diff --git a/extensions/bluebubbles/src/secret-contract.ts b/extensions/bluebubbles/src/secret-contract.ts
index aaffa6bfc9d..beec9de7a6b 100644
--- a/extensions/bluebubbles/src/secret-contract.ts
+++ b/extensions/bluebubbles/src/secret-contract.ts
@@ -3,7 +3,6 @@ import {
   getChannelSurface,
   type ResolverContext,
   type SecretDefaults,
-  type SecretTargetRegistryEntry,
 } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
 
 export const secretTargetRegistryEntries = [
@@ -29,7 +28,7 @@ export const secretTargetRegistryEntries = [
     includeInConfigure: true,
     includeInAudit: true,
   },
-] satisfies SecretTargetRegistryEntry[];
+] satisfies import("openclaw/plugin-sdk/channel-secret-basic-runtime").SecretTargetRegistryEntry[];
 
 export function collectRuntimeConfigAssignments(params: {
   config: { channels?: Record<string, unknown> };
diff --git a/extensions/device-pair/index.test.ts b/extensions/device-pair/index.test.ts
index e6f79fe31a3..c7d3fa9d736 100644
--- a/extensions/device-pair/index.test.ts
+++ b/extensions/device-pair/index.test.ts
@@ -8,7 +8,6 @@ import type {
 import { createTestPluginApi } from "openclaw/plugin-sdk/plugin-test-api";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import type { OpenClawPluginApi } from "./api.js";
-import type { PendingPairingRequest } from "./notify.ts";
 
 const pluginApiMocks = vi.hoisted(() => ({
   clearDeviceBootstrapTokens: vi.fn(async () => ({ removed: 2 })),
@@ -713,7 +712,7 @@ describe("device-pair notify pending formatting", () => {
   it("includes role and scopes for pending requests", async () => {
     const { formatPendingRequests } =
       await vi.importActual<typeof import("./notify.ts")>("./notify.ts");
-    const pending: PendingPairingRequest[] = [
+    const pending: Parameters<typeof formatPendingRequests>[0] = [
       {
         requestId: "req-1",
         deviceId: "device-1",
@@ -737,7 +736,7 @@ describe("device-pair notify pending formatting", () => {
   it("falls back to roles list and no scopes when role/scopes are absent", async () => {
     const { formatPendingRequests } =
       await vi.importActual<typeof import("./notify.ts")>("./notify.ts");
-    const pending: PendingPairingRequest[] = [
+    const pending: Parameters<typeof formatPendingRequests>[0] = [
       {
         requestId: "req-2",
         deviceId: "device-2",
diff --git a/extensions/device-pair/notify.ts b/extensions/device-pair/notify.ts
index 28064fa9f2e..f5714f4fb43 100644
--- a/extensions/device-pair/notify.ts
+++ b/extensions/device-pair/notify.ts
@@ -22,7 +22,7 @@ type NotifyStateFile = {
   notifiedRequestIds: Record<string, number>;
 };
 
-export type PendingPairingRequest = {
+type PendingPairingRequest = {
   requestId: string;
   deviceId: string;
   displayName?: string;
diff --git a/extensions/googlechat/src/secret-contract.ts b/extensions/googlechat/src/secret-contract.ts
index 284c551050c..145aaf6fdcf 100644
--- a/extensions/googlechat/src/secret-contract.ts
+++ b/extensions/googlechat/src/secret-contract.ts
@@ -7,7 +7,6 @@ import {
   resolveChannelAccountSurface,
   type ResolverContext,
   type SecretDefaults,
-  type SecretTargetRegistryEntry,
 } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
 import { coerceSecretRef } from "openclaw/plugin-sdk/secret-ref-runtime";
 
@@ -44,7 +43,7 @@ export const secretTargetRegistryEntries = [
     includeInConfigure: true,
     includeInAudit: true,
   },
-] satisfies SecretTargetRegistryEntry[];
+] satisfies import("openclaw/plugin-sdk/channel-secret-basic-runtime").SecretTargetRegistryEntry[];
 
 function resolveSecretInputRef(params: {
   value: unknown;
diff --git a/extensions/irc/src/secret-contract.ts b/extensions/irc/src/secret-contract.ts
index fc80f53653d..bd31b6ea044 100644
--- a/extensions/irc/src/secret-contract.ts
+++ b/extensions/irc/src/secret-contract.ts
@@ -7,7 +7,6 @@ import {
   isRecord,
   type ResolverContext,
   type SecretDefaults,
-  type SecretTargetRegistryEntry,
 } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
 
 export const secretTargetRegistryEntries = [
@@ -55,7 +54,7 @@ export const secretTargetRegistryEntries = [
     includeInConfigure: true,
     includeInAudit: true,
   },
-] satisfies SecretTargetRegistryEntry[];
+] satisfies import("openclaw/plugin-sdk/channel-secret-basic-runtime").SecretTargetRegistryEntry[];
 
 export function collectRuntimeConfigAssignments(params: {
   config: { channels?: Record<string, unknown> };
diff --git a/extensions/nextcloud-talk/src/secret-contract.ts b/extensions/nextcloud-talk/src/secret-contract.ts
index 86de0fce07b..4b80fd20bbe 100644
--- a/extensions/nextcloud-talk/src/secret-contract.ts
+++ b/extensions/nextcloud-talk/src/secret-contract.ts
@@ -5,7 +5,6 @@ import {
   type ChannelAccountEntry,
   type ResolverContext,
   type SecretDefaults,
-  type SecretTargetRegistryEntry,
 } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
 
 export const secretTargetRegistryEntries = [
@@ -53,7 +52,7 @@ export const secretTargetRegistryEntries = [
     includeInConfigure: true,
     includeInAudit: true,
   },
-] satisfies SecretTargetRegistryEntry[];
+] satisfies import("openclaw/plugin-sdk/channel-secret-basic-runtime").SecretTargetRegistryEntry[];
 
 export function collectRuntimeConfigAssignments(params: {
   config: { channels?: Record<string, unknown> };