dash 3.2.0 → 4.0.0

data/lib/{kamal → dash}/configuration/proxy/boot.rb

@@ -1,6 +1,6 @@
-class Kamal::Configuration::Proxy::Boot
+class Dash::Configuration::Proxy::Boot
   attr_reader :config
-  delegate :argumentize, :optionize, to: Kamal::Utils
+  delegate :argumentize, :optionize, to: Dash::Utils
 
   def initialize(config:)
     @config = config
@@ -11,8 +11,8 @@ class Kamal::Configuration::Proxy::Boot
 
     (bind_ips || [ nil ]).map do |bind_ip|
       bind_ip = format_bind_ip(bind_ip)
-      publish_http = [ bind_ip, http_port, Kamal::Configuration::Proxy::Run::DEFAULT_HTTP_PORT ].compact.join(":")
-      publish_https = [ bind_ip, https_port, Kamal::Configuration::Proxy::Run::DEFAULT_HTTPS_PORT ].compact.join(":")
+      publish_http = [ bind_ip, http_port, Dash::Configuration::Proxy::Run::DEFAULT_HTTP_PORT ].compact.join(":")
+      publish_https = [ bind_ip, https_port, Dash::Configuration::Proxy::Run::DEFAULT_HTTPS_PORT ].compact.join(":")
 
       argumentize "--publish", [ publish_http, publish_https ]
     end.join(" ")
@@ -24,8 +24,8 @@ class Kamal::Configuration::Proxy::Boot
 
   def default_boot_options
     [
-      *(publish_args(Kamal::Configuration::Proxy::Run::DEFAULT_HTTP_PORT, Kamal::Configuration::Proxy::Run::DEFAULT_HTTPS_PORT, nil)),
-      *(logging_args(Kamal::Configuration::Proxy::Run::DEFAULT_LOG_MAX_SIZE))
+      *(publish_args(Dash::Configuration::Proxy::Run::DEFAULT_HTTP_PORT, Dash::Configuration::Proxy::Run::DEFAULT_HTTPS_PORT, nil)),
+      *(logging_args(Dash::Configuration::Proxy::Run::DEFAULT_LOG_MAX_SIZE))
     ]
   end
 
@@ -41,10 +41,8 @@ class Kamal::Configuration::Proxy::Boot
     "#{repository_name}/#{image_name}"
   end
 
-  # Stays kamal-proxy until the server-artifact rename ships a migration
-  # bridge — every deployed host has a running container by this name.
   def container_name
-    "kamal-proxy"
+    Dash::Configuration::Proxy::CONTAINER_NAME
   end
 
   def host_directory
@@ -72,11 +70,11 @@ class Kamal::Configuration::Proxy::Boot
   end
 
   def apps_container_directory
-    "/home/kamal-proxy/.apps-config"
+    "/home/dash-proxy/.apps-config"
   end
 
   def apps_volume
-    Kamal::Configuration::Volume.new \
+    Dash::Configuration::Volume.new \
       host_path: apps_directory,
       container_path: apps_container_directory
   end

data/lib/{kamal → dash}/configuration/proxy/run.rb

@@ -1,12 +1,12 @@
-class Kamal::Configuration::Proxy::Run
-  MINIMUM_VERSION = "v1.0.0.6"
+class Dash::Configuration::Proxy::Run
+  MINIMUM_VERSION = "v1.1.0.0"
   DEFAULT_HTTP_PORT = 80
   DEFAULT_HTTPS_PORT = 443
   DEFAULT_LOG_MAX_SIZE = "10m"
 
   # One env file for everything the proxy must know but nothing may print:
   # ACME DNS credentials and the cache store URL. Also referenced by
-  # Kamal::Commands::Proxy#remove_proxy_secrets_file, which cleans it up when
+  # Dash::Commands::Proxy#remove_proxy_secrets_file, which cleans it up when
   # the config no longer needs it.
   SECRETS_FILENAME = "secrets.env"
 
@@ -15,7 +15,7 @@ class Kamal::Configuration::Proxy::Run
   DIGEST_SCHEMA_VERSION = "v1"
 
   attr_reader :config, :run_config
-  delegate :argumentize, :optionize, :seconds_duration, to: Kamal::Utils
+  delegate :argumentize, :optionize, :seconds_duration, to: Dash::Utils
 
   def initialize(config, run_config:, context: "proxy/run")
     @config = config
@@ -43,7 +43,7 @@ class Kamal::Configuration::Proxy::Run
   end
 
   def acme
-    @acme ||= Kamal::Configuration::Proxy::Acme.new(acme_config: run_config["acme"], secrets: config.secrets)
+    @acme ||= Dash::Configuration::Proxy::Acme.new(acme_config: run_config["acme"], secrets: config.secrets)
   end
 
   def debug?
@@ -103,7 +103,7 @@ class Kamal::Configuration::Proxy::Run
   end
 
   def container_name
-    "kamal-proxy"
+    "dash-proxy"
   end
 
   # Zero-downtime reboots: a minimal long-lived holder container owns the
@@ -114,14 +114,14 @@ class Kamal::Configuration::Proxy::Run
   end
 
   def holder_container_name
-    "kamal-proxy-net"
+    "dash-proxy-net"
   end
 
   def network_args
     if port_holder?
       [ "--network", "container:#{holder_container_name}" ]
     else
-      [ "--network", "kamal" ]
+      [ "--network", "dash" ]
     end
   end
 
@@ -136,7 +136,7 @@ class Kamal::Configuration::Proxy::Run
   end
 
   def run_command
-    [ "kamal-proxy", "run", *optionize(run_command_options), *acme.run_command_args ].join(" ")
+    [ "dash-proxy", "run", *optionize(run_command_options), *acme.run_command_args ].join(" ")
   end
 
   def metrics_port
@@ -158,7 +158,7 @@ class Kamal::Configuration::Proxy::Run
       .compact.merge(cache_options).merge(server_options)
   end
 
-  # Anything kamal-proxy accepts that has no key of its own yet. Values are
+  # Anything dash-proxy accepts that has no key of its own yet. Values are
   # optionized as written - `true` is a bare flag, anything else takes a value -
   # because the point of an escape hatch is that the gem holds no opinion about
   # the flag it is forwarding.
@@ -189,12 +189,12 @@ class Kamal::Configuration::Proxy::Run
     ].compact
   end
 
-  # The flag only tells kamal-proxy where to look inside its own container, so
+  # The flag only tells dash-proxy where to look inside its own container, so
   # without this mount the socket is not there and a sleeping service never
   # wakes - which the operator sees as one hung request, not as a misconfiguration.
   def docker_socket_args
     if docker_socket.present?
-      Kamal::Configuration::Volume.new(host_path: docker_socket, container_path: docker_socket).docker_args
+      Dash::Configuration::Volume.new(host_path: docker_socket, container_path: docker_socket).docker_args
     end
   end
 
@@ -212,7 +212,7 @@ class Kamal::Configuration::Proxy::Run
   end
 
   def secrets_io
-    Kamal::EnvFile.new(acme.credentials_env.merge(cache_store_env)).to_io
+    Dash::EnvFile.new(acme.credentials_env.merge(cache_store_env)).to_io
   end
 
   def host_directory
@@ -224,11 +224,11 @@ class Kamal::Configuration::Proxy::Run
   end
 
   def apps_container_directory
-    "/home/kamal-proxy/.apps-config"
+    "/home/dash-proxy/.apps-config"
   end
 
   def apps_volume
-    Kamal::Configuration::Volume.new \
+    Dash::Configuration::Volume.new \
       host_path: apps_directory,
       container_path: apps_container_directory
   end
@@ -255,7 +255,7 @@ class Kamal::Configuration::Proxy::Run
   end
 
   # Whether an operator turned on PROXY protocol without saying who may speak
-  # it. Kamal::Configuration warns about this: the header rewrites the
+  # it. Dash::Configuration warns about this: the header rewrites the
   # connecting address that allow_ips and rate_limit key on, so honouring it
   # from anywhere is a client-IP spoofing hole.
   def proxy_protocol_unrestricted?
@@ -264,7 +264,7 @@ class Kamal::Configuration::Proxy::Run
 
   private
     # The proxy's own listeners and process-level behaviour, as opposed to the
-    # per-service deadlines in Kamal::Configuration::Proxy#deploy_options. Zero
+    # per-service deadlines in Dash::Configuration::Proxy#deploy_options. Zero
     # disables each of the timeouts, so it is a value rather than an absence.
     def server_options
       {
@@ -288,14 +288,14 @@ class Kamal::Configuration::Proxy::Run
     end
 
     # A passthrough flag that a named key already emits would be optionized
-    # twice, and kamal-proxy would silently take the last one. Refuse instead.
+    # twice, and dash-proxy would silently take the last one. Refuse instead.
     # Only Proxy::Run knows which flags the named keys produce, so the check
     # cannot live in the validator with the rest.
     def ensure_no_conflicting_flags
       conflicts = flags.keys.map(&:to_s) & named_run_command_options.keys.map(&:to_s)
       return true if conflicts.empty?
 
-      raise Kamal::ConfigurationError,
+      raise Dash::ConfigurationError,
         "#{@context}/flags: #{conflicts.sort.join(", ")} is already set by a named key - remove one of them"
     end
 
@@ -303,7 +303,7 @@ class Kamal::Configuration::Proxy::Run
     # than of any one service - the policy that fills the cache is per service,
     # in proxy/cache. The store itself is deliberately absent: a store URL may
     # embed credentials, so it travels as CACHE_STORE in the secrets env file
-    # (kamal-proxy reads it as the --cache-store default) rather than on a
+    # (dash-proxy reads it as the --cache-store default) rather than on a
     # command line that lands in process listings and the audit log.
     def cache_options
       cache = run_config["cache"] || {}

data/lib/{kamal → dash}/configuration/proxy.rb

@@ -1,12 +1,34 @@
-class Kamal::Configuration::Proxy
-  include Kamal::Configuration::Validation
+class Dash::Configuration::Proxy
+  include Dash::Configuration::Validation
 
   DEFAULT_LOG_REQUEST_HEADERS = [ "Cache-Control", "Last-Modified", "User-Agent" ]
-  CONTAINER_NAME = "kamal-proxy"
-  LOADBALANCER_CONTAINER_NAME = "kamal-loadbalancer"
+  CONTAINER_NAME = "dash-proxy"
+  LOADBALANCER_CONTAINER_NAME = "dash-loadbalancer"
   CLIENT_CA_FILENAME = "client-ca.pem"
 
-  # What `compress: true` offers. kamal-proxy has no "on" state without an
+  # The image label the prune filters key on, set by dash-proxy's publish
+  # workflow.
+  IMAGE_TITLE = "dash-proxy"
+  LOADBALANCER_IMAGE_TITLE = "dash-loadbalancer"
+
+  NETWORK = "dash"
+  CONFIG_VOLUME = "dash-proxy-config"
+  LOADBALANCER_CONFIG_VOLUME = "dash-loadbalancer-config"
+
+  # Pre-rename names, kept only so the stage-3c migration can find what a host
+  # already has: the container to replace, the volume to copy, the network to
+  # bridge, and the image label to keep pruning by. Nothing constructs a
+  # resource with these — stage 3d deletes them.
+  LEGACY_CONTAINER_NAME = "kamal-proxy"
+  LEGACY_LOADBALANCER_CONTAINER_NAME = "kamal-loadbalancer"
+  LEGACY_HOLDER_CONTAINER_NAME = "kamal-proxy-net"
+  LEGACY_NETWORK = "kamal"
+  LEGACY_CONFIG_VOLUME = "kamal-proxy-config"
+  LEGACY_LOADBALANCER_CONFIG_VOLUME = "kamal-loadbalancer-config"
+  LEGACY_IMAGE_TITLE = "kamal-proxy"
+  LEGACY_LOADBALANCER_IMAGE_TITLE = "kamal-loadbalancer"
+
+  # What `compress: true` offers. dash-proxy has no "on" state without an
   # explicit list - --compress *is* the list - so the shorthand has to pick.
   # Best ratio first, matching the proxy's own default ordering; the client's
   # Accept-Encoding q-values still outrank this preference.
@@ -14,7 +36,7 @@ class Kamal::Configuration::Proxy
 
   SUPPORTED_COMPRESSION_ENCODINGS = %w[ gzip br zstd ].freeze
 
-  # kamal-proxy maps `brotli` onto the `br` token that travels in Content-Encoding.
+  # dash-proxy maps `brotli` onto the `br` token that travels in Content-Encoding.
   COMPRESSION_ENCODING_ALIASES = { "brotli" => "br" }.freeze
 
   # The layering contract. When the fork's load balancer fronts the per-host
@@ -32,7 +54,7 @@ class Kamal::Configuration::Proxy
   # Without load balancing the single proxy is every layer at once and the
   # whole surface applies to it.
   DEPLOY_OPTION_DISPOSITIONS = {
-    # --- Edge: TLS terminates where the handshake happens, and kamal-proxy
+    # --- Edge: TLS terminates where the handshake happens, and dash-proxy
     # gates TLSRedirect on TLSEnabled, so the whole family travels together.
     host: :edge,
     tls: :edge,
@@ -59,7 +81,7 @@ class Kamal::Configuration::Proxy
     "rate-limit-burst": :edge,
     "rate-limit-exempt": :edge,
 
-    # --- Edge: kamal-proxy deletes the Authorization header once a service
+    # --- Edge: dash-proxy deletes the Authorization header once a service
     # enforces basic auth, so an inner proxy would 401 the credential-less
     # request the load balancer forwards. Credentials belong at the edge only.
     "basic-auth": :edge,
@@ -163,12 +185,12 @@ class Kamal::Configuration::Proxy
   # where it matters.
   def self.disposition(key)
     DEPLOY_OPTION_DISPOSITIONS.fetch(key) do
-      raise Kamal::ConfigurationError,
-        "proxy deploy option --#{key} has no layering disposition - add it to Kamal::Configuration::Proxy::DEPLOY_OPTION_DISPOSITIONS"
+      raise Dash::ConfigurationError,
+        "proxy deploy option --#{key} has no layering disposition - add it to Dash::Configuration::Proxy::DEPLOY_OPTION_DISPOSITIONS"
     end
   end
 
-  delegate :argumentize, :optionize, :seconds_duration, to: Kamal::Utils
+  delegate :argumentize, :optionize, :seconds_duration, to: Dash::Utils
 
   attr_reader :config, :proxy_config, :role_name, :run, :secrets
 
@@ -182,8 +204,8 @@ class Kamal::Configuration::Proxy
     @role_name = role_name
     @load_balanced = load_balanced
     @secrets = secrets
-    validate! @proxy_config, with: Kamal::Configuration::Validator::Proxy, context: context
-    @run = Kamal::Configuration::Proxy::Run.new(config, run_config: @proxy_config["run"], context: "#{context}/run") if @proxy_config && @proxy_config["run"].present?
+    validate! @proxy_config, with: Dash::Configuration::Validator::Proxy, context: context
+    @run = Dash::Configuration::Proxy::Run.new(config, run_config: @proxy_config["run"], context: "#{context}/run") if @proxy_config && @proxy_config["run"].present?
   end
 
   def app_port
@@ -274,7 +296,7 @@ class Kamal::Configuration::Proxy
     ssl_config["on_demand_url"]
   end
 
-  # The name of a secret in .kamal/secrets holding the CA bundle client
+  # The name of a secret in .dash/secrets holding the CA bundle client
   # certificates must chain to - mirroring ssl.certificate_pem, not a local
   # file path. Kamal uploads the content into the app's TLS directory, which
   # the proxy container already mounts, and hands the proxy the path it sees
@@ -294,7 +316,7 @@ class Kamal::Configuration::Proxy
   def client_ca_pem_content
     secrets[client_ca_pem].tap do |content|
       if content.blank?
-        raise Kamal::ConfigurationError, "proxy/ssl: client_ca_pem secret '#{client_ca_pem}' is empty"
+        raise Dash::ConfigurationError, "proxy/ssl: client_ca_pem secret '#{client_ca_pem}' is empty"
       end
     end
   end
@@ -311,7 +333,7 @@ class Kamal::Configuration::Proxy
     proxy_config["path_prefixes"] || proxy_config["path_prefix"]&.split(",") || []
   end
 
-  # Nil when unset: the default lives in kamal-proxy, not here.
+  # Nil when unset: the default lives in dash-proxy, not here.
   def healthcheck_path
     proxy_config.dig("healthcheck", "path")
   end
@@ -370,7 +392,7 @@ class Kamal::Configuration::Proxy
     optionize ({ target: "#{target}:#{app_port}" }).merge(deploy_options), with: "="
   end
 
-  # kamal-proxy rollout deploy only accepts the target and the timeouts - the service already
+  # dash-proxy rollout deploy only accepts the target and the timeouts - the service already
   # exists, so it keeps the host, TLS, buffering and logging options of the live deploy.
   def rollout_deploy_options
     {
@@ -405,7 +427,7 @@ class Kamal::Configuration::Proxy
   private
     # Which dispositions this layer keeps. The per-app proxy behind a load
     # balancer sheds the edge concerns; without load balancing there is no
-    # other layer to defer to. Kamal::Configuration::Loadbalancer overrides
+    # other layer to defer to. Dash::Configuration::Loadbalancer overrides
     # this to keep the edge and shed the per-app concerns.
     def retained_dispositions
       load_balancing? ? %i[ per_app both ] : %i[ edge per_app both ]
@@ -417,7 +439,7 @@ class Kamal::Configuration::Proxy
 
     # Auto-activation needs a role the load balancer can actually front. The
     # target list is built from roles where `running_proxy?` (see
-    # Kamal::Cli::Proxy#loadbalancer), so a proxy-less primary role would boot a
+    # Dash::Cli::Proxy#loadbalancer), so a proxy-less primary role would boot a
     # load balancer with an empty --target. An explicit `loadbalancer:` setting
     # skips this check — the operator asked for it.
     def auto_load_balanced_primary_role?
@@ -426,7 +448,7 @@ class Kamal::Configuration::Proxy
       primary_role.present? && primary_role.running_proxy? && Array(primary_role.hosts).size > 1
     end
 
-    # Flags for kamal-proxy's dynamic domain source (runtime TLS hostnames).
+    # Flags for dash-proxy's dynamic domain source (runtime TLS hostnames).
     # TLS terminates wherever these flags land — :edge in the layering contract.
     def ssl_domains_options
       {
@@ -449,7 +471,7 @@ class Kamal::Configuration::Proxy
     # The connection pool between the proxy and this app's containers, and how
     # hard the proxy tries to place a request on a healthy one.
     #
-    # Every value is passed through exactly as written. kamal-proxy resolves its
+    # Every value is passed through exactly as written. dash-proxy resolves its
     # own defaults from a zero (target_pool.go), and it has to do that server
     # side because restored state and older RPC clients never see the CLI — so
     # substituting a default here would be both redundant and wrong.
@@ -473,7 +495,7 @@ class Kamal::Configuration::Proxy
     # app hosts have the docker socket and the containers).
     #
     # Sleep needs the container runtime socket, which is a run-level setting -
-    # Kamal::Configuration#ensure_sleep_has_a_docker_socket refuses the pairing
+    # Dash::Configuration#ensure_sleep_has_a_docker_socket refuses the pairing
     # rather than letting the first request after an idle period hang.
     def lifecycle_options
       affinity = proxy_config["session_affinity"] || {}
@@ -517,7 +539,7 @@ class Kamal::Configuration::Proxy
       proxy_config["headers"] || {}
     end
 
-    # kamal-proxy cuts a rule at the first colon, so a value carrying colons of
+    # dash-proxy cuts a rule at the first colon, so a value carrying colons of
     # its own arrives intact.
     def header_rules(direction, verb)
       (headers_config.dig(direction, verb) || {}).map { |name, value| "#{name}: #{value}" }.presence
@@ -574,7 +596,7 @@ class Kamal::Configuration::Proxy
 
     # The cache policy, which is per service - the store it writes into is
     # proxy-wide and lives in proxy/run/cache. Only --cache is derived from a
-    # truthy key; every other default stays in kamal-proxy, so an unset key emits
+    # truthy key; every other default stays in dash-proxy, so an unset key emits
     # nothing rather than restating a default the gem would then have to track.
     def cache_options
       cache = proxy_config["cache"] || {}
@@ -600,9 +622,9 @@ class Kamal::Configuration::Proxy
       File.join([ directory, role_name, filename ].compact)
     end
 
-    # kamal-proxy takes the credential as <username>:<password> and cuts at the
+    # dash-proxy takes the credential as <username>:<password> and cuts at the
     # first colon, so a password may contain colons but a username may not (the
-    # validator enforces that). The password is read from .kamal/secrets when
+    # validator enforces that). The password is read from .dash/secrets when
     # password_secret names it, so it need not live in deploy.yml.
     def basic_auth_credential
       basic_auth = proxy_config["basic_auth"]
@@ -619,16 +641,16 @@ class Kamal::Configuration::Proxy
       # means the named secret resolved empty. Fail rather than drop the flag —
       # silently deploying an unprotected service is the worse outcome.
       if password.blank?
-        raise Kamal::ConfigurationError, "proxy/basic_auth: password_secret '#{secret_name}' is empty"
+        raise Dash::ConfigurationError, "proxy/basic_auth: password_secret '#{secret_name}' is empty"
       end
 
       # Sensitive, so SSHKit redacts the credential wherever kamal prints the
       # deploy command - at :info verbosity it used to land in plain text
       # (registry-login precedent; Utils.optionize passes the marking through).
-      Kamal::Utils.sensitive("#{basic_auth["username"]}:#{password}")
+      Dash::Utils.sensitive("#{basic_auth["username"]}:#{password}")
     end
 
-    # Serves both --path-timeout and --path-request-timeout, which kamal-proxy
+    # Serves both --path-timeout and --path-request-timeout, which dash-proxy
     # reads with one parser. A duration may be a Go string ("5m") or plain
     # seconds; 0 is a value, meaning no limit for that prefix.
     def path_timeout_args(key)

data/lib/{kamal → dash}/configuration/registry.rb

@@ -1,10 +1,10 @@
-class Kamal::Configuration::Registry
-  include Kamal::Configuration::Validation
+class Dash::Configuration::Registry
+  include Dash::Configuration::Validation
 
   def initialize(config:, secrets:, context: "registry")
     @registry_config = config["registry"] || {}
     @secrets = secrets
-    validate! registry_config, context: context, with: Kamal::Configuration::Validator::Registry
+    validate! registry_config, context: context, with: Dash::Configuration::Validator::Registry
   end
 
   def server

data/lib/{kamal → dash}/configuration/role/healthcheck.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Role::Healthcheck
+class Dash::Configuration::Role::Healthcheck
   DEFAULT_PATH = "/up"
   DEFAULT_INTERVAL = 1
 
@@ -7,7 +7,7 @@ class Kamal::Configuration::Role::Healthcheck
   DOCKER_ONLY_KEYS = %w[ cmd port path interval timeout retries start_period start_interval ]
 
   attr_reader :healthcheck_config, :context
-  delegate :optionize, to: Kamal::Utils
+  delegate :optionize, to: Dash::Utils
 
   def initialize(healthcheck_config:, context: "healthcheck")
     @healthcheck_config = healthcheck_config
@@ -90,6 +90,6 @@ class Kamal::Configuration::Role::Healthcheck
     end
 
     def error(message, context: nil)
-      raise Kamal::ConfigurationError, "#{[ @context, context ].compact.join("/")}: #{message}"
+      raise Dash::ConfigurationError, "#{[ @context, context ].compact.join("/")}: #{message}"
     end
 end

data/lib/{kamal → dash}/configuration/role.rb

@@ -1,7 +1,7 @@
-class Kamal::Configuration::Role
-  include Kamal::Configuration::Validation
+class Dash::Configuration::Role
+  include Dash::Configuration::Validation
 
-  delegate :argumentize, :optionize, to: Kamal::Utils
+  delegate :argumentize, :optionize, to: Dash::Utils
 
   attr_reader :name, :config, :specialized_env, :specialized_logging, :specialized_proxy, :healthcheck
 
@@ -13,20 +13,20 @@ class Kamal::Configuration::Role
       role_config,
       example: validation_yml["servers"]["workers"],
       context: "servers/#{name}",
-      with: Kamal::Configuration::Validator::Role
+      with: Dash::Configuration::Validator::Role
 
-    @specialized_env = Kamal::Configuration::Env.new \
+    @specialized_env = Dash::Configuration::Env.new \
       config: specializations.fetch("env", {}),
       secrets: config.secrets,
       context: "servers/#{name}/env"
 
-    @specialized_logging = Kamal::Configuration::Logging.new \
+    @specialized_logging = Dash::Configuration::Logging.new \
       logging_config: specializations.fetch("logging", {}),
       context: "servers/#{name}/logging"
 
     # `healthcheck: false` is an opt-out, not a healthcheck — it leaves @healthcheck nil.
     if healthcheck_config = specializations["healthcheck"]
-      @healthcheck = Kamal::Configuration::Role::Healthcheck.new \
+      @healthcheck = Dash::Configuration::Role::Healthcheck.new \
         healthcheck_config: healthcheck_config,
         context: "servers/#{name}/healthcheck"
     end
@@ -94,13 +94,13 @@ class Kamal::Configuration::Role
   # `boot.wait` a second time inside every group.
   #
   # Built on first read rather than in the initializer — Servers.new constructs every Role
-  # before Kamal::Configuration#initialize has finished assigning its own collaborators.
+  # before Dash::Configuration#initialize has finished assigning its own collaborators.
   def boot
     return @boot if defined?(@boot)
 
     @boot =
       if (boot_config = specializations["boot"])
-        Kamal::Configuration::Boot.new \
+        Dash::Configuration::Boot.new \
           config: config, boot_config: boot_config, context: "servers/#{name}/boot"
       end
   end
@@ -148,7 +148,7 @@ class Kamal::Configuration::Role
   def readiness_description
     case readiness_source
     when :proxy
-      [ "kamal-proxy health check", proxy.healthcheck_path ].compact.join(" ")
+      [ "dash-proxy health check", proxy.healthcheck_path ].compact.join(" ")
     when :healthcheck
       healthcheck.port ? "healthcheck #{healthcheck.path}:#{healthcheck.port}" : "healthcheck (custom cmd)"
     when :healthcheck_exec
@@ -168,7 +168,7 @@ class Kamal::Configuration::Role
   end
 
   def stop_args
-    # When deploying with the proxy, kamal-proxy will drain request before returning so we don't need to wait.
+    # When deploying with the proxy, dash-proxy will drain request before returning so we don't need to wait.
     timeout = stop_timeout || (running_proxy? ? nil : config.drain_timeout)
 
     [ *argumentize("-t", timeout) ]
@@ -235,7 +235,7 @@ class Kamal::Configuration::Role
 
   def asset_volume(version = config.version)
     if assets?
-      Kamal::Configuration::Volume.new \
+      Dash::Configuration::Volume.new \
         host_path: asset_volume_directory(version), container_path: asset_path, options: asset_path_options
     end
   end
@@ -255,7 +255,7 @@ class Kamal::Configuration::Role
   def ensure_one_host_for_ssl
     # Skip SSL validation when a loadbalancer is present or custom certificates are provided
     if running_proxy? && proxy.ssl? && hosts.size > 1 && !proxy.loadbalancer.present? && !proxy.custom_ssl_certificate?
-      raise Kamal::ConfigurationError, "SSL is only supported on a single server unless you provide custom certificates or configure a loadbalancer, found #{hosts.size} servers for role #{name}"
+      raise Dash::ConfigurationError, "SSL is only supported on a single server unless you provide custom certificates or configure a loadbalancer, found #{hosts.size} servers for role #{name}"
     end
   end
 
@@ -274,7 +274,7 @@ class Kamal::Configuration::Role
       if running_proxy?
         proxy_config = proxy_specializations == true || proxy_specializations.nil? ? {} : proxy_specializations
 
-        @specialized_proxy = Kamal::Configuration::Proxy.new \
+        @specialized_proxy = Dash::Configuration::Proxy.new \
           config: config,
           proxy_config: proxy_config,
           secrets: config.secrets,

data/lib/{kamal → dash}/configuration/servers.rb

@@ -1,14 +1,14 @@
-class Kamal::Configuration::Servers
-  include Kamal::Configuration::Validation
+class Dash::Configuration::Servers
+  include Dash::Configuration::Validation
 
   attr_reader :config, :servers_config, :roles
 
   def initialize(config:)
     @config = config
     @servers_config = config.raw_config.servers
-    validate! servers_config, with: Kamal::Configuration::Validator::Servers
+    validate! servers_config, with: Dash::Configuration::Validator::Servers
 
-    @roles = role_names.map { |role_name| Kamal::Configuration::Role.new role_name, config: config }
+    @roles = role_names.map { |role_name| Dash::Configuration::Role.new role_name, config: config }
   end
 
   private

data/lib/{kamal → dash}/configuration/ssh.rb

@@ -1,7 +1,7 @@
-class Kamal::Configuration::Ssh
+class Dash::Configuration::Ssh
   LOGGER = ::Logger.new(STDERR)
 
-  include Kamal::Configuration::Validation
+  include Dash::Configuration::Validation
 
   attr_reader :ssh_config, :secrets
 

data/lib/{kamal → dash}/configuration/sshkit.rb

@@ -1,5 +1,5 @@
-class Kamal::Configuration::Sshkit
-  include Kamal::Configuration::Validation
+class Dash::Configuration::Sshkit
+  include Dash::Configuration::Validation
 
   attr_reader :sshkit_config
 

data/lib/{kamal → dash}/configuration/validation.rb

@@ -1,7 +1,7 @@
 require "yaml"
 require "active_support/inflector"
 
-module Kamal::Configuration::Validation
+module Dash::Configuration::Validation
   extend ActiveSupport::Concern
 
   class_methods do
@@ -14,7 +14,7 @@ module Kamal::Configuration::Validation
     end
   end
 
-  def validate!(config, example: nil, context: nil, with: Kamal::Configuration::Validator)
+  def validate!(config, example: nil, context: nil, with: Dash::Configuration::Validator)
     context ||= self.class.validation_config_key
     example ||= validation_yml[self.class.validation_config_key]
 

data/lib/{kamal → dash}/configuration/validator/accessory.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Accessory < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Accessory < Dash::Configuration::Validator
   def validate!
     super
 

data/lib/{kamal → dash}/configuration/validator/alias.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Alias < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Alias < Dash::Configuration::Validator
   def validate!
     super
 
@@ -8,7 +8,7 @@ class Kamal::Configuration::Validator::Alias < Kamal::Configuration::Validator
       error "Invalid alias name: '#{name}'. Must only contain lowercase letters, alphanumeric, hyphens and underscores."
     end
 
-    if Kamal::Cli::Main.commands.include?(name)
+    if Dash::Cli::Main.commands.include?(name)
       error "Alias '#{name}' conflicts with a built-in command."
     end
   end

data/lib/{kamal → dash}/configuration/validator/builder.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Builder < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Builder < Dash::Configuration::Validator
   def validate!
     super
 

data/lib/dash/configuration/validator/configuration.rb

@@ -0,0 +1,6 @@
+class Dash::Configuration::Validator::Configuration < Dash::Configuration::Validator
+  private
+    def allow_extensions?
+      true
+    end
+end