refactor: localize internal implementation constants (#101758)

vincentkoc · web-flow · commit 3d206140f3f0 · 2026-07-07T08:34:13.000-07:00
diff --git a/extensions/clickclack/src/activity.ts b/extensions/clickclack/src/activity.ts
@@ -19,7 +19,7 @@ import { buildChannelProgressDraftLine } from "openclaw/plugin-sdk/channel-outbo
 import type { ClickClackMessage, ClickClackMessageProvenance } from "./types.js";
 
 /** Debounce window for PATCHing streaming commentary snapshots. */
-export const CLICKCLACK_COMMENTARY_FLUSH_MS = 700;
+const CLICKCLACK_COMMENTARY_FLUSH_MS = 700;
 
 /** Item event payload shape delivered by `replyOptions.onItemEvent`. */
 export type ClickClackItemEventPayload = {
diff --git a/extensions/discord/src/monitor/reply-typing-feedback.ts b/extensions/discord/src/monitor/reply-typing-feedback.ts
@@ -6,7 +6,7 @@ import { createDiscordRestClient } from "../client.js";
 import type { RequestClient } from "../internal/discord.js";
 import { sendTyping } from "./typing.js";
 
-export const DISCORD_REPLY_TYPING_MAX_DURATION_MS = 20 * 60_000;
+const DISCORD_REPLY_TYPING_MAX_DURATION_MS = 20 * 60_000;
 
 // Discord can keep long tool-heavy replies alive, but not forever.
 // The dispatch restart path refreshes this TTL after queue wait time.
diff --git a/extensions/discord/src/monitor/thread-bindings.state.ts b/extensions/discord/src/monitor/thread-bindings.state.ts
@@ -75,9 +75,9 @@ const THREAD_BINDINGS_STATE = resolveThreadBindingsGlobalState();
 
 export const MANAGERS_BY_ACCOUNT_ID = THREAD_BINDINGS_STATE.managersByAccountId;
 export const BINDINGS_BY_THREAD_ID = THREAD_BINDINGS_STATE.bindingsByThreadId;
-export const BINDINGS_BY_SESSION_KEY = THREAD_BINDINGS_STATE.bindingsBySessionKey;
-export const TOKENS_BY_ACCOUNT_ID = THREAD_BINDINGS_STATE.tokensByAccountId;
-export const RECENT_UNBOUND_WEBHOOK_ECHOES_BY_BINDING_KEY =
+const BINDINGS_BY_SESSION_KEY = THREAD_BINDINGS_STATE.bindingsBySessionKey;
+const TOKENS_BY_ACCOUNT_ID = THREAD_BINDINGS_STATE.tokensByAccountId;
+const RECENT_UNBOUND_WEBHOOK_ECHOES_BY_BINDING_KEY =
   THREAD_BINDINGS_STATE.recentUnboundWebhookEchoesByBindingKey;
 export const REUSABLE_WEBHOOKS_BY_ACCOUNT_CHANNEL =
   THREAD_BINDINGS_STATE.reusableWebhooksByAccountChannel;
diff --git a/extensions/discord/src/voice/ingress.ts b/extensions/discord/src/voice/ingress.ts
@@ -11,7 +11,7 @@ import { authorizeDiscordVoiceIngress } from "./access.js";
 import type { VoiceSessionEntry } from "./session.js";
 import type { DiscordVoiceSpeakerContextResolver } from "./speaker-context.js";
 
-export const DISCORD_VOICE_MESSAGE_PROVIDER = "discord-voice";
+const DISCORD_VOICE_MESSAGE_PROVIDER = "discord-voice";
 
 const logger = createSubsystemLogger("discord/voice");
 
diff --git a/extensions/google-meet/src/realtime.ts b/extensions/google-meet/src/realtime.ts
@@ -127,8 +127,8 @@ export function getGoogleMeetRealtimeTranscriptHealth(
 export type GoogleMeetRealtimeEventEntry = RealtimeVoiceBridgeEventLogEntry;
 
 export const GOOGLE_MEET_AGENT_TRANSCRIPT_DEBOUNCE_MS = 900;
-export const GOOGLE_MEET_OUTPUT_ECHO_SUPPRESSION_TAIL_MS = 3_000;
-export const GOOGLE_MEET_TRANSCRIPT_ECHO_LOOKBACK_MS = 45_000;
+const GOOGLE_MEET_OUTPUT_ECHO_SUPPRESSION_TAIL_MS = 3_000;
+const GOOGLE_MEET_TRANSCRIPT_ECHO_LOOKBACK_MS = 45_000;
 
 export function recordGoogleMeetRealtimeEvent(
   events: GoogleMeetRealtimeEventEntry[],
diff --git a/extensions/imessage/src/monitor/inbound-dedupe.ts b/extensions/imessage/src/monitor/inbound-dedupe.ts
@@ -14,14 +14,14 @@ import { createHash } from "node:crypto";
 import { createClaimableDedupe, type ClaimableDedupe } from "openclaw/plugin-sdk/persistent-dedupe";
 import type { IMessagePayload } from "./types.js";
 
-export const IMESSAGE_INBOUND_DEDUPE_PLUGIN_ID = "imessage";
-export const IMESSAGE_INBOUND_DEDUPE_NAMESPACE_PREFIX = "imessage.inbound-dedupe";
+const IMESSAGE_INBOUND_DEDUPE_PLUGIN_ID = "imessage";
+const IMESSAGE_INBOUND_DEDUPE_NAMESPACE_PREFIX = "imessage.inbound-dedupe";
 // 4h recency window: long enough to absorb a reconnect/restart burst that
 // re-emits recently dispatched rows, short enough that a genuinely-new message
 // reusing a stale composite key after hours is not wrongly suppressed.
 export const IMESSAGE_INBOUND_DEDUPE_TTL_MS = 4 * 60 * 60 * 1000;
-export const IMESSAGE_INBOUND_DEDUPE_MEMORY_MAX = 5_000;
-export const IMESSAGE_INBOUND_DEDUPE_STATE_MAX_ENTRIES = 10_000;
+const IMESSAGE_INBOUND_DEDUPE_MEMORY_MAX = 5_000;
+const IMESSAGE_INBOUND_DEDUPE_STATE_MAX_ENTRIES = 10_000;
 
 // Drop a LIVE inbound row whose send date is older than this relative to
 // arrival. Stale backlog Apple flushes after a Push recovery carries old send
diff --git a/extensions/line/src/actions.ts b/extensions/line/src/actions.ts
@@ -4,7 +4,7 @@ import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 
 export type Action = messagingApi.Action;
 export const LINE_ACTION_LABEL_LIMIT = 20;
-export const LINE_ACTION_DATA_LIMIT = 300;
+const LINE_ACTION_DATA_LIMIT = 300;
 
 export function truncateLineActionLabel(label: string, limit = LINE_ACTION_LABEL_LIMIT): string {
   return truncateUtf16Safe(label, limit);
diff --git a/extensions/logbook/src/analyze.ts b/extensions/logbook/src/analyze.ts
@@ -7,7 +7,7 @@ import type { LogbookCard, LogbookCardDraft, LogbookDistraction } from "./types.
 /** Cards within this window before a batch are treated as a revisable draft. */
 export const CARD_LOOKBACK_MS = 45 * 60 * 1000;
 /** Frame gap that splits one analysis window into separate batches. */
-export const BATCH_MAX_GAP_MS = 2 * 60 * 1000;
+const BATCH_MAX_GAP_MS = 2 * 60 * 1000;
 /** Upper bound of images sent to the vision model per batch. */
 export const MAX_FRAMES_PER_CALL = 16;
 
@@ -243,7 +243,7 @@ export function parseCardsJson(params: {
 }
 
 /** Sub-minute slack so minute-rounded model times do not fail coverage checks. */
-export const COVERAGE_TOLERANCE_MS = 2 * 60 * 1000;
+const COVERAGE_TOLERANCE_MS = 2 * 60 * 1000;
 
 function formatClockForError(ms: number): string {
   const date = new Date(ms);
diff --git a/extensions/logbook/src/prompts.ts b/extensions/logbook/src/prompts.ts
@@ -2,8 +2,8 @@
 // timeline cards) adapted from the approach popularized by Dayflow (MIT).
 import type { LogbookCard, LogbookObservation } from "./types.js";
 
-export const CARD_MIN_MINUTES = 10;
-export const CARD_MAX_MINUTES = 60;
+const CARD_MIN_MINUTES = 10;
+const CARD_MAX_MINUTES = 60;
 export const CARD_CATEGORIES = [
   "coding",
   "review",
diff --git a/extensions/matrix/src/matrix/profile.ts b/extensions/matrix/src/matrix/profile.ts
@@ -5,7 +5,7 @@ import {
 } from "openclaw/plugin-sdk/string-coerce-runtime";
 import type { MatrixClient } from "./sdk.js";
 
-export const MATRIX_PROFILE_AVATAR_MAX_BYTES = 10 * 1024 * 1024;
+const MATRIX_PROFILE_AVATAR_MAX_BYTES = 10 * 1024 * 1024;
 
 type MatrixProfileClient = Pick<
   MatrixClient,
diff --git a/extensions/memory-core/src/dreaming-state.ts b/extensions/memory-core/src/dreaming-state.ts
@@ -6,7 +6,7 @@ import type {
   PluginStateKeyedStore,
 } from "openclaw/plugin-sdk/plugin-state-runtime";
 
-export const MEMORY_CORE_PLUGIN_ID = "memory-core";
+const MEMORY_CORE_PLUGIN_ID = "memory-core";
 export const DREAMING_DAILY_INGESTION_NAMESPACE = "dreaming-daily-ingestion";
 export const DREAMING_SESSION_INGESTION_FILES_NAMESPACE = "dreaming-session-ingestion-files";
 export const DREAMING_SESSION_INGESTION_SEEN_NAMESPACE = "dreaming-session-ingestion-seen";
diff --git a/extensions/memory-core/src/qmd-session-artifacts.ts b/extensions/memory-core/src/qmd-session-artifacts.ts
@@ -6,7 +6,7 @@ import type { MemorySearchResult } from "openclaw/plugin-sdk/memory-core-host-ru
 
 const QMD_SESSION_ARTIFACT_TABLE = "openclaw_qmd_session_artifacts";
 
-export const QMD_SESSION_ARTIFACT_HIT: unique symbol = Symbol("openclaw.qmdSessionArtifactHit");
+const QMD_SESSION_ARTIFACT_HIT: unique symbol = Symbol("openclaw.qmdSessionArtifactHit");
 
 export type QmdSessionArtifactMapping = {
   agentId: string;
diff --git a/extensions/msteams/src/bot-framework-service-url.ts b/extensions/msteams/src/bot-framework-service-url.ts
@@ -16,7 +16,7 @@ const DEFAULT_BOT_FRAMEWORK_SERVICE_URL_HOST_ALLOWLIST = [
   "botframework.azure.cn",
 ] as const;
 
-export const BOT_FRAMEWORK_SERVICE_URL_HOST_ALLOWLIST = normalizeHostnameSuffixAllowlist(
+const BOT_FRAMEWORK_SERVICE_URL_HOST_ALLOWLIST = normalizeHostnameSuffixAllowlist(
   DEFAULT_BOT_FRAMEWORK_SERVICE_URL_HOST_ALLOWLIST,
 );
 
diff --git a/extensions/msteams/src/cloud.ts b/extensions/msteams/src/cloud.ts
@@ -3,7 +3,7 @@ import type { MSTeamsConfig } from "../runtime-api.js";
 
 export type MSTeamsCloudName = "Public" | "USGov" | "USGovDoD" | "China";
 
-export const DEFAULT_MSTEAMS_CLOUD: MSTeamsCloudName = "Public";
+const DEFAULT_MSTEAMS_CLOUD: MSTeamsCloudName = "Public";
 
 const PUBLIC_MSTEAMS_SERVICE_HOST = "smba.trafficmanager.net";
 const CHINA_BOT_FRAMEWORK_SERVICE_HOST = "botframework.azure.cn";
diff --git a/extensions/msteams/src/graph-messages.ts b/extensions/msteams/src/graph-messages.ts
@@ -304,14 +304,7 @@ export async function listPinsMSTeams(
 // Reactions
 // ---------------------------------------------------------------------------
 
-export const TEAMS_REACTION_TYPES = [
-  "like",
-  "heart",
-  "laugh",
-  "surprised",
-  "sad",
-  "angry",
-] as const;
+const TEAMS_REACTION_TYPES = ["like", "heart", "laugh", "surprised", "sad", "angry"] as const;
 type TeamsReactionType = (typeof TEAMS_REACTION_TYPES)[number];
 
 type GraphReaction = {
diff --git a/extensions/msteams/src/polls.ts b/extensions/msteams/src/polls.ts
@@ -73,7 +73,7 @@ export const MSTEAMS_SQLITE_MAX_POLL_ROWS = MSTEAMS_MAX_POLLS + 1000;
 export const MSTEAMS_POLL_VOTE_BUCKET_COUNT = 32;
 export const MSTEAMS_MAX_POLL_VOTE_BUCKET_ROWS =
   (MSTEAMS_MAX_POLLS + 1) * MSTEAMS_POLL_VOTE_BUCKET_COUNT;
-export const MSTEAMS_POLL_TTL_MS = 30 * 24 * 60 * 60 * 1000;
+const MSTEAMS_POLL_TTL_MS = 30 * 24 * 60 * 60 * 1000;
 const POLL_LOCK_FILENAME = "msteams-polls.sqlite.lock";
 
 function normalizeChoiceValue(value: unknown): string | null {
diff --git a/extensions/oc-path/src/oc-path/jsonc/parse.ts b/extensions/oc-path/src/oc-path/jsonc/parse.ts
@@ -3,7 +3,7 @@ import { type ParseError, parseTree, printParseErrorCode } from "jsonc-parser/li
 import type { Diagnostic } from "../ast.js";
 import type { JsoncAst, JsoncEntry, JsoncValue } from "./ast.js";
 
-export const MAX_PARSE_DEPTH = 256;
+const MAX_PARSE_DEPTH = 256;
 
 /**
  * Hard cap on jsonc input size. `parseTree` is iterative and stack-safe
diff --git a/extensions/ollama/src/node-inference.ts b/extensions/ollama/src/node-inference.ts
@@ -25,10 +25,10 @@ import {
   resolveOllamaApiBase,
 } from "./provider-models.js";
 
-export const OLLAMA_NODE_INFERENCE_CAPABILITY = "local-inference";
+const OLLAMA_NODE_INFERENCE_CAPABILITY = "local-inference";
 export const OLLAMA_MODELS_COMMAND = "ollama.models";
 export const OLLAMA_CHAT_COMMAND = "ollama.chat";
-export const OLLAMA_NODE_INFERENCE_COMMANDS = [OLLAMA_MODELS_COMMAND, OLLAMA_CHAT_COMMAND] as const;
+const OLLAMA_NODE_INFERENCE_COMMANDS = [OLLAMA_MODELS_COMMAND, OLLAMA_CHAT_COMMAND] as const;
 
 const DEFAULT_INFERENCE_TIMEOUT_MS = 120_000;
 const DEFAULT_MAX_TOKENS = 512;
@@ -420,7 +420,7 @@ async function invokeNode(
   return parseInvokePayload(raw);
 }
 
-export const ollamaNodeInferenceToolDefinition = {
+const ollamaNodeInferenceToolDefinition = {
   name: "node_inference",
   label: "Node Inference",
   description:
diff --git a/extensions/openrouter/oauth.ts b/extensions/openrouter/oauth.ts
@@ -16,9 +16,9 @@ import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { applyOpenrouterConfig, OPENROUTER_DEFAULT_MODEL_REF } from "./onboard.js";
 
 const PROVIDER_ID = "openrouter";
-export const OPENROUTER_OAUTH_METHOD_ID = "oauth";
+const OPENROUTER_OAUTH_METHOD_ID = "oauth";
 export const OPENROUTER_OAUTH_CHOICE_ID = "openrouter-oauth";
-export const OPENROUTER_OAUTH_AUTHORIZE_URL = "https://openrouter.ai/auth";
+const OPENROUTER_OAUTH_AUTHORIZE_URL = "https://openrouter.ai/auth";
 export const OPENROUTER_OAUTH_TOKEN_URL = "https://openrouter.ai/api/v1/auth/keys";
 export const OPENROUTER_OAUTH_CALLBACK_HOST = "localhost";
 export const OPENROUTER_OAUTH_CALLBACK_PORT = 3000;
diff --git a/extensions/slack/src/monitor/context.ts b/extensions/slack/src/monitor/context.ts
@@ -47,7 +47,7 @@ export type SlackAssistantThreadContext = {
   updatedAt: number;
 };
 
-export const SLACK_ASSISTANT_THREAD_CONTEXT_METADATA_EVENT = "assistant_thread_context";
+const SLACK_ASSISTANT_THREAD_CONTEXT_METADATA_EVENT = "assistant_thread_context";
 
 export function buildSlackAssistantThreadMetadata(
   context: Omit<SlackAssistantThreadContext, "updatedAt">,
diff --git a/extensions/slack/src/monitor/media.ts b/extensions/slack/src/monitor/media.ts
@@ -106,7 +106,7 @@ const SLACK_MEDIA_SSRF_POLICY = {
   allowRfc2544BenchmarkRange: true,
 };
 export const SLACK_MEDIA_READ_IDLE_TIMEOUT_MS = 60_000;
-export const SLACK_MEDIA_TOTAL_TIMEOUT_MS = 120_000;
+const SLACK_MEDIA_TOTAL_TIMEOUT_MS = 120_000;
 type SlackSaveRemoteMediaOptions = Parameters<typeof saveRemoteMedia>[0];
 
 function mergeAbortSignals(signals: Array<AbortSignal | undefined>): AbortSignal | undefined {
diff --git a/extensions/voice-call/src/config.ts b/extensions/voice-call/src/config.ts
@@ -290,7 +290,7 @@ const VoiceCallRealtimeAgentContextConfigSchema = z
     files: ["SOUL.md", "IDENTITY.md", "USER.md"],
   });
 
-export const VoiceCallRealtimeConsultThinkingLevelSchema = z.enum([
+const VoiceCallRealtimeConsultThinkingLevelSchema = z.enum([
   "off",
   "minimal",
   "low",
diff --git a/src/agents/acp-spawn.ts b/src/agents/acp-spawn.ts
@@ -228,9 +228,9 @@ export function isSpawnAcpAcceptedResult(result: SpawnAcpResult): result is Spaw
   return result.status === "accepted";
 }
 
-export const ACP_SPAWN_ACCEPTED_NOTE =
+const ACP_SPAWN_ACCEPTED_NOTE =
   "initial ACP task queued in isolated session; follow-ups continue in the bound thread.";
-export const ACP_SPAWN_SESSION_ACCEPTED_NOTE =
+const ACP_SPAWN_SESSION_ACCEPTED_NOTE =
   "thread-bound ACP session stays active after this task; continue in-thread for follow-ups.";
 
 export function resolveAcpSpawnRuntimePolicyError(params: {
diff --git a/src/agents/code-mode-control-tools.ts b/src/agents/code-mode-control-tools.ts
@@ -11,7 +11,7 @@ export const CODE_MODE_EXEC_TOOL_NAME = "exec";
 /** Model-visible Code Mode wait tool name. */
 export const CODE_MODE_WAIT_TOOL_NAME = "wait";
 /** Hook metadata kind for Code Mode exec tools. */
-export const CODE_MODE_EXEC_TOOL_KIND = "code_mode_exec";
+const CODE_MODE_EXEC_TOOL_KIND = "code_mode_exec";
 
 /** Hook metadata kind type for Code Mode exec tools. */
 type CodeModeExecToolKind = typeof CODE_MODE_EXEC_TOOL_KIND;
diff --git a/src/agents/tools/crestodian-tool.ts b/src/agents/tools/crestodian-tool.ts
@@ -49,9 +49,9 @@ export function hashCrestodianOperation(operation: CrestodianOperation): string
 }
 
 /** Result markers shared with out-of-process hosts (CLI MCP runs). */
-export const CRESTODIAN_NEEDS_APPROVAL_PREFIX = "needs-approval:";
-export const CRESTODIAN_APPROVAL_MISMATCH_PREFIX = "approval-mismatch:";
-export const CRESTODIAN_DIRECTIVE_PREFIX = "directive:";
+const CRESTODIAN_NEEDS_APPROVAL_PREFIX = "needs-approval:";
+const CRESTODIAN_APPROVAL_MISMATCH_PREFIX = "approval-mismatch:";
+const CRESTODIAN_DIRECTIVE_PREFIX = "directive:";
 
 /**
  * Reconstruct a host directive from an out-of-process tool result. Directive
diff --git a/src/auto-reply/reply-payload.ts b/src/auto-reply/reply-payload.ts
@@ -66,7 +66,7 @@ export type ReplyPayload = {
 
 // Private device-pair -> Gateway live-display envelope key. Do not re-export
 // through Plugin SDK; this is not a third-party plugin contract.
-export const PAIRING_QR_REPLY_CHANNEL_DATA_KEY = "openclawPairingQr";
+const PAIRING_QR_REPLY_CHANNEL_DATA_KEY = "openclawPairingQr";
 
 export type PairingQrReplyChannelData = {
   setupCode: string;
diff --git a/src/commands/copilot-runtime-plugin-install.ts b/src/commands/copilot-runtime-plugin-install.ts
@@ -2,7 +2,7 @@
 import { modelSelectionShouldEnsureCopilotRuntimePlugin } from "../agents/copilot-routing.js";
 import { createRuntimePluginModelSelectionHelpers } from "./runtime-plugin-install.js";
 
-export const COPILOT_RUNTIME_PLUGIN_ID = "copilot";
+const COPILOT_RUNTIME_PLUGIN_ID = "copilot";
 const COPILOT_RUNTIME_PLUGIN_LABEL = "GitHub Copilot agent runtime";
 const COPILOT_RUNTIME_PLUGIN_NPM_SPEC = "@openclaw/copilot";
 const COPILOT_RUNTIME_PLUGIN_DESCRIPTOR = {
diff --git a/src/commands/doctor/shared/release-configured-plugin-installs.ts b/src/commands/doctor/shared/release-configured-plugin-installs.ts
@@ -27,7 +27,7 @@ import { repairMissingPluginInstallsForIds } from "./missing-configured-plugin-i
 import { asObjectRecord } from "./object.js";
 import { shouldDeferConfiguredPluginInstallRepair } from "./update-phase.js";
 
-export const CONFIGURED_PLUGIN_INSTALL_RELEASE_VERSION = "2026.5.2-beta.1";
+const CONFIGURED_PLUGIN_INSTALL_RELEASE_VERSION = "2026.5.2-beta.1";
 
 const AGENT_HARNESS_RUNTIME_PLUGIN_IDS: Readonly<Record<string, string>> = {
   // Codex can be selected as a harness for OpenAI models without a plugin entry.
diff --git a/src/config/nix-mode-write-guard.ts b/src/config/nix-mode-write-guard.ts
@@ -2,9 +2,9 @@
 import { resolveIsNixMode } from "./paths.js";
 
 /** Agent-first Nix install docs shown when runtime config writes are blocked. */
-export const NIX_OPENCLAW_AGENT_FIRST_URL = "https://github.com/openclaw/nix-openclaw#quick-start";
+const NIX_OPENCLAW_AGENT_FIRST_URL = "https://github.com/openclaw/nix-openclaw#quick-start";
 /** Public OpenClaw Nix overview shown with immutable-config errors. */
-export const OPENCLAW_NIX_OVERVIEW_URL = "https://docs.openclaw.ai/install/nix";
+const OPENCLAW_NIX_OVERVIEW_URL = "https://docs.openclaw.ai/install/nix";
 
 /** Error thrown when a mutating config path is attempted while Nix owns config state. */
 export class NixModeConfigMutationError extends Error {
diff --git a/src/config/sessions/store-maintenance.ts b/src/config/sessions/store-maintenance.ts
@@ -306,7 +306,7 @@ export function pruneStaleModelRunEntries(
   return pruned;
 }
 
-export const DEFAULT_QUOTA_SUSPENSION_TTL_MS = 30 * 60 * 1000; // 30 minutes
+const DEFAULT_QUOTA_SUSPENSION_TTL_MS = 30 * 60 * 1000; // 30 minutes
 const QUOTA_SUSPENSION_CLEANUP_FACTOR = 2; // entries beyond N*ttl are deleted outright
 
 export type QuotaSuspensionEntryMaintenanceResult = {
diff --git a/src/context-engine/host-compat.ts b/src/context-engine/host-compat.ts
@@ -13,7 +13,7 @@ export type ContextEngineHostSupport = {
   capabilities: readonly ContextEngineHostCapability[];
 };
 
-export const GENERIC_CLI_CONTEXT_ENGINE_HOST_CAPABILITIES = [
+const GENERIC_CLI_CONTEXT_ENGINE_HOST_CAPABILITIES = [
   "bootstrap",
   "after-turn",
   "maintain",
diff --git a/src/flows/doctor-tool-result-cap-advice.ts b/src/flows/doctor-tool-result-cap-advice.ts
@@ -5,7 +5,7 @@ import {
 } from "../agents/embedded-agent-runner/tool-result-truncation.js";
 import type { HealthFinding } from "./health-checks.js";
 
-export const TOOL_RESULT_CAP_CHECK_ID = "core/doctor/tool-result-cap";
+const TOOL_RESULT_CAP_CHECK_ID = "core/doctor/tool-result-cap";
 
 export type ToolResultCapDoctorIssue = {
   kind: "configured-above-runtime-ceiling" | "configured-below-auto-cap";
diff --git a/src/gateway/server-methods/task-summary.ts b/src/gateway/server-methods/task-summary.ts
@@ -10,7 +10,7 @@ import {
 
 type TaskLedgerStatus = TaskSummary["status"];
 
-export const TASK_STATUS_TO_LEDGER_STATUS: Record<TaskStatus, TaskLedgerStatus> = {
+const TASK_STATUS_TO_LEDGER_STATUS: Record<TaskStatus, TaskLedgerStatus> = {
   queued: "queued",
   running: "running",
   succeeded: "completed",
diff --git a/src/infra/clawhub.ts b/src/infra/clawhub.ts
@@ -1904,10 +1904,10 @@ export async function fetchClawHubPromotion(params: {
 // claim` always revalidates against the live API so the kill switch wins
 // regardless of snapshot staleness.
 
-export const CLAWHUB_PROMOTIONS_FEED_ID = "clawhub-promotions";
+const CLAWHUB_PROMOTIONS_FEED_ID = "clawhub-promotions";
 // Strict cross-repo wire contract with ClawHub's promotionsFeed publisher.
 // Bump only in lockstep with the server-side schema.
-export const CLAWHUB_PROMOTIONS_FEED_SCHEMA_VERSION = 1;
+const CLAWHUB_PROMOTIONS_FEED_SCHEMA_VERSION = 1;
 
 export function parseClawHubPromotionsFeed(value: unknown): ClawHubPromotionsFeed {
   const context = "promotions feed";
diff --git a/src/infra/exec-authorization-plan.ts b/src/infra/exec-authorization-plan.ts
@@ -110,7 +110,7 @@ const UNANALYZABLE_RISKS = new Set<CommandRisk["kind"]>([
 
 const POWERSHELL_NAMES = new Set(["powershell", "pwsh"]);
 const WINDOWS_CMD_NAMES = new Set(["cmd", "cmd.exe"]);
-export const POSITIONAL_CARRIER_BLOCKED_EXECUTABLES = new Set(["find", "xargs"]);
+const POSITIONAL_CARRIER_BLOCKED_EXECUTABLES = new Set(["find", "xargs"]);
 const SHELL_WRAPPER_PRELUDE_REASON = "shell-env-assignment";
 const UNSUPPORTED_DIRECT_SHELL_TOPOLOGY_SHAPES = new Set<CommandExplanation["shapes"][number]>([
   "background",
diff --git a/src/infra/net/proxy/proxy-validation.ts b/src/infra/net/proxy/proxy-validation.ts
@@ -14,7 +14,7 @@ import {
 } from "./proxy-tls.js";
 
 export const DEFAULT_PROXY_VALIDATION_ALLOWED_URLS = ["https://example.com/"] as const;
-export const DEFAULT_PROXY_VALIDATION_APNS_AUTHORITY = "https://api.sandbox.push.apple.com";
+const DEFAULT_PROXY_VALIDATION_APNS_AUTHORITY = "https://api.sandbox.push.apple.com";
 
 const DEFAULT_PROXY_VALIDATION_TIMEOUT_MS = 5000;
 const DENIED_CANARY_HEADER = "x-openclaw-proxy-validation-canary";
diff --git a/src/infra/sqlite-files.ts b/src/infra/sqlite-files.ts
@@ -1,5 +1,5 @@
 /** SQLite main database plus every journal-mode sidecar that can contain database pages. */
-export const SQLITE_DATABASE_FILE_SUFFIXES = ["", "-wal", "-shm", "-journal"] as const;
+const SQLITE_DATABASE_FILE_SUFFIXES = ["", "-wal", "-shm", "-journal"] as const;
 
 /** Resolves the main database and all possible journal-mode sidecar paths. */
 export function resolveSqliteDatabaseFilePaths(pathname: string): string[] {
diff --git a/src/infra/update-managed-service-handoff-cleanup.ts b/src/infra/update-managed-service-handoff-cleanup.ts
diff --git a/src/logging/diagnostic-support-export.ts b/src/logging/diagnostic-support-export.ts
diff --git a/src/mcp/openclaw-tools-serve-config.ts b/src/mcp/openclaw-tools-serve-config.ts
diff --git a/src/media/input-files.ts b/src/media/input-files.ts
diff --git a/src/plugins/agent-tool-result-middleware.ts b/src/plugins/agent-tool-result-middleware.ts
diff --git a/src/plugins/config-activation-shared.ts b/src/plugins/config-activation-shared.ts
diff --git a/src/plugins/dev-source-root.ts b/src/plugins/dev-source-root.ts
diff --git a/src/plugins/hook-decision-types.ts b/src/plugins/hook-decision-types.ts
diff --git a/src/plugins/host-hook-json.ts b/src/plugins/host-hook-json.ts
diff --git a/src/plugins/legacy-npm-declaration.ts b/src/plugins/legacy-npm-declaration.ts
diff --git a/src/plugins/manifest.ts b/src/plugins/manifest.ts
diff --git a/src/plugins/official-external-plugin-catalog.ts b/src/plugins/official-external-plugin-catalog.ts
diff --git a/src/provider-runtime/operation-retry.ts b/src/provider-runtime/operation-retry.ts
diff --git a/src/sessions/input-provenance.ts b/src/sessions/input-provenance.ts
diff --git a/src/shared/transcript-only-openclaw-assistant.ts b/src/shared/transcript-only-openclaw-assistant.ts
diff --git a/src/skills/runtime/refresh.ts b/src/skills/runtime/refresh.ts
diff --git a/ui/src/lib/workboard/index.ts b/ui/src/lib/workboard/index.ts
