diff --git a/packages/ui/src/lib/reviewFlow.ts b/packages/ui/src/lib/reviewFlow.ts
index e9b83442..432ff43d 100644
--- a/packages/ui/src/lib/reviewFlow.ts
+++ b/packages/ui/src/lib/reviewFlow.ts
@@ -162,7 +162,7 @@ export const isExpectedAutoReviewAssistantParent = (message: Message, expectedPa
   return getMessageParentID(message) === expectedParentID;
 };
 
-export const getAutoReviewForwardKey = (run: AutoReviewRun, messageID: string): string => [
+const getAutoReviewForwardKey = (run: AutoReviewRun, messageID: string): string => [
   run.runtimeKey,
   run.originalSessionID,
   run.phase,
diff --git a/packages/ui/src/stores/useAutoReviewStore.ts b/packages/ui/src/stores/useAutoReviewStore.ts
index d335494b..b5da3f19 100644
--- a/packages/ui/src/stores/useAutoReviewStore.ts
+++ b/packages/ui/src/stores/useAutoReviewStore.ts
@@ -2,8 +2,8 @@ import { create } from 'zustand';
 import { persist, createJSONStorage } from 'zustand/middleware';
 import { getSafeStorage } from '@/stores/utils/safeStorage';
 
-export type AutoReviewPhase = 'waiting_for_reviewer' | 'waiting_for_implementer';
-export type AutoReviewStatus = 'running' | 'completed' | 'stopped' | 'error';
+type AutoReviewPhase = 'waiting_for_reviewer' | 'waiting_for_implementer';
+type AutoReviewStatus = 'running' | 'completed' | 'stopped' | 'error';
 
 export type AutoReviewRun = {
   originalSessionID: string;
diff --git a/packages/web/bin/lib/cli-args.js b/packages/web/bin/lib/cli-args.js
index 1c4ac8a0..5362c75e 100644
--- a/packages/web/bin/lib/cli-args.js
+++ b/packages/web/bin/lib/cli-args.js
@@ -716,7 +716,6 @@ complete -c openchamber -n '__fish_seen_subcommand_from tunnel; and __fish_seen_
 
 export {
   DEFAULT_PORT,
-  DEFAULT_TAIL_LINES,
   parseArgs,
   showHelp,
   showStartupHelp,
diff --git a/packages/web/bin/lib/cli-executables.js b/packages/web/bin/lib/cli-executables.js
index c126e180..9c27ec00 100644
--- a/packages/web/bin/lib/cli-executables.js
+++ b/packages/web/bin/lib/cli-executables.js
@@ -51,4 +51,4 @@ function searchPathFor(command) {
   return null;
 }
 
-export { isExecutable, resolveExplicitBinary, searchPathFor };
+export { resolveExplicitBinary, searchPathFor };
diff --git a/packages/web/bin/lib/cli-http.js b/packages/web/bin/lib/cli-http.js
index 16bb1d23..b4ffb9a7 100644
--- a/packages/web/bin/lib/cli-http.js
+++ b/packages/web/bin/lib/cli-http.js
@@ -210,7 +210,6 @@ export {
   requestServerShutdown,
   requestJson,
   isServerHealthReady,
-  waitForServerHealth,
   fetchTunnelProvidersFromPort,
   fetchSystemInfoFromPort,
 };
diff --git a/packages/web/bin/lib/cli-network.js b/packages/web/bin/lib/cli-network.js
index 3d473acf..042716a5 100644
--- a/packages/web/bin/lib/cli-network.js
+++ b/packages/web/bin/lib/cli-network.js
@@ -141,14 +141,12 @@ function assertAuthenticatedNetworkExposure({ host, uiPassword }) {
 
 
 export {
-  isUnsafeBrowserPort,
   resolveConfiguredBindHost,
   resolveServeHost,
   resolveApiHost,
   formatHostForUrl,
   buildLocalUrl,
   detectLanIPv4Address,
-  formatUnsafePortWarning,
   assertSafeBrowserPort,
   hasUiPasswordConfigured,
   assertAuthenticatedNetworkExposure,
diff --git a/packages/web/bin/lib/cli-paths.js b/packages/web/bin/lib/cli-paths.js
index 6525ae48..67479fae 100644
--- a/packages/web/bin/lib/cli-paths.js
+++ b/packages/web/bin/lib/cli-paths.js
@@ -102,16 +102,10 @@ function getRunDir() {
 
 export {
   getDataDir,
-  getLogsDir,
-  getSettingsFilePath,
   readDesktopLocalPortFromSettings,
   ensureLogsDir,
   getLogFilePath,
   getTunnelProfilesFilePath,
   getLegacyCloudflareManagedRemoteFilePath,
-  getTunnelCliStateFilePath,
-  readTunnelCliState,
-  readLastManagedLocalConfigPath,
-  writeLastManagedLocalConfigPath,
   getRunDir,
 };
diff --git a/packages/web/bin/lib/cli-process.js b/packages/web/bin/lib/cli-process.js
index e2ee043a..009f7d4d 100644
--- a/packages/web/bin/lib/cli-process.js
+++ b/packages/web/bin/lib/cli-process.js
@@ -283,12 +283,10 @@ export {
   writeInstanceOptions,
   removeInstanceFile,
   isProcessRunning,
-  readProcessCmdline,
   isOpenchamberCmdline,
   isOpenchamberProcessRunning,
   getOpenchamberProcessState,
   hasOpenchamberRuntimeInfo,
-  waitForProcessExit,
   terminateProcessTree,
   stopInstanceProcess,
 };
diff --git a/packages/web/bin/lib/cli-startup.js b/packages/web/bin/lib/cli-startup.js
index 316b5fb1..8a2df874 100644
--- a/packages/web/bin/lib/cli-startup.js
+++ b/packages/web/bin/lib/cli-startup.js
@@ -364,7 +364,6 @@ function disableStartupService() {
 
 
 export {
-  getStartupServicePaths,
   getStartupStatus,
   enableStartupService,
   disableStartupService,
diff --git a/packages/web/bin/lib/cli-tunnel-profiles.js b/packages/web/bin/lib/cli-tunnel-profiles.js
index 436c376e..8fbb68fc 100644
--- a/packages/web/bin/lib/cli-tunnel-profiles.js
+++ b/packages/web/bin/lib/cli-tunnel-profiles.js
@@ -358,9 +358,7 @@ export {
   redactProfileForOutput,
   redactProfilesForOutput,
   formatProfileTokenStatus,
-  sanitizeTunnelProfilesData,
   warnIfUnsafeFilePermissions,
-  readTunnelProfilesFromDisk,
   writeTunnelProfilesToDisk,
   writeManagedRemotePairsToDiskFromProfiles,
   ensureTunnelProfilesMigrated,
diff --git a/packages/web/bin/lib/cli-tunnel-utils.js b/packages/web/bin/lib/cli-tunnel-utils.js
index 70fad0d4..85860d0c 100644
--- a/packages/web/bin/lib/cli-tunnel-utils.js
+++ b/packages/web/bin/lib/cli-tunnel-utils.js
@@ -294,10 +294,6 @@ async function resolveTunnelTtlOverrides(options) {
 
 
 export {
-  parseHumanDurationToMs,
-  parseTtlMsOrThrow,
-  formatDurationForCli,
-  shellQuote,
   buildTunnelStartReplayCommand,
   buildTunnelProfileAddCommand,
   resolveTunnelTtlOverrides,