style: remove hyphens from compound adjectives in comments and messages

Remove hyphens from compound adjectives such as "logged-in", "one-time", "password-protected", "full-height", "multi-file", and "S3-compatible" in comments, test error messages, and UI labels to improve readability and consistency.

backend/libs/services/auth.go

@@ -120,7 +120,7 @@ type Collection struct {
 	UpdatedAt time.Time `json:"updatedAt"`
 }
 
-// APIToken is a long-lived personal access token. Only the SHA-256 hash of the
+// APIToken is a long lived personal access token. Only the SHA-256 hash of the
 // secret is stored; the plaintext is shown to the user exactly once at creation.
 type APIToken struct {
 	ID         string     `json:"id"`
@@ -131,7 +131,7 @@ type APIToken struct {
 	LastUsedAt *time.Time `json:"lastUsedAt,omitempty"`
 }
 
-// APITokenResult carries the one-time plaintext alongside the stored token.
+// APITokenResult carries the one time plaintext alongside the stored token.
 type APITokenResult struct {
 	Token     APIToken
 	Plaintext string
@@ -907,7 +907,7 @@ func validateUserPolicy(policy UserPolicy) error {
 		return fmt.Errorf("active box override must be positive or -1 for unlimited")
 	}
 	if policy.ShortWindowRequests != nil && *policy.ShortWindowRequests <= 0 && *policy.ShortWindowRequests != -1 {
-		return fmt.Errorf("short-window request override must be positive or -1 for unlimited")
+		return fmt.Errorf("short window request override must be positive or -1 for unlimited")
 	}
 	return nil
 }

backend/libs/services/auth_test.go

@@ -118,7 +118,7 @@ func TestAPITokenLifecycle(t *testing.T) {
 	if result.Plaintext == "" || !strings.HasPrefix(result.Plaintext, apiTokenPrefix) {
 		t.Fatalf("plaintext = %q, want %q prefix", result.Plaintext, apiTokenPrefix)
 	}
-	// The secret must never be stored in plaintext — only its hash.
+	// The secret must never be stored in plaintext. only its hash.
 	if strings.Contains(result.Token.TokenHash, result.Plaintext) || result.Token.TokenHash == result.Plaintext {
 		t.Fatalf("stored token hash leaks the plaintext secret")
 	}

backend/libs/services/bans.go

@@ -313,7 +313,7 @@ func (s *BanService) Match(ip string, now time.Time) (MatchedBan, bool, error) {
 	now = now.UTC()
 	var matched BanRecord
 	var matchedKey []byte
-	// Read-only scan first: the common case (no match) only takes a concurrent
+	// read only scan first: the common case (no match) only takes a concurrent
 	// read transaction, instead of grabbing the single bbolt write lock on every
 	// request that flows through the ban middleware.
 	err := s.db.View(func(tx *bbolt.Tx) error {

backend/libs/services/proxy.go

@@ -19,7 +19,7 @@ func ClientIPFromContext(r *http.Request) (string, bool) {
 }
 
 // ClientIP resolves the effective client IP. When trustedProxies is empty,
-// forwarded headers are trusted for easy reverse-proxy/container defaults.
+// forwarded headers are trusted for easy reverse proxy/container defaults.
 func ClientIP(remoteAddr, forwardedFor, realIP string, trustedProxies []string) string {
 	remoteIP := IPOnly(remoteAddr)
 	if len(trustedProxies) == 0 || remoteTrusted(remoteIP, trustedProxies) {

backend/libs/services/settings.go

@@ -455,7 +455,7 @@ func (s *SettingsService) validate(settings UploadPolicySettings) error {
 		return fmt.Errorf("active box limits must be positive")
 	}
 	if settings.ShortWindowRequests <= 0 || settings.ShortWindowSeconds <= 0 {
-		return fmt.Errorf("short-window rate limits must be positive")
+		return fmt.Errorf("short window rate limits must be positive")
 	}
 	if settings.ResumableChunkSizeMB <= 0 {
 		return fmt.Errorf("resumable chunk size must be positive")

backend/libs/services/upload.go

@@ -306,7 +306,7 @@ func (s *UploadService) CreateBoxFromIncomingContext(ctx context.Context, files
 	var expiresAt time.Time
 	switch {
 	case opts.ExpiresInMinutes < 0 || opts.MaxDays < 0:
-		// "Forever" — a date far enough out that the box effectively never
+		// "Forever". a date far enough out that the box effectively never
 		// expires. No schema change; CanDownload/cleanup keep working as-is.
 		expiresAt = now.AddDate(100, 0, 0)
 	case opts.ExpiresInMinutes > 0:
@@ -361,7 +361,7 @@ func (s *UploadService) CreateBoxFromIncomingContext(ctx context.Context, files
 	return s.resultForBox(box, deleteToken), nil
 }
 
-// AppendFiles adds files to an existing box (used to group a ShareX multi-file
+// AppendFiles adds files to an existing box (used to group a ShareX multiple file
 // selection into a single box). The box keeps its original expiry, password and
 // other settings; only the new files are written.
 func (s *UploadService) AppendFiles(boxID string, files []*multipart.FileHeader, opts UploadOptions) (UploadResult, error) {
@@ -1099,7 +1099,7 @@ func (s *UploadService) resultForBox(box Box, deleteToken string) UploadResult {
 	}
 
 	// The box-level thumbnail points at the most recently added file, so a
-	// per-file ShareX upload previews the file it just sent.
+	// per file ShareX upload previews the file it just sent.
 	thumbnailURL := fmt.Sprintf("%s/d/%s/og-image.jpg", s.baseURL, box.ID)
 	if len(files) > 0 {
 		thumbnailURL = files[len(files)-1].ThumbnailURL