diff --git a/src/gateway/config-reload-plan.ts b/src/gateway/config-reload-plan.ts
index e808e8cc8fb..29ec73212a3 100644
--- a/src/gateway/config-reload-plan.ts
+++ b/src/gateway/config-reload-plan.ts
@@ -39,7 +39,7 @@ type ReloadAction =
   | "dispose-mcp-runtimes"
   | `restart-channel:${ChannelId}`;
 
-export type GatewayReloadPlanOptions = {
+type GatewayReloadPlanOptions = {
   noopPaths?: Iterable<string>;
   forceChangedPaths?: Iterable<string>;
 };
diff --git a/src/gateway/control-ui-routing.ts b/src/gateway/control-ui-routing.ts
index f4c24ddf7f5..adc96b1e89e 100644
--- a/src/gateway/control-ui-routing.ts
+++ b/src/gateway/control-ui-routing.ts
@@ -1,6 +1,6 @@
 import { isReadHttpMethod } from "./control-ui-http-utils.js";
 
-export type ControlUiRequestClassification =
+type ControlUiRequestClassification =
   | { kind: "not-control-ui" }
   | { kind: "not-found" }
   | { kind: "redirect"; location: string }
diff --git a/src/gateway/credential-planner.ts b/src/gateway/credential-planner.ts
index 2aee7adfa43..c89771a7e06 100644
--- a/src/gateway/credential-planner.ts
+++ b/src/gateway/credential-planner.ts
@@ -3,13 +3,13 @@ import type { OpenClawConfig } from "../config/types.openclaw.js";
 import { hasConfiguredSecretInput, resolveSecretInputRef } from "../config/types.secrets.js";
 import { normalizeOptionalString } from "../shared/string-coerce.js";
 
-export type GatewayCredentialInputPath =
+type GatewayCredentialInputPath =
   | "gateway.auth.token"
   | "gateway.auth.password"
   | "gateway.remote.token"
   | "gateway.remote.password";
 
-export type GatewayConfiguredCredentialInput = {
+type GatewayConfiguredCredentialInput = {
   path: GatewayCredentialInputPath;
   configured: boolean;
   value?: string;
diff --git a/src/gateway/credentials-secret-inputs.ts b/src/gateway/credentials-secret-inputs.ts
index c68dc8a0b23..933d34d4da8 100644
--- a/src/gateway/credentials-secret-inputs.ts
+++ b/src/gateway/credentials-secret-inputs.ts
@@ -20,7 +20,7 @@ import {
   type SupportedGatewaySecretInputPath,
 } from "./secret-input-paths.js";
 
-export type GatewayCredentialSecretInputOptions = {
+type GatewayCredentialSecretInputOptions = {
   config: OpenClawConfig;
   explicitAuth?: ExplicitGatewayAuth;
   urlOverride?: string;
diff --git a/src/gateway/device-auth.ts b/src/gateway/device-auth.ts
index 217cc51fdf0..32d7205ab53 100644
--- a/src/gateway/device-auth.ts
+++ b/src/gateway/device-auth.ts
@@ -1,7 +1,7 @@
 import { normalizeDeviceMetadataForAuth } from "./device-metadata-normalization.js";
 export { normalizeDeviceMetadataForAuth };
 
-export type DeviceAuthPayloadParams = {
+type DeviceAuthPayloadParams = {
   deviceId: string;
   clientId: string;
   clientMode: string;
@@ -12,7 +12,7 @@ export type DeviceAuthPayloadParams = {
   nonce: string;
 };
 
-export type DeviceAuthPayloadV3Params = DeviceAuthPayloadParams & {
+type DeviceAuthPayloadV3Params = DeviceAuthPayloadParams & {
   platform?: string | null;
   deviceFamily?: string | null;
 };
diff --git a/src/gateway/event-loop-ready.ts b/src/gateway/event-loop-ready.ts
index ee3cede53f2..03e20d45ea8 100644
--- a/src/gateway/event-loop-ready.ts
+++ b/src/gateway/event-loop-ready.ts
@@ -8,7 +8,7 @@ export type EventLoopReadyResult = {
   aborted: boolean;
 };
 
-export type EventLoopReadyOptions = {
+type EventLoopReadyOptions = {
   maxWaitMs?: number;
   intervalMs?: number;
   driftThresholdMs?: number;
diff --git a/src/gateway/exec-approval-manager.ts b/src/gateway/exec-approval-manager.ts
index 4bc5e2bc059..197fd0a670a 100644
--- a/src/gateway/exec-approval-manager.ts
+++ b/src/gateway/exec-approval-manager.ts
@@ -20,7 +20,7 @@ function scheduleResolvedEntryCleanup(cleanup: () => void): void {
   unrefTimer(timer);
 }
 
-export type ExecApprovalRequestPayload = InfraExecApprovalRequestPayload;
+type ExecApprovalRequestPayload = InfraExecApprovalRequestPayload;
 
 export type ExecApprovalRecord<TPayload = ExecApprovalRequestPayload> = {
   id: string;