diff --git a/extensions/brave/web-search-shared.ts b/extensions/brave/web-search-shared.ts
index b69fdc8661f6..cca5be7f8baa 100644
--- a/extensions/brave/web-search-shared.ts
+++ b/extensions/brave/web-search-shared.ts
@@ -9,10 +9,10 @@ import {
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 
 /** Canonical config path for the Brave Search API key. */
-export const BRAVE_CREDENTIAL_PATH = "plugins.entries.brave.config.webSearch.apiKey";
+const BRAVE_CREDENTIAL_PATH = "plugins.entries.brave.config.webSearch.apiKey";
 
 /** Resolve legacy top-level Brave credentials from old web-search config. */
-export function resolveLegacyTopLevelBraveCredential(
+function resolveLegacyTopLevelBraveCredential(
   config: unknown,
 ): { path: string; value: unknown } | undefined {
   if (!isRecord(config)) {
@@ -39,7 +39,7 @@ function resolveBraveWebSearchPluginConfig(config: unknown): Record<string, unkn
 }
 
 /** Resolve Brave credentials from current plugin config or legacy fallback. */
-export function resolveConfiguredBraveCredential(config: unknown): unknown {
+function resolveConfiguredBraveCredential(config: unknown): unknown {
   return (
     resolveBraveWebSearchPluginConfig(config)?.apiKey ??
     resolveLegacyTopLevelBraveCredential(config)?.value
diff --git a/extensions/deepinfra/provider-models.ts b/extensions/deepinfra/provider-models.ts
index 47412a484dc7..a8f4f9025d99 100644
--- a/extensions/deepinfra/provider-models.ts
+++ b/extensions/deepinfra/provider-models.ts
@@ -70,7 +70,7 @@ interface DeepInfraAgentModelEntry {
   metadata: DeepInfraAgentModelMetadata | null;
 }
 
-export type DeepInfraSurface = "chat" | "vlm" | "embed" | "image-gen" | "video-gen" | "tts" | "stt";
+type DeepInfraSurface = "chat" | "vlm" | "embed" | "image-gen" | "video-gen" | "tts" | "stt";
 
 export interface DeepInfraSurfaceModel {
   id: string;
@@ -85,7 +85,7 @@ export interface DeepInfraSurfaceModel {
   defaultIterations?: number;
 }
 
-export interface DeepInfraDiscoveredCatalog {
+interface DeepInfraDiscoveredCatalog {
   chat: DeepInfraSurfaceModel[];
   vlm: DeepInfraSurfaceModel[];
   embed: DeepInfraSurfaceModel[];
diff --git a/extensions/firecrawl/src/firecrawl-client.ts b/extensions/firecrawl/src/firecrawl-client.ts
index a19e3682eb84..78ca6fa94744 100644
--- a/extensions/firecrawl/src/firecrawl-client.ts
+++ b/extensions/firecrawl/src/firecrawl-client.ts
@@ -72,7 +72,7 @@ async function readFirecrawlJsonResponse(
   return await readProviderJsonResponse<Record<string, unknown>>(response, label, opts);
 }
 
-export type FirecrawlSearchParams = {
+type FirecrawlSearchParams = {
   cfg?: OpenClawConfig;
   query: string;
   count?: number;
@@ -82,7 +82,7 @@ export type FirecrawlSearchParams = {
   scrapeResults?: boolean;
 };
 
-export type FirecrawlScrapeParams = {
+type FirecrawlScrapeParams = {
   cfg?: OpenClawConfig;
   url: string;
   extractMode: "markdown" | "text";
diff --git a/extensions/firecrawl/web-search-shared.ts b/extensions/firecrawl/web-search-shared.ts
index 1fa4ebd879e6..a26e7e656b8a 100644
--- a/extensions/firecrawl/web-search-shared.ts
+++ b/extensions/firecrawl/web-search-shared.ts
@@ -5,10 +5,10 @@ import {
   type WebSearchProviderPlugin,
 } from "openclaw/plugin-sdk/provider-web-search-contract";
 
-export const FIRECRAWL_CREDENTIAL_PATH = "plugins.entries.firecrawl.config.webSearch.apiKey";
-export const FIRECRAWL_FETCH_CREDENTIAL_PATH = "plugins.entries.firecrawl.config.webFetch.apiKey";
+const FIRECRAWL_CREDENTIAL_PATH = "plugins.entries.firecrawl.config.webSearch.apiKey";
+const FIRECRAWL_FETCH_CREDENTIAL_PATH = "plugins.entries.firecrawl.config.webFetch.apiKey";
 
-export function getConfiguredFirecrawlFetchCredentialFallback(config?: {
+function getConfiguredFirecrawlFetchCredentialFallback(config?: {
   plugins?: { entries?: { firecrawl?: { config?: unknown } } };
 }) {
   const apiKey = (