dash 3.2.0 → 4.0.0

data/lib/{kamal → dash}/configuration/validator/env.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Env < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Env < Dash::Configuration::Validator
   SPECIAL_KEYS = [ "clear", "secret", "tags" ]
 
   def validate!
@@ -39,7 +39,7 @@ class Kamal::Configuration::Validator::Env < Kamal::Configuration::Validator
             with_context(tag) do
               validate_type! value, Hash
 
-              Kamal::Configuration::Validator::Env.new(
+              Dash::Configuration::Validator::Env.new(
                 value,
                 example: example["tags"].values[1],
                 context: context

data/lib/{kamal → dash}/configuration/validator/proxy.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
   def validate!
     unless config.nil?
       super
@@ -8,7 +8,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
       # provides the hostnames at runtime.
       # On-demand TLS joins loadbalancer and ssl_domains as a source of hostnames
       # that only exist at handshake time - demanding a static host here would
-      # reject the one shape kamal-proxy requires for it.
+      # reject the one shape dash-proxy requires for it.
       if config["host"].blank? && config["hosts"].blank? && config["ssl"] && config["loadbalancer"].blank? &&
          config.dig("ssl_domains", "source").blank? && ssl_config["on_demand_url"].blank?
         error "Must set a host to enable automatic SSL"
@@ -113,7 +113,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
       end
     end
 
-    # Same source shape as ssl_domains. The interval minimum is kamal-proxy's
+    # Same source shape as ssl_domains. The interval minimum is dash-proxy's
     # own (MinRedirectsInterval, 10s) - it rejects a smaller one after the SSH
     # round trip, so catch it here at config time.
     def validate_redirects_source!(redirects_source)
@@ -132,7 +132,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
       end
     end
 
-    # kamal-proxy only logs a warning for a DNS provider it does not recognise
+    # dash-proxy only logs a warning for a DNS provider it does not recognise
     # and then carries on with no provider at all, so the symptom is a
     # certificate that never issues rather than a failed boot. Catch it here,
     # before any host is contacted.
@@ -149,7 +149,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
             validate_dns_provider_zones! provider
           elsif provider.present? && !supported_dns_provider?(provider)
             error "unsupported dns_provider '#{provider}'. " \
-              "Supported providers: #{Kamal::Configuration::Proxy::Acme::DNS_PROVIDERS.join(", ")}"
+              "Supported providers: #{Dash::Configuration::Proxy::Acme::DNS_PROVIDERS.join(", ")}"
           end
         end
       end
@@ -175,17 +175,17 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
 
         unless zone_provider.is_a?(String) && supported_dns_provider?(zone_provider)
           error "unsupported dns_provider '#{zone_provider}' for '#{zone}'. " \
-            "Supported providers: #{Kamal::Configuration::Proxy::Acme::DNS_PROVIDERS.join(", ")}"
+            "Supported providers: #{Dash::Configuration::Proxy::Acme::DNS_PROVIDERS.join(", ")}"
         end
       end
     end
 
     def supported_dns_provider?(provider)
-      Kamal::Configuration::Proxy::Acme::SUPPORTED_DNS_PROVIDERS.include?(provider.to_s.downcase)
+      Dash::Configuration::Proxy::Acme::SUPPORTED_DNS_PROVIDERS.include?(provider.to_s.downcase)
     end
 
     # The whole TLS surface lives in the one `ssl` hash: certificate material,
-    # on-demand issuance and the mTLS client CA. kamal-proxy rejects the
+    # on-demand issuance and the mTLS client CA. dash-proxy rejects the
     # on-demand combinations outright rather than picking a winner
     # (ServiceOptions.Validate), so there is no precedence to document - only
     # a deploy that would fail after the SSH round-trip. Fail here.
@@ -231,13 +231,13 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
 
     # An RFC 9110 token, which is both a valid header field name and a valid
     # cookie name. For a header, a space or a colon would also break the
-    # '<name>: <value>' encoding kamal-proxy cuts at the first colon.
+    # '<name>: <value>' encoding dash-proxy cuts at the first colon.
     TOKEN = /\A[!#$%&'*+\-.^_`|~0-9A-Za-z]+\z/
 
     POOL_KEYS = %w[ max_conns max_idle_conns idle_conn_timeout dial_timeout try_duration try_interval ].freeze
 
     # A zero is meaningful for most of these, so only negatives are refused.
-    # kamal-proxy clamps them rather than failing when it reads saved state, and
+    # dash-proxy clamps them rather than failing when it reads saved state, and
     # rejects them from a client — this is the client.
     def validate_tuning!
       target = config["target"] || {}
@@ -258,13 +258,13 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
         with_context("request_timeout") { error "cannot be negative" }
       end
 
-      # Sibling consistency: kamal-proxy clamps a negative --target-timeout as
+      # Sibling consistency: dash-proxy clamps a negative --target-timeout as
       # silently as a negative --request-timeout.
       if config["response_timeout"].to_f.negative?
         with_context("response_timeout") { error "cannot be negative" }
       end
 
-      # Both maps reach kamal-proxy's one parsePathTimeouts, which refuses a
+      # Both maps reach dash-proxy's one parsePathTimeouts, which refuses a
       # negative duration.
       %w[ path_response_timeouts path_request_timeouts ].each do |key|
         with_context(key) do
@@ -278,7 +278,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
     # Session affinity and scale-to-zero. The one rule NOT here is that sleep
     # needs proxy/run/docker_socket: a role can carry `sleep` while the root
     # carries the socket, and this validator runs against the role's own proxy
-    # block before it is merged. Kamal::Configuration checks that pairing on the
+    # block before it is merged. Dash::Configuration checks that pairing on the
     # merged config instead.
     def validate_lifecycle!
       affinity = config["session_affinity"] || {}
@@ -312,7 +312,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
       end
     end
 
-    # kamal-proxy rejects canonical_host + on-demand TLS after the SSH round
+    # dash-proxy rejects canonical_host + on-demand TLS after the SSH round
     # trip (canonical redirection needs a fixed host, on-demand TLS has none),
     # and a canonical host outside the host list redirects every request to a
     # hostname this service does not serve.
@@ -393,7 +393,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
       end
 
       # Go carries the request host in Request.Host rather than the header map,
-      # so kamal-proxy refuses the rule instead of silently doing nothing.
+      # so dash-proxy refuses the rule instead of silently doing nothing.
       if direction == "request" && name.to_s.downcase == "host"
         return error "cannot rewrite the Host header"
       end
@@ -408,7 +408,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
 
     # The pattern is deliberately not compiled: Go's RE2 and Ruby's Onigmo differ
     # at the edges (Ruby rejects Go's `(?P<name>...)`), and refusing a pattern
-    # kamal-proxy would have accepted is worse than finding out at deploy time.
+    # dash-proxy would have accepted is worse than finding out at deploy time.
     def validate_path_rules!(key, redirect:)
       Array(config[key]).each_with_index do |rule, index|
         with_context(key) do
@@ -419,7 +419,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
               next error "needs both from and to"
             end
 
-            # The wire format is '<from>=<to>' and kamal-proxy cuts at the
+            # The wire format is '<from>=<to>' and dash-proxy cuts at the
             # FIRST '=', so an '=' inside the pattern silently builds a rule
             # for a different path.
             if rule["from"].to_s.include?("=")
@@ -443,7 +443,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
       end
     end
 
-    # kamal-proxy's --rate-limit is a Float64, so half a request per second is a
+    # dash-proxy's --rate-limit is a Float64, so half a request per second is a
     # legal rate. The docs example can only demonstrate one numeric type, and an
     # Integer there would reject 0.5 — so the shape is checked by hand instead.
     def validate_key_override!(key, value)
@@ -488,7 +488,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
     end
 
     # Rate limiting and the IP allow list are only as correct as the address they
-    # key on, so kamal-proxy ties the three settings together with rules that
+    # key on, so dash-proxy ties the three settings together with rules that
     # otherwise surface only once the deploy has reached a host.
     def validate_access_control!
       allow_ips = Array(config["allow_ips"])
@@ -531,7 +531,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
           error "trusted_proxies has no effect without allow_ips, deny_ips or rate_limit"
         end
 
-        # Unconditional: even without allow_ips/rate_limit, kamal-proxy rewrites
+        # Unconditional: even without allow_ips/rate_limit, dash-proxy rewrites
         # the client address (and X-Forwarded-For) from this header, so honoring
         # it from untrusted peers is a client-spoofable identity.
         if client_ip["header"].present? && trusted_proxies.empty?
@@ -549,7 +549,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
         end
       end
 
-      # kamal-proxy serves the health check path without an address check and
+      # dash-proxy serves the health check path without an address check and
       # without a rate limit so deploys keep working, which makes '/' a hole
       # straight through all three features.
       if (allow_ips.any? || deny_ips.any? || rate_limited) && config.dig("healthcheck", "path") == "/"
@@ -604,11 +604,11 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
         end
 
         encodings.each do |encoding|
-          canonical = Kamal::Configuration::Proxy::COMPRESSION_ENCODING_ALIASES.fetch(encoding.to_s, encoding.to_s)
+          canonical = Dash::Configuration::Proxy::COMPRESSION_ENCODING_ALIASES.fetch(encoding.to_s, encoding.to_s)
 
-          unless Kamal::Configuration::Proxy::SUPPORTED_COMPRESSION_ENCODINGS.include?(canonical)
+          unless Dash::Configuration::Proxy::SUPPORTED_COMPRESSION_ENCODINGS.include?(canonical)
             error "unsupported encoding '#{encoding}'. " \
-              "Supported encodings: #{Kamal::Configuration::Proxy::SUPPORTED_COMPRESSION_ENCODINGS.join(", ")}"
+              "Supported encodings: #{Dash::Configuration::Proxy::SUPPORTED_COMPRESSION_ENCODINGS.join(", ")}"
           end
         end
 
@@ -618,7 +618,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
 
         Array(compress["content_types"]).each do |content_type|
           # A main-type wildcard would match everything the proxy cannot see
-          # inside, so kamal-proxy allows a wildcard only in the subtype.
+          # inside, so dash-proxy allows a wildcard only in the subtype.
           unless content_type.to_s.match?(%r{\A[^/*\s]+/[^/\s]+\z})
             error "content_types entry '#{content_type}' must be a media type such as text/html or text/*"
           end
@@ -632,7 +632,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
     REFUSED_TLS_VERSIONS = %w[ 1.0 1.1 ].freeze
     RUN_TIMEOUTS = %w[ read_header_timeout read_timeout write_timeout idle_timeout shutdown_timeout ].freeze
 
-    # kamal-proxy validates these three in preRun, so a typo does not fail the
+    # dash-proxy validates these three in preRun, so a typo does not fail the
     # deploy - it stops the proxy container from booting at all.
     def validate_run_server_options!(run_config)
       with_context("run") do
@@ -656,7 +656,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
       end
     end
 
-    # Accepts the spellings kamal-proxy's normalizeTLSVersion reduces - a `tls`
+    # Accepts the spellings dash-proxy's normalizeTLSVersion reduces - a `tls`
     # or `tlsv` prefix, and `_` for `.` - so a config written for upstream is not
     # rejected here and accepted there.
     def validate_min_tls!(value)
@@ -673,7 +673,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
       end
     end
 
-    # kamal-proxy reads the cache policy only when --cache is set and ignores it
+    # dash-proxy reads the cache policy only when --cache is set and ignores it
     # otherwise, so a tuned block with no `enabled` is a cache that silently
     # never caches - this issue's own predicted first support question.
     def validate_cache!(cache)
@@ -682,12 +682,12 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
       with_context("cache") do
         if (orphaned = cache.keys - [ "enabled" ]).any?
           error "#{orphaned.first} has no effect without enabled: true - " \
-            "kamal-proxy ignores the cache policy entirely when --cache is absent"
+            "dash-proxy ignores the cache policy entirely when --cache is absent"
         end
       end
     end
 
-    # An unsupported store is rejected in kamal-proxy's preRun, which means the
+    # An unsupported store is rejected in dash-proxy's preRun, which means the
     # proxy container exits at boot rather than a deploy failing. Catch it before
     # the fleet loses its proxy.
     def validate_cache_store!(cache)
@@ -708,7 +708,7 @@ class Kamal::Configuration::Validator::Proxy < Kamal::Configuration::Validator
         if basic_auth["username"].blank?
           error "Missing username setting (required when basic_auth is set)"
         elsif basic_auth["username"].to_s.include?(":")
-          # kamal-proxy cuts <username>:<password> at the first colon, so a
+          # dash-proxy cuts <username>:<password> at the first colon, so a
           # colon in the username would silently truncate it.
           error "Invalid username: cannot contain a colon"
         end

data/lib/{kamal → dash}/configuration/validator/registry.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Registry < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Registry < Dash::Configuration::Validator
   STRING_OR_ONE_ITEM_ARRAY_KEYS = [ "username", "password" ]
 
   def validate!

data/lib/{kamal → dash}/configuration/validator/role.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Role < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Role < Dash::Configuration::Validator
   def validate!
     validate_type! config, Array, Hash
 

data/lib/{kamal → dash}/configuration/validator/servers.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator::Servers < Kamal::Configuration::Validator
+class Dash::Configuration::Validator::Servers < Dash::Configuration::Validator
   def validate!
     validate_type! config, Array, Hash, NilClass
 

data/lib/{kamal → dash}/configuration/validator.rb

@@ -1,4 +1,4 @@
-class Kamal::Configuration::Validator
+class Dash::Configuration::Validator
   attr_reader :config, :example, :context
 
   def initialize(config, example:, context:)
@@ -91,7 +91,7 @@ class Kamal::Configuration::Validator
       else
         validate_type! value, type
       end
-    rescue Kamal::ConfigurationError
+    rescue Dash::ConfigurationError
       type_error(Array, type)
     end
 
@@ -187,7 +187,7 @@ class Kamal::Configuration::Validator
     end
 
     def error(message)
-      raise Kamal::ConfigurationError, "#{error_context}#{message}"
+      raise Dash::ConfigurationError, "#{error_context}#{message}"
     end
 
     def type_error(*expected_types)
@@ -245,7 +245,7 @@ class Kamal::Configuration::Validator
       validate_health_option_expansion!(options)
     end
 
-    # Kamal::Utils::DOLLAR_SIGN_WITHOUT_SHELL_EXPANSION_REGEX escapes a bare `$` but exempts
+    # Dash::Utils::DOLLAR_SIGN_WITHOUT_SHELL_EXPANSION_REGEX escapes a bare `$` but exempts
     # `${...}`, leaving it for the deploy host's shell to expand at docker run time. Role env
     # never reaches that shell, so `${SOME_ENV}` in a health command silently becomes empty and
     # the container sits `starting` until deploy_timeout. Reject it where it is most likely written.

data/lib/{kamal → dash}/configuration/volume.rb

@@ -1,6 +1,6 @@
-class Kamal::Configuration::Volume
+class Dash::Configuration::Volume
   attr_reader :host_path, :container_path, :options
-  delegate :argumentize, to: Kamal::Utils
+  delegate :argumentize, to: Dash::Utils
 
   def initialize(host_path:, container_path:, options: nil)
     @host_path = host_path

data/lib/{kamal → dash}/configuration.rb

@@ -5,11 +5,15 @@ require "active_support/core_ext/hash/keys"
 require "erb"
 require "net/ssh/proxy/jump"
 
-class Kamal::Configuration
+class Dash::Configuration
   HOOKS_OUTPUT_LEVELS = [ :quiet, :verbose ].freeze
 
+  # The pre-3b name of #run_directory. Referenced only by the one-shot host
+  # migration in Dash::Commands::Base; nothing reads paths under it.
+  LEGACY_RUN_DIRECTORY = ".kamal"
+
   delegate :service, :labels, :hooks_path, to: :raw_config, allow_nil: true
-  delegate :argumentize, :optionize, to: Kamal::Utils
+  delegate :argumentize, :optionize, to: Dash::Utils
 
   attr_reader :destination, :raw_config, :secrets
   attr_reader :accessories, :aliases, :boot, :builder, :env, :logging, :output, :proxy, :proxy_boot, :servers, :ssh, :sshkit, :registry
@@ -18,7 +22,7 @@ class Kamal::Configuration
 
   class << self
     def create_from(config_file:, destination: nil, version: nil)
-      ENV["KAMAL_DESTINATION"] = destination
+      ENV["DASH_DESTINATION"] = ENV["KAMAL_DESTINATION"] = destination
 
       raw_config = load_raw_config(config_file: config_file, destination: destination)
 
@@ -56,9 +60,9 @@ class Kamal::Configuration
     @destination = destination
     @declared_version = version
 
-    validate! raw_config, example: validation_yml.symbolize_keys, context: "", with: Kamal::Configuration::Validator::Configuration
+    validate! raw_config, example: validation_yml.symbolize_keys, context: "", with: Dash::Configuration::Validator::Configuration
 
-    @secrets = Kamal::Secrets.new(destination: destination, secrets_path: secrets_path)
+    @secrets = Dash::Secrets.new(destination: destination, secrets_path: secrets_path)
 
     # Eager load config to validate it, these are first as they have dependencies later on
     @servers = Servers.new(config: self)
@@ -292,8 +296,14 @@ class Kamal::Configuration
     raw_config.stop_timeout
   end
 
+  # Where dash keeps its per-host state - app env and assets, the proxy's
+  # options/image/run_command files and apps-config bind mount, loadbalancer
+  # service claims, deploy locks and the audit log - under the SSH user's home.
+  # Renamed from `.kamal` in stage 3b of the server artifact rename
+  # (zoolutions/dash#118); hosts still on the old name are migrated in place by
+  # Dash::Commands::Base#ensure_run_directory.
   def run_directory
-    ".kamal"
+    ".dash"
   end
 
   def apps_directory
@@ -313,11 +323,11 @@ class Kamal::Configuration
   end
 
   def hooks_path
-    raw_config.hooks_path || ".kamal/hooks"
+    raw_config.hooks_path || Dash::ProjectDirectory.join("hooks")
   end
 
   def secrets_path
-    raw_config.secrets_path || ".kamal/secrets"
+    raw_config.secrets_path || Dash::ProjectDirectory.join("secrets")
   end
 
   def asset_path
@@ -379,26 +389,26 @@ class Kamal::Configuration
 
     def ensure_required_keys_present
       %i[ service registry ].each do |key|
-        raise Kamal::ConfigurationError, "Missing required configuration for #{key}" unless raw_config[key].present?
+        raise Dash::ConfigurationError, "Missing required configuration for #{key}" unless raw_config[key].present?
       end
 
-      raise Kamal::ConfigurationError, "Missing required configuration for image" if image.blank?
+      raise Dash::ConfigurationError, "Missing required configuration for image" if image.blank?
 
       if raw_config.servers.nil?
-        raise Kamal::ConfigurationError, "No servers or accessories specified" unless raw_config.accessories.present?
+        raise Dash::ConfigurationError, "No servers or accessories specified" unless raw_config.accessories.present?
       else
         unless role(primary_role_name).present?
-          raise Kamal::ConfigurationError, "The primary_role #{primary_role_name} isn't defined"
+          raise Dash::ConfigurationError, "The primary_role #{primary_role_name} isn't defined"
         end
 
         if primary_role.hosts.empty?
-          raise Kamal::ConfigurationError, "No servers specified for the #{primary_role.name} primary_role"
+          raise Dash::ConfigurationError, "No servers specified for the #{primary_role.name} primary_role"
         end
 
         unless allow_empty_roles?
           roles.each do |role|
             if role.hosts.empty?
-              raise Kamal::ConfigurationError, "No servers specified for the #{role.name} role. You can ignore this with allow_empty_roles: true"
+              raise Dash::ConfigurationError, "No servers specified for the #{role.name} role. You can ignore this with allow_empty_roles: true"
             end
           end
         end
@@ -408,21 +418,21 @@ class Kamal::Configuration
     end
 
     def ensure_valid_service_name
-      raise Kamal::ConfigurationError, "Service name can only include alphanumeric characters, hyphens, and underscores" unless raw_config[:service] =~ /^[a-z0-9_-]+$/i
+      raise Dash::ConfigurationError, "Service name can only include alphanumeric characters, hyphens, and underscores" unless raw_config[:service] =~ /^[a-z0-9_-]+$/i
 
       true
     end
 
     def ensure_valid_kamal_version
-      if minimum_version && Gem::Version.new(minimum_version) > Gem::Version.new(Kamal::VERSION)
-        raise Kamal::ConfigurationError, "Current version is #{Kamal::VERSION}, minimum required is #{minimum_version}"
+      if minimum_version && Gem::Version.new(minimum_version) > Gem::Version.new(Dash::VERSION)
+        raise Dash::ConfigurationError, "Current version is #{Dash::VERSION}, minimum required is #{minimum_version}"
       end
 
       true
     end
 
     def ensure_retain_containers_valid
-      raise Kamal::ConfigurationError, "Must retain at least 1 container" if retain_containers < 1
+      raise Dash::ConfigurationError, "Must retain at least 1 container" if retain_containers < 1
 
       true
     end
@@ -431,7 +441,7 @@ class Kamal::Configuration
       hooks = %w[ pre-traefik-reboot post-traefik-reboot ].select { |hook_file| File.exist?(File.join(hooks_path, hook_file)) }
 
       if hooks.any?
-        raise Kamal::ConfigurationError, "Found #{hooks.join(", ")}, these should be renamed to (pre|post)-proxy-reboot"
+        raise Dash::ConfigurationError, "Found #{hooks.join(", ")}, these should be renamed to (pre|post)-proxy-reboot"
       end
 
       true
@@ -468,7 +478,7 @@ class Kamal::Configuration
       return true if offenders.empty?
 
       warn "Host(s) #{offenders.sort.join(", ")}: proxy_protocol is enabled without proxy_protocol_allow_ips, " \
-        "so kamal-proxy honours a PROXY header from any peer that can reach the port. That header sets the client " \
+        "so dash-proxy honours a PROXY header from any peer that can reach the port. That header sets the client " \
         "address `allow_ips`, `rate_limit` and the access log all use. Name the load balancers you actually run."
 
       true
@@ -492,12 +502,12 @@ class Kamal::Configuration
 
       return true if offenders.empty?
 
-      raise Kamal::ConfigurationError, "Role(s) #{offenders.map(&:name).join(", ")}: " \
-        "proxy/sleep requires proxy/run/docker_socket - kamal-proxy can only stop and start containers " \
+      raise Dash::ConfigurationError, "Role(s) #{offenders.map(&:name).join(", ")}: " \
+        "proxy/sleep requires proxy/run/docker_socket - dash-proxy can only stop and start containers " \
         "through the container runtime socket, and it is not mounted into the proxy without it"
     end
 
-    # kamal-proxy resolves a zero max_idle_conns to its default of 100
+    # dash-proxy resolves a zero max_idle_conns to its default of 100
     # (target_pool.go resolves defaults from zeros), so the one value an
     # operator writes to mean "keep none" is the one value that cannot mean it.
     # Legal, so warn rather than raise.
@@ -508,14 +518,14 @@ class Kamal::Configuration
       return true if offenders.empty?
 
       warn "Role(s) #{offenders.map(&:name).join(", ")}: target/max_idle_conns: 0 means the proxy default of 100, " \
-        "not \"keep none\" - kamal-proxy resolves its defaults from zeros. Leave it unset for the default, " \
+        "not \"keep none\" - dash-proxy resolves its defaults from zeros. Leave it unset for the default, " \
         "or set 1 for the practical minimum."
 
       true
     end
 
     # `intercept_errors` discards the app's error body and renders the proxy's own
-    # page instead. With no pages to render, kamal-proxy falls back to a bare
+    # page instead. With no pages to render, dash-proxy falls back to a bare
     # plaintext status line — so the app's error page is thrown away and replaced
     # by the words "Bad Gateway". Legal, and almost never the intent.
     def ensure_intercepted_errors_have_pages
@@ -525,7 +535,7 @@ class Kamal::Configuration
       return true if offenders.empty?
 
       warn "Role(s) #{offenders.map(&:name).join(", ")}: intercept_errors is set but no error_pages_path is " \
-        "configured, so kamal-proxy replaces the app's error page with a bare plaintext status line. " \
+        "configured, so dash-proxy replaces the app's error page with a bare plaintext status line. " \
         "Set `error_pages_path:` to serve your own pages, or remove `intercept_errors` to let the app's through."
 
       true
@@ -533,7 +543,7 @@ class Kamal::Configuration
 
     # Rate limiting and IP deny rules are only as correct as the address they key
     # on. `forward_headers: true` says something sits in front of the proxy, and
-    # without `trusted_proxies` kamal-proxy keys on that something's address
+    # without `trusted_proxies` dash-proxy keys on that something's address
     # rather than the client's — so the limiter throttles the whole world as one
     # client (or nobody), and a deny list denies nobody it was written for. Warn
     # rather than raise: the config is legal, just almost certainly not what was
@@ -558,7 +568,7 @@ class Kamal::Configuration
 
       offenders.each do |role_name, features|
         warn "Role #{role_name}: #{features.join(" and ")} is set with forward_headers, " \
-          "but no proxy/client_ip/trusted_proxies. kamal-proxy will key on the address of " \
+          "but no proxy/client_ip/trusted_proxies. dash-proxy will key on the address of " \
           "whatever sits in front of it, not on the client's — so the rules apply to every " \
           "visitor as one client, or to none of them. Declare the proxies in front with " \
           "`client_ip: trusted_proxies:`."
@@ -577,7 +587,7 @@ class Kamal::Configuration
       paced = roles.select(&:boot)
       return true if paced.empty? || boot.parallel_roles != false
 
-      raise Kamal::ConfigurationError, "servers/#{paced.first.name}/boot cannot be combined with boot/parallel_roles: false, " \
+      raise Dash::ConfigurationError, "servers/#{paced.first.name}/boot cannot be combined with boot/parallel_roles: false, " \
         "which boots each host's roles in turn and so cannot pace one role's hosts. Remove one of them"
     end
 
@@ -602,7 +612,7 @@ class Kamal::Configuration
       hosts = roles.select(&:ssl?).flat_map { |role| role.proxy.hosts }
       duplicates = hosts.tally.filter_map { |host, count| host if count > 1 }
 
-      raise Kamal::ConfigurationError, "Different roles can't share the same host for SSL: #{duplicates.join(", ")}" if duplicates.any?
+      raise Dash::ConfigurationError, "Different roles can't share the same host for SSL: #{duplicates.join(", ")}" if duplicates.any?
 
       true
     end
@@ -610,7 +620,7 @@ class Kamal::Configuration
     def ensure_local_registry_remote_builder_has_ssh_url
       if registry.local? && builder.remote?
         unless URI(builder.remote).scheme == "ssh"
-          raise Kamal::ConfigurationError, "Local registry with remote builder requires an SSH URL (e.g., ssh://user@host)"
+          raise Dash::ConfigurationError, "Local registry with remote builder requires an SSH URL (e.g., ssh://user@host)"
         end
       end
 
@@ -621,7 +631,7 @@ class Kamal::Configuration
       all_hosts.each do |host|
         run_configs = proxy_runs(host)
         if run_configs.uniq.size > 1
-          raise Kamal::ConfigurationError, "Conflicting proxy run configurations for host #{host}"
+          raise Dash::ConfigurationError, "Conflicting proxy run configurations for host #{host}"
         end
       end
     end
@@ -634,7 +644,7 @@ class Kamal::Configuration
     # accessories-only configuration has nothing to run it on.
     def ensure_valid_loadbalancer
       if proxy.loadbalancer == true && primary_role.nil?
-        raise Kamal::ConfigurationError, "proxy/loadbalancer: can't be enabled without servers"
+        raise Dash::ConfigurationError, "proxy/loadbalancer: can't be enabled without servers"
       end
 
       true
@@ -656,16 +666,16 @@ class Kamal::Configuration
     def validate_hooks_output_level!(level, hook = nil)
       return if HOOKS_OUTPUT_LEVELS.include?(level)
       context = hook ? " for hook '#{hook}'" : ""
-      raise Kamal::ConfigurationError, "Invalid hooks_output '#{level}'#{context}, must be one of: #{HOOKS_OUTPUT_LEVELS.join(', ')}"
+      raise Dash::ConfigurationError, "Invalid hooks_output '#{level}'#{context}, must be one of: #{HOOKS_OUTPUT_LEVELS.join(', ')}"
     end
 
     def git_version
       @git_version ||=
-        if Kamal::Git.used?
-          if Kamal::Git.uncommitted_changes.present? && !builder.git_clone?
+        if Dash::Git.used?
+          if Dash::Git.uncommitted_changes.present? && !builder.git_clone?
             uncommitted_suffix = "_uncommitted_#{SecureRandom.hex(8)}"
           end
-          [ Kamal::Git.revision, uncommitted_suffix ].compact.join
+          [ Dash::Git.revision, uncommitted_suffix ].compact.join
         else
           raise "Can't use commit hash as version, no git repository found in #{Dir.pwd}"
         end

data/lib/{kamal → dash}/docker.rb

@@ -1,7 +1,7 @@
 require "tempfile"
 require "open3"
 
-module Kamal::Docker
+module Dash::Docker
   extend self
   BUILD_CHECK_TAG = "kamal-local-build-check"
 

data/lib/{kamal → dash}/env_file.rb

@@ -1,5 +1,5 @@
 # Encode an env hash as a string where secret values have been looked up and all values escaped for Docker.
-class Kamal::EnvFile
+class Dash::EnvFile
   def initialize(env)
     @env = env
   end

data/lib/{kamal → dash}/git.rb

@@ -1,4 +1,4 @@
-module Kamal::Git
+module Dash::Git
   extend self
 
   def used?

data/lib/{kamal → dash}/otel_shipper.rb

@@ -4,7 +4,7 @@ require "json"
 require "securerandom"
 require "uri"
 
-class Kamal::OtelShipper
+class Dash::OtelShipper
   BATCH_SIZE = 100
   FLUSH_INTERVAL = 5.seconds
 
@@ -38,7 +38,7 @@ class Kamal::OtelShipper
     @run_id = SecureRandom.uuid
     @resource_attributes = [
       { key: "service.name", value: { stringValue: "kamal" } },
-      { key: "service.version", value: { stringValue: Kamal::VERSION } },
+      { key: "service.version", value: { stringValue: Dash::VERSION } },
       { key: "kamal.run_id", value: { stringValue: @run_id } },
       *tags.tags.map do |key, value|
         otel_key = OTEL_ATTRIBUTE_KEYS.fetch(key, "kamal.#{key}")
@@ -156,7 +156,7 @@ class Kamal::OtelShipper
       payload = {
         resourceLogs: [ {
           resource: { attributes: @resource_attributes },
-          scopeLogs: [ { scope: { name: "kamal", version: Kamal::VERSION }, logRecords: records } ]
+          scopeLogs: [ { scope: { name: "kamal", version: Dash::VERSION }, logRecords: records } ]
         } ]
       }
 

data/lib/{kamal → dash}/output/base_logger.rb

@@ -1,6 +1,6 @@
 require "logger"
 
-class Kamal::Output::BaseLogger < ::Logger
+class Dash::Output::BaseLogger < ::Logger
   def initialize
     super(nil)
     @subscription = ActiveSupport::Notifications.subscribe("modify.kamal", self)