The list() trap now applies a final filter against loggedOutProviders, matching the defensive approach used in the CLI layer. While target.logout() removes entries from underlying storage, this prevents any edge case where a logged-out provider could appear in list() results. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>