diff --git a/src/gateway/chat-abort.ts b/src/gateway/chat-abort.ts
index 95f3e7f3167..79d009b88e5 100644
--- a/src/gateway/chat-abort.ts
+++ b/src/gateway/chat-abort.ts
@@ -31,7 +31,7 @@ export function isChatStopCommandText(text: string): boolean {
   return isAbortRequestText(text);
 }
 
-export function resolveChatRunExpiresAtMs(params: {
+function resolveChatRunExpiresAtMs(params: {
   now: number;
   timeoutMs: number;
   graceMs?: number;
diff --git a/src/gateway/credentials.ts b/src/gateway/credentials.ts
index 8ae3f0db564..e739dbbfa9a 100644
--- a/src/gateway/credentials.ts
+++ b/src/gateway/credentials.ts
@@ -8,7 +8,6 @@ import {
 export {
   hasGatewayPasswordEnvCandidate,
   hasGatewayTokenEnvCandidate,
-  trimCredentialToUndefined,
   trimToUndefined,
 } from "./credential-planner.js";
 
diff --git a/src/gateway/explicit-connection-policy.ts b/src/gateway/explicit-connection-policy.ts
index 51ec20d0088..229f01ac0f1 100644
--- a/src/gateway/explicit-connection-policy.ts
+++ b/src/gateway/explicit-connection-policy.ts
@@ -1,7 +1,7 @@
 import type { OpenClawConfig } from "../config/types.openclaw.js";
 import { trimToUndefined, type ExplicitGatewayAuth } from "./credentials.js";
 
-export function hasExplicitGatewayConnectionAuth(auth?: ExplicitGatewayAuth): boolean {
+function hasExplicitGatewayConnectionAuth(auth?: ExplicitGatewayAuth): boolean {
   return Boolean(trimToUndefined(auth?.token) || trimToUndefined(auth?.password));
 }
 
diff --git a/src/gateway/gateway-config-prompts.shared.ts b/src/gateway/gateway-config-prompts.shared.ts
index 2987e69564b..954bdb37ce1 100644
--- a/src/gateway/gateway-config-prompts.shared.ts
+++ b/src/gateway/gateway-config-prompts.shared.ts
@@ -43,7 +43,7 @@ function normalizeTailnetHostForUrl(rawHost: string): string | null {
   return trimmed;
 }
 
-export function buildTailnetHttpsOrigin(rawHost: string): string | null {
+function buildTailnetHttpsOrigin(rawHost: string): string | null {
   const normalizedHost = normalizeTailnetHostForUrl(rawHost);
   if (!normalizedHost) {
     return null;
@@ -55,7 +55,7 @@ export function buildTailnetHttpsOrigin(rawHost: string): string | null {
   }
 }
 
-export function appendAllowedOrigin(existing: string[] | undefined, origin: string): string[] {
+function appendAllowedOrigin(existing: string[] | undefined, origin: string): string[] {
   const current = existing ?? [];
   const normalized = normalizeLowercaseStringOrEmpty(origin);
   if (current.some((entry) => normalizeLowercaseStringOrEmpty(entry) === normalized)) {