diff --git a/src/gateway/mcp-http.loopback-runtime.ts b/src/gateway/mcp-http.loopback-runtime.ts
index 7fff9071f13..565f96820ed 100644
--- a/src/gateway/mcp-http.loopback-runtime.ts
+++ b/src/gateway/mcp-http.loopback-runtime.ts
@@ -1,4 +1,4 @@
-export type McpLoopbackRuntime = {
+type McpLoopbackRuntime = {
   port: number;
   ownerToken: string;
   nonOwnerToken: string;
diff --git a/src/gateway/mcp-http.runtime.ts b/src/gateway/mcp-http.runtime.ts
index ab0efb431a5..9a19e61634b 100644
--- a/src/gateway/mcp-http.runtime.ts
+++ b/src/gateway/mcp-http.runtime.ts
@@ -1,11 +1,5 @@
 import { applyOwnerOnlyToolPolicy } from "../agents/tool-policy.js";
 import type { OpenClawConfig } from "../config/types.openclaw.js";
-import {
-  clearActiveMcpLoopbackRuntimeByOwnerToken,
-  createMcpLoopbackServerConfig,
-  getActiveMcpLoopbackRuntime,
-  setActiveMcpLoopbackRuntime,
-} from "./mcp-http.loopback-runtime.js";
 import {
   buildMcpToolSchema,
   type McpLoopbackTool,
@@ -72,10 +66,3 @@ export class McpLoopbackToolCache {
     return nextEntry;
   }
 }
-
-export {
-  clearActiveMcpLoopbackRuntimeByOwnerToken,
-  createMcpLoopbackServerConfig,
-  getActiveMcpLoopbackRuntime,
-  setActiveMcpLoopbackRuntime,
-};
diff --git a/src/gateway/net.ts b/src/gateway/net.ts
index eccf604f850..fd0348c6038 100644
--- a/src/gateway/net.ts
+++ b/src/gateway/net.ts
@@ -308,7 +308,7 @@ export function defaultGatewayBindMode(tailscaleMode?: string): GatewayBindMode
  * @param host - The host address to test
  * @returns True if we can successfully bind to this address
  */
-export async function canBindToHost(host: string): Promise<boolean> {
+async function canBindToHost(host: string): Promise<boolean> {
   return new Promise((resolve) => {
     const testServer = net.createServer();
     testServer.once("error", () => {
diff --git a/src/gateway/node-invoke-system-run-approval-errors.ts b/src/gateway/node-invoke-system-run-approval-errors.ts
index 9c50a5004b1..91f8fe87ef5 100644
--- a/src/gateway/node-invoke-system-run-approval-errors.ts
+++ b/src/gateway/node-invoke-system-run-approval-errors.ts
@@ -1,4 +1,4 @@
-export type SystemRunApprovalGuardError = {
+type SystemRunApprovalGuardError = {
   ok: false;
   message: string;
   details: Record<string, unknown>;
diff --git a/src/gateway/node-invoke-system-run-approval-match.ts b/src/gateway/node-invoke-system-run-approval-match.ts
index 2773f81ee7c..8e0c39862ec 100644
--- a/src/gateway/node-invoke-system-run-approval-match.ts
+++ b/src/gateway/node-invoke-system-run-approval-match.ts
@@ -22,7 +22,6 @@ function requestMismatch(): SystemRunApprovalMatchResult {
 }
 
 export { toSystemRunApprovalMismatchError } from "../infra/system-run-approval-binding.js";
-export type { SystemRunApprovalMatchResult } from "../infra/system-run-approval-binding.js";
 
 export function evaluateSystemRunApprovalMatch(params: {
   argv: string[];
diff --git a/src/gateway/server-discovery.ts b/src/gateway/server-discovery.ts
index 98554d81dee..a974889496e 100644
--- a/src/gateway/server-discovery.ts
+++ b/src/gateway/server-discovery.ts
@@ -3,7 +3,7 @@ import path from "node:path";
 import { getTailnetHostname } from "../infra/tailscale.js";
 import { runExec } from "../process/exec.js";
 
-export type ResolveBonjourCliPathOptions = {
+type ResolveBonjourCliPathOptions = {
   env?: NodeJS.ProcessEnv;
   argv?: string[];
   execPath?: string;