build: Migrate to Obelisk 0.41.0-rc.1

Author: tomasol

AGENTS.md

@@ -312,7 +312,7 @@ Run locally with (`just build` builds into the component-local `target/` that
 `obelisk-local.toml` points at):
 ```bash
 just build
-obelisk server run --deployment ./obelisk-local.toml
+obelisk server run --server-config ./server.toml --deployment ./obelisk-local.toml
 ```
 
 Submit an execution (in another terminal):

Cargo.lock

@@ -1,11 +1,11 @@
-cargo-edit-upgrade 0.13.11
-cargo-expand 1.0.123
-cargo-insta 1.47.2
+cargo-edit-upgrade 0.13.13
+cargo-expand 1.0.124
+cargo-insta 1.48.0
 cargo-nextest 0.9.140
-just 1.55.1
-obelisk 0.40.0
+just 1.57.0
+obelisk 0.41.0-rc.1
 pkg-config 0.29.2
 rustc 1.96.0 (ac68faa20 2026-05-25)
-wasm-tools 1.253.0
-wasmtime 46.0.1
+wasm-tools 1.254.0
+wasmtime 47.0.3
 ldd (GNU libc) 2.42

dev-deps.txt

@@ -1,10 +1,10 @@
 build:
 
 verify-local:
-	obelisk server verify --allow-unavailable-runtime-config --deployment obelisk-local.toml
+	obelisk deployment verify --allow-unavailable-runtime-config --deployment obelisk-local.toml
 
 verify-oci:
-	obelisk server verify --allow-unavailable-runtime-config --deployment obelisk-oci.toml
+	obelisk deployment verify --allow-unavailable-runtime-config --deployment obelisk-oci.toml
 
 push tag:
 	(../../scripts/push-components.sh {{ tag }})

docker/activity-docker/Justfile

@@ -9,7 +9,7 @@
       };
     };
     obelisk = {
-      url = "github:obeli-sk/obelisk/latest";
+      url = "github:obeli-sk/obelisk/latest-pre";
       inputs = {
         nixpkgs.follows = "nixpkgs";
         flake-utils.follows = "flake-utils";

flake.lock

@@ -2,13 +2,13 @@ build:
 	CARGO_TARGET_DIR=target cargo build --profile=release_activity
 
 verify-local:
-	obelisk server verify --allow-unavailable-runtime-config --deployment obelisk-local.toml
+	obelisk deployment verify --server-config server.toml --allow-unavailable-runtime-config --deployment obelisk-local.toml
 
 verify-oci:
-	obelisk server verify --allow-unavailable-runtime-config --deployment obelisk-oci.toml
+	obelisk deployment verify --server-config server.toml --allow-unavailable-runtime-config --deployment obelisk-oci.toml
 
 push tag:
 	(../../scripts/push-components.sh {{ tag }})
 
 serve:
-	obelisk server run --deployment obelisk-local.toml
+	obelisk server run --server-config server.toml --deployment obelisk-local.toml

flake.nix

@@ -5,6 +5,5 @@ exec.lock_expiry.seconds = 15
 [[activity_wasm.allowed_host]]
 pattern = "https://api.machines.dev"
 methods = "*"
-[activity_wasm.allowed_host.secrets]
-env_vars = ["FLY_API_TOKEN"]
+secrets = ["FLY_API_TOKEN"]
 replace_in = ["headers"]

fly/activity-fly-http/Justfile

@@ -5,6 +5,5 @@ exec.lock_expiry.seconds = 15
 [[activity_wasm.allowed_host]]
 pattern = "https://api.machines.dev"
 methods = "*"
-[activity_wasm.allowed_host.secrets]
-env_vars = ["FLY_API_TOKEN"]
+secrets = ["FLY_API_TOKEN"]
 replace_in = ["headers"]

fly/activity-fly-http/obelisk-local.toml

@@ -0,0 +1,8 @@
+[secrets]
+FLY_API_TOKEN = { env = "FLY_API_TOKEN" }
+
+[[outbound_http.allowed_host]]
+pattern = "https://api.machines.dev"
+methods = "*"
+secrets = ["FLY_API_TOKEN"]
+replace_in = ["headers"]