diff --git a/src/shared/agent-hook-relay.ts b/src/shared/agent-hook-relay.ts
index b457a227015..35db458a37f 100644
--- a/src/shared/agent-hook-relay.ts
+++ b/src/shared/agent-hook-relay.ts
@@ -32,7 +32,6 @@ import type {
   TurnEndDisposition
 } from './agent-status-types'
 import type { AgentProviderSessionMetadata } from './agent-session-resume'
-import type { AgentHookTarget } from './agent-hook-types'
 
 // Why: the local hook server knows the discriminator from URL pathname routing
 // (`/hook/<source>`); the relay equally must tag each forwarded notification
@@ -246,19 +245,6 @@ export const AGENT_HOOK_REQUEST_REPLAY_METHOD = 'agent_hook.requestReplay' as co
  *  overlay dirs on the remote. */
 export const AGENT_HOOK_INSTALL_PLUGINS_METHOD = 'agent_hook.installPlugins' as const
 
-/** JSON-RPC request method that asks the remote relay to install every
- *  managed hook using its local filesystem instead of WAN-bound SFTP. */
-export const AGENT_HOOK_INSTALL_MANAGED_HOOKS_METHOD = 'agent_hook.installManagedHooks' as const
-
-export type AgentHookInstallManagedHooksParams = {
-  /** SHA-256 fingerprint of the server key negotiated by Orca's SSH transport. */
-  hostKeyFingerprint?: string
-  /** Positively detected and enabled agents allowed to mutate remote config. */
-  agents: readonly AgentHookTarget[]
-  /** Execution-host Claude version; absent means retain the legacy hook set. */
-  claudeVersion?: string
-}
-
 /** Opt-out env var for the Windows WSL agent-hook relay, read on each relay start; set "0" to
  *  disable. */
 export const ORCA_FEATURE_REMOTE_AGENT_HOOKS_ENV = 'ORCA_FEATURE_REMOTE_AGENT_HOOKS' as const
diff --git a/src/shared/foreground-process-evidence.ts b/src/shared/foreground-process-evidence.ts
index 975fbe388ff..48bbed10049 100644
--- a/src/shared/foreground-process-evidence.ts
+++ b/src/shared/foreground-process-evidence.ts
@@ -180,9 +180,6 @@ export function isRemoteForegroundEvidence(value: unknown): value is RemoteForeg
   )
 }
 
-/** Alias used by provider-facing callers. */
-export const isRemoteForegroundProcessEvidence = isRemoteForegroundEvidence
-
 export function isForegroundProcessEvidence(value: unknown): value is ForegroundProcessEvidence {
   if (typeof value !== 'object' || value === null) {
     return false
diff --git a/src/shared/orcad-migration/orcad-migration-preflight.ts b/src/shared/orcad-migration/orcad-migration-preflight.ts
index 308189d4059..e6ab8788f3f 100644
--- a/src/shared/orcad-migration/orcad-migration-preflight.ts
+++ b/src/shared/orcad-migration/orcad-migration-preflight.ts
@@ -2,13 +2,6 @@ import type { FolderWorkspace } from '../folder-workspace-types'
 import type { Repo } from '../repo-types'
 import type { SavedPortForward, SshRemotePtyLease } from '../ssh-types'
 
-export type OrcadMigrationBlockerCategory =
-  | 'registration'
-  | 'exclusive-ownership'
-  | 'drainable-static-state'
-  | 'live-or-unverifiable'
-  | 'client-owned-state'
-
 export const ORCAD_MIGRATION_DEPENDENCY_KINDS = [
   'saved-port-forward',
   'terminal-lease',
diff --git a/src/shared/runtime-environment-sidecar.ts b/src/shared/runtime-environment-sidecar.ts
index 0e8e4f79268..6a9a6352b64 100644
--- a/src/shared/runtime-environment-sidecar.ts
+++ b/src/shared/runtime-environment-sidecar.ts
@@ -61,7 +61,6 @@ const SidecarEnvelopeSchema = z.object({
 })
 
 export type RuntimeEnvironmentSidecarEntry = z.infer<typeof SidecarEntrySchema>
-export type RuntimeEnvironmentSidecarSshAccess = z.infer<typeof SidecarSshAccessSchema>
 type RuntimeEnvironmentSidecar = z.infer<typeof SidecarSchema> & {
   /** Entries this build cannot read, kept verbatim; their environments must not be used. */
   unreadable: Record<string, unknown>
diff --git a/src/shared/runtime-environments.ts b/src/shared/runtime-environments.ts
index bee4190cd06..d86063465df 100644
--- a/src/shared/runtime-environments.ts
+++ b/src/shared/runtime-environments.ts
@@ -68,8 +68,6 @@ export const RuntimeSshAccessLinkSchema = RuntimeSshTunnelLinkSchema.extend({
   previousPreferredEndpointId: z.string().min(1)
 })
 
-export type RuntimeSshAccessLink = z.infer<typeof RuntimeSshAccessLinkSchema>
-
 export const RuntimeSshAccessOperationSchema = RuntimeSshTunnelLinkSchema.omit({ localPort: true })
   .extend({
     requestId: z.string().min(1),
diff --git a/src/shared/ssh-types.ts b/src/shared/ssh-types.ts
index ef02fa2de5b..d33763f2b7a 100644
--- a/src/shared/ssh-types.ts
+++ b/src/shared/ssh-types.ts
@@ -477,13 +477,3 @@ export type EnrichedDetectedPort = DetectedPort & {
   advertisedUrl?: string
   advertisedProtocol?: 'http' | 'https'
 }
-
-/** Outcome of `ssh:terminateSessions`. Uses the fixed verdict vocabulary from
- *  docs/reference/ssh-execution-boundary.md: a host we could not reach yields `unverifiable`,
- *  never `exited`, so an offline sweep can never be read as a successful remote kill (issue #12661). */
-export type SshTerminateSessionsResult = {
-  /** Remote PTYs the host acknowledged stopping. */
-  terminated: number
-  /** Leases whose remote shells were never reached because the relay was offline. */
-  unverifiable: number
-}