context: context, with: Kamal::Configuration::Validator::Registry
+    validate! registry_config, context: context, with: Dash::Configuration::Validator::Registry
   end
 
   def server

data/lib/{kamal → dash}/configuration/role/healthcheck.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Role::Healthcheck
+class Dash::Configuration::Role::Healthcheck
   DEFAULT_PATH = "/up"
   DEFAULT_INTERVAL = 1
 
@@ -7,7 +7,7 @@ class Kamal::Configuration::Role::Healthcheck
   DOCKER_ONLY_KEYS = %w[ cmd port path interval timeout retries start_period start_interval ]
 
   attr_reader :healthcheck_config, :context
-  delegate :optionize, to: Kamal::Utils
+  delegate :optionize, to: Dash::Utils
 
   def initialize(healthcheck_config:, context: "healthcheck")
     @healthcheck_config = healthcheck_config
@@ -90,6 +90,6 @@ class Kamal::Configuration::Role::Healthcheck
     end
 
     def error(message, context: nil)
-      raise Kamal::ConfigurationError, "#{[ @context, context ].compact.join("/")}: #{message}"
+      raise Dash::ConfigurationError, "#{[ @context, context ].compact.join("/")}: #{message}"
     end
 end

data/lib/{kamal → dash}/configuration/role.rb

@@ -1,7 +1,7 @@
-class Kamal::Configuration::Role
-  include Kamal::Configuration::Validation
+class Dash::Configuration::Role
+  include Dash::Configuration::Validation
 
-  delegate :argumentize, :optionize, to: Kamal::Utils
+  delegate :argumentize, :optionize, to: Dash::Utils
 
   attr_reader :name, :config, :specialized_env, :specialized_logging, :specialized_proxy, :healthcheck
 
@@ -13,20 +13,20 @@ class Kamal::Configuration::Role
       role_config,
       example: validation_yml["servers"]["workers"],
       context: "servers/#{name}",
-      with: Kamal::Configuration::Validator::Role
+      with: Dash::Configuration::Validator::Role
 
-    @specialized_env = Kamal::Configuration::Env.new \
+    @specialized_env = Dash::Configuration::Env.new \
       config: specializations.fetch("env", {}),
       secrets: config.secrets,
       context: "servers/#{name}/env"
 
-    @specialized_logging = Kamal::Configuration::Logging.new \
+    @specialized_logging = Dash::Configuration::Logging.new \
       logging_config: specializations.fetch("logging", {}),
       context: "servers/#{name}/logging"
 
     # `healthcheck: false` is an opt-out, not a healthcheck — it leaves @healthcheck nil.
     if healthcheck_config = specializations["healthcheck"]
-      @healthcheck = Kamal::Configuration::Role::Healthcheck.new \
+      @healthcheck = Dash::Configuration::Role::Healthcheck.new \
         healthcheck_config: healthcheck_config,
         context: "servers/#{name}/healthcheck"
     end
@@ -79,7 +79,7 @@ class Kamal::Configuration::Role
   end
 
   # Kept out of option_args on purpose: Commands::App::Execution splats those into
-  # one-shot `kamal app exec` containers, which must not inherit a service healthcheck.
+  # one-shot `dash app exec` containers, which must not inherit a service healthcheck.
   def healthcheck_args
     healthcheck&.args || []
   end
@@ -94,13 +94,13 @@ class Kamal::Configuration::Role
   # `boot.wait` a second time inside every group.
   #
   # Built on first read rather than in the initializer — Servers.new constructs every Role
-  # before Kamal::Configuration#initialize has finished assigning its own collaborators.
+  # before Dash::Configuration#initialize has finished assigning its own collaborators.
   def boot
     return @boot if defined?(@boot)
 
     @boot =
       if (boot_config = specializations["boot"])
-        Kamal::Configuration::Boot.new \
+        Dash::Configuration::Boot.new \
           config: config, boot_config: boot_config, context: "servers/#{name}/boot"
       end
   end
@@ -235,7 +235,7 @@ class Kamal::Configuration::Role
 
   def asset_volume(version = config.version)
     if assets?
-      Kamal::Configuration::Volume.new \
+      Dash::Configuration::Volume.new \
         host_path: asset_volume_directory(version), container_path: asset_path, options: asset_path_options
     end
   end
@@ -255,7 +255,7 @@ class Kamal::Configuration::Role
   def ensure_one_host_for_ssl
     # Skip SSL validation when a loadbalancer is present or custom certificates are provided
     if running_proxy? && proxy.ssl? && hosts.size > 1 && !proxy.loadbalancer.present? && !proxy.custom_ssl_certificate?
-      raise Kamal::ConfigurationError, "SSL is only supported on a single server unless you provide custom certificates or configure a loadbalancer, found #{hosts.size} servers for role #{name}"
+      raise Dash::ConfigurationError, "SSL is only supported on a single server unless you provide custom certificates or configure a loadbalancer, found #{hosts.size} servers for role #{name}"
     end
   end
 
@@ -274,7 +274,7 @@ class Kamal::Configuration::Role
       if running_proxy?
         proxy_config = proxy_specializations == true || proxy_specializations.nil? ? {} : proxy_specializations
 
-        @specialized_proxy = Kamal::Configuration::Proxy.new \
+        @specialized_proxy = Dash::Configuration::Proxy.new \
           config: config,
           proxy_config: proxy_config,
           secrets: config.secrets,

data/lib/{kamal → dash}/configuration/servers.rb

@@ -1,14 +1,14 @@
-class Kamal::Configuration::Servers
-  include Kamal::Configuration::Validation
+class Dash::Configuration::Servers
+  include Dash::Configuration::Validation
 
   attr_reader :config, :servers_config, :roles
 
   def initialize(config:)
     @config = config
     @servers_config = config.raw_config.servers
-    validate! servers_config, with: Kamal::Configuration::Validator::Servers
+    validate! servers_config, with: Dash::Configuration::Validator::Servers
 
-    @roles = role_names.map { |role_name| Kamal::Configuration::Role.new role_name, config: config }
+    @roles = role_names.map { |role_name| Dash::Configuration::Role.new role_name, config: config }
   end
 
   private

data/lib/{kamal → dash}/configuration/ssh.rb

@@ -1,7 +1,7 @@
-class Kamal::Configuration::Ssh
+class Dash::Configuration::Ssh
   LOGGER = ::Logger.new(STDERR)
 
-  include Kamal::Configuration::Validation
+  include Dash::Configuration::Validation
 
   attr_reader :ssh_config, :secrets
 
@@ -43,7 +43,7 @@ class Kamal::Configuration::Ssh
       if secrets.key?(k)
         secrets[k]
       else
-        warn "Inline key_data usage is deprecated and will be removed in Kamal 3. Please store your key_data in a secret."
+        warn "Inline key_data usage is deprecated and will be removed in a future dash release. Please store your key_data in a secret."
         k
       end
     end

data/lib/{kamal → dash}/configuration/sshkit.rb

@@ -1,5 +1,5 @@
-class Kamal::Configuration::Sshkit
-  include Kamal::Configuration::Validation
+class Dash::Configuration::Sshkit
+  include Dash::Configuration::Validation
 
   attr_reader :sshkit_config
 

data/lib/{kamal → dash}/configuration/validation.rb

@@ -1,7 +1,7 @@
 require "yaml"
 require "active_support/inflector"
 
-module Kamal::Configuration::Validation
+module Dash::Configuration::Validation
   extend ActiveSupport::Concern
 
   class_methods do
@@ -14,7 +14,7 @@ module Kamal::Configuration::Validation
     end
   end
 
-  def validate!(config, example: nil, context: nil, with: Kamal::Configuration::Validator)
+  def validate!(config, example: nil, context: nil, with: Dash::Configuration::Validator)
     context ||= self.class.validation_config_key
     example ||= validation_yml[self.class.validation_config_key]
 

data/lib/{kamal → dash}/configuration/validator/accessory.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Accessory < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Accessory < Dash::Configuration::Validator
   def validate!
     super
 

data/lib/{kamal → dash}/configuration/validator/alias.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Alias < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Alias < Dash::Configuration::Validator
   def validate!
     super
 
@@ -8,7 +8,7 @@ class Kamal::Configuration::Validator::Alias < Kamal::Configuration::Validator
       error "Invalid alias name: '#{name}'. Must only contain lowercase letters, alphanumeric, hyphens and underscores."
     end
 
-    if Kamal::Cli::Main.commands.include?(name)
+    if Dash::Cli::Main.commands.include?(name)
       error "Alias '#{name}' conflicts with a built-in command."
     end
   end

data/lib/{kamal → dash}/configuration/validator/builder.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Builder < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Builder < Dash::Configuration::Validator
   def validate!
     super
 

data/lib/dash/configuration/validator/configuration.rb

@@ -0,0 +1,6 @@
+class Dash::Configuration::Validator::Configuration < Dash::Configuration::Validator
+  private
+    def allow_extensions?
+      true
+    end
+end

data/lib/{kamal → dash}/configuration/validator/env.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Env < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Env < Dash::Configuration::Validator
   SPECIAL_KEYS = [ "clear", "secret", "tags" ]
 
   def validate!
@@ -39,7 +39,7 @@ class Kamal::Configuration::Validator::Env < Kamal::Configuration::Validator
             with_context(tag) do
               validate_type! value, Hash
 
-              Kamal::Configuration::Validator::Env.new(
+              Dash::Configuration::Validator::Env.new(
                 value,
                 example: example["tags"].values[1],
                 context: context

data/lib/{kamal → dash}/configuration/validator/proxy.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
   def validate!
     unless config.nil?
       super
@@ -149,7 +149,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
             validate_dns_provider_zones! provider
           elsif provider.present? && !supported_dns_provider?(provider)
             error "unsupported dns_provider '#{provider}'. " \
-              "Supported providers: #{Kamal::Configuration::Proxy::Acme::DNS_PROVIDERS.join(", ")}"
+              "Supported providers: #{Dash::Configuration::Proxy::Acme::DNS_PROVIDERS.join(", ")}"
           end
         end
       end
@@ -175,13 +175,13 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
 
         unless zone_provider.is_a?(String) && supported_dns_provider?(zone_provider)
           error "unsupported dns_provider '#{zone_provider}' for '#{zone}'. " \
-            "Supported providers: #{Kamal::Configuration::Proxy::Acme::DNS_PROVIDERS.join(", ")}"
+            "Supported providers: #{Dash::Configuration::Proxy::Acme::DNS_PROVIDERS.join(", ")}"
         end
       end
     end
 
     def supported_dns_provider?(provider)
-      Kamal::Configuration::Proxy::Acme::SUPPORTED_DNS_PROVIDERS.include?(provider.to_s.downcase)
+      Dash::Configuration::Proxy::Acme::SUPPORTED_DNS_PROVIDERS.include?(provider.to_s.downcase)
     end
 
     # The whole TLS surface lives in the one `ssl` hash: certificate material,
@@ -278,7 +278,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
     # Session affinity and scale-to-zero. The one rule NOT here is that sleep
     # needs proxy/run/docker_socket: a role can carry `sleep` while the root
     # carries the socket, and this validator runs against the role's own proxy
-    # block before it is merged. Kamal::Configuration checks that pairing on the
+    # block before it is merged. Dash::Configuration checks that pairing on the
     # merged config instead.
     def validate_lifecycle!
       affinity = config["session_affinity"] || {}
@@ -604,11 +604,11 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
         end
 
         encodings.each do |encoding|
-          canonical = Kamal::Configuration::Proxy::COMPRESSION_ENCODING_ALIASES.fetch(encoding.to_s, encoding.to_s)
+          canonical = Dash::Configuration::Proxy::COMPRESSION_ENCODING_ALIASES.fetch(encoding.to_s, encoding.to_s)
 
-          unless Kamal::Configuration::Proxy::SUPPORTED_COMPRESSION_ENCODINGS.include?(canonical)
+          unless Dash::Configuration::Proxy::SUPPORTED_COMPRESSION_ENCODINGS.include?(canonical)
             error "unsupported encoding '#{encoding}'. " \
-              "Supported encodings: #{Kamal::Configuration::Proxy::SUPPORTED_COMPRESSION_ENCODINGS.join(", ")}"
+              "Supported encodings: #{Dash::Configuration::Proxy::SUPPORTED_COMPRESSION_ENCODINGS.join(", ")}"
           end
         end