chore: remove internal-only wording

Author: elkaix

packages/agent-core/src/services/coreProcess/coreProcess.ts

@@ -40,8 +40,8 @@ export interface CoreProcessServiceOptions extends PythinkerCoreOptions {
    * Host identity (product name + version). When set and
    * `pythinkerRequestHeaders` is omitted, the adapter default-wires
    * `createPythinkerDefaultHeaders({ homeDir, ...identity })` into PythinkerCore
-   * so providers see `User-Agent: <product>/<version>`. This distribution does
-   * not attach legacy `X-Msh-*` device headers.
+   * so providers see `User-Agent: <product>/<version>` without device identity
+   * headers.
    *
    * `identity.version` also feeds `appVersion` so session records carry
    * the host CLI version — same wiring `SDKRpcClient` does in node-sdk.

packages/agent-core/src/services/coreProcess/coreProcessService.ts

@@ -82,8 +82,8 @@ export class CoreProcessService extends Disposable implements ICoreProcessServic
       options.resolveOAuthTokenProvider ??
       CoreProcessService._defaultOAuthTokenResolver(env.homeDir);
 
-    // Default-wire the product User-Agent without legacy X-Msh-*
-    // device headers. Mirrors the in-process TUI path in SDKRpcClient.
+    // Default-wire the product User-Agent without device identity headers.
+    // Mirrors the in-process TUI path in SDKRpcClient.
     // Caller-supplied `pythinkerRequestHeaders` always wins; absent that, we
     // synthesize from `options.identity`. Hosts that pass neither
     // (no identity, no headers) still construct — but their requests will
@@ -194,13 +194,12 @@ export class CoreProcessService extends Disposable implements ICoreProcessServic
   /**
    * Build the default `pythinkerRequestHeaders` from `options.identity` so the
    * outbound User-Agent identifies this process (for example,
-   * `pythinker-code-cli/<ver>`). X-Msh-* device headers stay
-   * absent.
+   * `pythinker-code-cli/<ver>`). Device identity headers stay absent.
    *
    * Returns `undefined` when no identity is provided — preserves the
    * pre-fix contract for hosts that pass headers explicitly via
    * `options.pythinkerRequestHeaders` (or for legacy callers / tests that
-   * don't talk to the managed endpoint at all).
+   * do not send provider requests).
    *
    * Exposed as `static` so tests can assert the wiring without booting
    * the service.

packages/node-sdk/src/sdk-rpc-client-v2.ts

@@ -924,7 +924,7 @@ export class SDKRpcClientV2 extends SDKRpcClientBase {
   }
 
   /**
-   * v1's persist-add project guard ported to the workspace loader. This read
+   * The persisted MCP add guard uses the workspace loader. This read
    * deliberately includes the project layer even while the workspace is
    * untrusted: a user-level write must not create a shadow that springs into
    * conflict when the workspace is trusted later.

scripts/check-product-boundaries.mjs

@@ -96,7 +96,6 @@ function excluded(file) {
     file === SELF ||
     file === 'pnpm-lock.yaml' ||
     file.startsWith('.changeset/') ||
-    file.startsWith('blackbox/') ||
     file.includes('/dist-web/') ||
     file.includes('/dist/') ||
     file.toLowerCase().endsWith('changelog.md')