Fixes #460 ## Problem ``` 1. void deploy cf workers versions create --prebuilt DO export: {type:"durable-object", storage:"sqlite"} 2. void secret put PUT /scripts/{w}/secrets → Cloudflare copies v1 → 100% 3. void deploy live version has a secret → Void's pinned uploader DO export: {type, storage, state:"created"} ← differs preview_urls:false → stage [v2 @100%, v3 @0%] → 100405 "versions must declare identical exports" ``` The first secret on a Worker moves `void deploy` from cf's uploader to Void's pinned-secret uploader (`cf-version-runner.ts`), and the two wrote `exports` differently: - Void added `state: "created"` to live Durable Object classes; cf leaves it out. - Void kept Build Output order; cf sends Worker entrypoints, then Durable Objects, then Workflows. - Void kept `container` on legacy-kv classes and sent `{}` for no exports; cf drops both. With `preview_urls: false`, Void checks a new version by staging it at 0% beside the live one. Cloudflare only splits traffic between versions with identical `exports`, so every retry failed. ## Fix - `exportsFromOutput` keeps its checks, then builds the entries with `@cloudflare/config`'s `convertToWranglerConfig` (the converter cf uses) and orders and trims them like cf's `resolveExportsUploadPayload` (Workflows stay identity-only, as before). - On 100405 during staging, the error now says the versions declare different exports and suggests one `void deploy --platform cloudflare --atomic`. "Production traffic is unchanged" stays. - The touched 10210 hint check uses `includes` instead of a regex. **Note:** a Worker whose live version was already uploaded by the old pinned path (with `state: "created"`) may hit 100405 once more; the new hint tells the user to run `--atomic` once. ## Tests | Test | Old code | Fix | |---|---|---| | `uploads the same exports as cf for the same Build Output`: runs the real `cf` against a fake API and compares its upload with the pinned upload (key order counts) | fail | pass | | `converts Container and transfer exports as cf does`: expectation built from `convertToWranglerConfig` so cf drift shows up | fail | pass | | Updated locked shapes (live secrets ×2, Sandbox lifecycle ×6) | fail | pass | | `suggests one atomic publication when the versions declare different exports` | fail | pass | `cf-version-runner.test.ts` + `cloudflare-deploy.test.ts`: 545 passed. Typecheck, lint, format clean. Not run against a real Cloudflare account. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

Commits

Commits on Oct 19, 2026

fix(deploy): upload the same Worker exports as cf when secrets are pinned (#487)