diff --git a/src/plugins/installed-plugin-index-record-reader.ts b/src/plugins/installed-plugin-index-record-reader.ts
index ca6e3ddbfab..58096ed8d4e 100644
--- a/src/plugins/installed-plugin-index-record-reader.ts
+++ b/src/plugins/installed-plugin-index-record-reader.ts
@@ -30,7 +30,7 @@ function readRecordMap(value: unknown): Record<string, PluginInstallRecord> | nu
   return records;
 }
 
-export function extractPluginInstallRecordsFromPersistedInstalledPluginIndex(
+function extractPluginInstallRecordsFromPersistedInstalledPluginIndex(
   index: unknown,
 ): Record<string, PluginInstallRecord> | null {
   if (!isRecord(index) || !Array.isArray(index.plugins)) {
diff --git a/src/plugins/package-entry-resolution.ts b/src/plugins/package-entry-resolution.ts
index a8785829180..20a7105a0ce 100644
--- a/src/plugins/package-entry-resolution.ts
+++ b/src/plugins/package-entry-resolution.ts
@@ -28,14 +28,14 @@ function runtimeExtensionsLengthMismatchMessage(params: {
   );
 }
 
-export function normalizePackageManifestStringList(value: unknown): string[] {
+function normalizePackageManifestStringList(value: unknown): string[] {
   if (!Array.isArray(value)) {
     return [];
   }
   return value.map((entry) => normalizeOptionalString(entry) ?? "").filter(Boolean);
 }
 
-export function resolvePackageRuntimeExtensionEntries(params: {
+function resolvePackageRuntimeExtensionEntries(params: {
   manifest: PackageManifest | null | undefined;
   extensions: readonly string[];
 }): RuntimeExtensionsResolution {
diff --git a/src/plugins/plugin-control-plane-context.ts b/src/plugins/plugin-control-plane-context.ts
index 4c802af523e..a38e752d88f 100644
--- a/src/plugins/plugin-control-plane-context.ts
+++ b/src/plugins/plugin-control-plane-context.ts
@@ -80,6 +80,6 @@ export function resolvePluginControlPlaneFingerprint(
   return fingerprintPluginControlPlaneContext(resolvePluginControlPlaneContext(params));
 }
 
-export function fingerprintPluginControlPlaneContext(context: PluginControlPlaneContext): string {
+function fingerprintPluginControlPlaneContext(context: PluginControlPlaneContext): string {
   return hashJson(context);
 }
diff --git a/src/plugins/plugin-metadata-snapshot.ts b/src/plugins/plugin-metadata-snapshot.ts
index fe67eb28037..124f13a80f8 100644
--- a/src/plugins/plugin-metadata-snapshot.ts
+++ b/src/plugins/plugin-metadata-snapshot.ts
@@ -87,7 +87,7 @@ function freezeOwnerMap(owners: Map<string, string[]>): ReadonlyMap<string, read
   );
 }
 
-export function buildPluginMetadataOwnerMaps(
+function buildPluginMetadataOwnerMaps(
   plugins: readonly PluginManifestRecord[],
 ): PluginMetadataSnapshotOwnerMaps {
   const channels = new Map<string, string[]>();
diff --git a/src/plugins/provider-auth-choice-helpers.ts b/src/plugins/provider-auth-choice-helpers.ts
index 92e2e0dfa82..7eefbb0117d 100644
--- a/src/plugins/provider-auth-choice-helpers.ts
+++ b/src/plugins/provider-auth-choice-helpers.ts
@@ -68,7 +68,7 @@ function sanitizeConfigPatchValue(value: unknown): unknown {
   return next;
 }
 
-export function mergeConfigPatch<T>(base: T, patch: unknown): T {
+function mergeConfigPatch<T>(base: T, patch: unknown): T {
   if (!isPlainRecord(base) || !isPlainRecord(patch)) {
     return sanitizeConfigPatchValue(patch) as T;
   }
diff --git a/src/plugins/provider-auth-token.ts b/src/plugins/provider-auth-token.ts
index fb39a966726..1b8426a26d1 100644
--- a/src/plugins/provider-auth-token.ts
+++ b/src/plugins/provider-auth-token.ts
@@ -2,10 +2,10 @@ import { normalizeProviderId } from "../agents/provider-id.js";
 import { normalizeLowercaseStringOrEmpty } from "../shared/string-coerce.js";
 
 export const ANTHROPIC_SETUP_TOKEN_PREFIX = "sk-ant-oat01-";
-export const ANTHROPIC_SETUP_TOKEN_MIN_LENGTH = 80;
-export const DEFAULT_TOKEN_PROFILE_NAME = "default";
+const ANTHROPIC_SETUP_TOKEN_MIN_LENGTH = 80;
+const DEFAULT_TOKEN_PROFILE_NAME = "default";
 
-export function normalizeTokenProfileName(raw: string): string {
+function normalizeTokenProfileName(raw: string): string {
   const trimmed = raw.trim();
   if (!trimmed) {
     return DEFAULT_TOKEN_PROFILE_NAME;
diff --git a/src/plugins/provider-model-primary.ts b/src/plugins/provider-model-primary.ts
index d5dfcb5836a..e3cc3069d30 100644
--- a/src/plugins/provider-model-primary.ts
+++ b/src/plugins/provider-model-primary.ts
@@ -1,7 +1,7 @@
 import type { AgentModelListConfig } from "../config/types.js";
 import type { OpenClawConfig } from "../config/types.openclaw.js";
 
-export function resolvePrimaryModel(model?: AgentModelListConfig | string): string | undefined {
+function resolvePrimaryModel(model?: AgentModelListConfig | string): string | undefined {
   if (typeof model === "string") {
     return model;
   }
diff --git a/src/plugins/provider-wizard.ts b/src/plugins/provider-wizard.ts
index 6301aac4dc3..c3f4a55231e 100644
--- a/src/plugins/provider-wizard.ts
+++ b/src/plugins/provider-wizard.ts
@@ -15,7 +15,7 @@ import type {
   ProviderPluginWizardSetup,
 } from "./types.js";
 
-export const PROVIDER_PLUGIN_CHOICE_PREFIX = "provider-plugin:";
+const PROVIDER_PLUGIN_CHOICE_PREFIX = "provider-plugin:";
 
 export type ProviderWizardOption = {
   value: string;
diff --git a/src/plugins/runtime/runtime-config.ts b/src/plugins/runtime/runtime-config.ts
index 0516dbd99c7..e782d663c79 100644
--- a/src/plugins/runtime/runtime-config.ts
+++ b/src/plugins/runtime/runtime-config.ts
@@ -6,7 +6,7 @@ import {
 import { logWarn } from "../../logger.js";
 import type { PluginRuntime } from "./types.js";
 
-export const RUNTIME_CONFIG_LOAD_WRITE_COMPAT_CODE = "runtime-config-load-write";
+const RUNTIME_CONFIG_LOAD_WRITE_COMPAT_CODE = "runtime-config-load-write";
 
 const warnedDeprecatedConfigApis = new Set<string>();
 
diff --git a/src/plugins/uninstall.ts b/src/plugins/uninstall.ts
index 7a8c072fc3c..860cc9a8e53 100644
--- a/src/plugins/uninstall.ts
+++ b/src/plugins/uninstall.ts
@@ -66,7 +66,7 @@ export function createEmptyUninstallActions(
   };
 }
 
-export function createEmptyConfigUninstallActions(): Omit<UninstallActions, "directory"> {
+function createEmptyConfigUninstallActions(): Omit<UninstallActions, "directory"> {
   const { directory: _directory, ...actions } = createEmptyUninstallActions();
   return actions;
 }