fix(models): keep discovery helpers private

src/agents/models-config.providers.secret-helpers.ts

@@ -210,7 +210,7 @@ export function resolveApiKeyFromCredential(
 }
 
 /** Lists auth profile ids whose provider aliases match the requested provider. */
-export function listAuthProfilesForProvider(store: AuthProfileStore, provider: string): string[] {
+function listAuthProfilesForProvider(store: AuthProfileStore, provider: string): string[] {
   const providerKey = resolveProviderIdForAuth(provider);
   return Object.entries(store.profiles)
     .filter(([, cred]) => resolveProviderIdForAuth(cred.provider) === providerKey)

src/plugins/provider-catalog.types.ts

@@ -11,7 +11,7 @@ export type { ProviderCatalogOutcome } from "./provider-catalog-outcome.js";
 
 export type ProviderCatalogOrder = "simple" | "profile" | "paired" | "late";
 
-export type ProviderCatalogAuthResolution = {
+type ProviderCatalogAuthResolution = {
   apiKey: string | undefined;
   discoveryApiKey?: string;
   mode: "api_key" | "aws-sdk" | "oauth" | "token" | "none";