refactor: agentic comment cleanup

go/internal/middleware/cors.go

@@ -2,7 +2,7 @@ package middleware
 
 import "net/http"
 
-// CORS wraps a handler to add CORS headers and handle preflight requests.
+// CORS adds CORS headers and short-circuits preflight requests.
 func CORS(allowedOrigins []string) func(http.Handler) http.Handler {
 	originSet := make(map[string]struct{}, len(allowedOrigins))
 	for _, o := range allowedOrigins {
@@ -13,7 +13,7 @@ func CORS(allowedOrigins []string) func(http.Handler) http.Handler {
 		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 			origin := r.Header.Get("Origin")
 
-			// Check if the origin is allowed (empty allowedOrigins means allow all)
+			// Empty allowedOrigins means allow all.
 			allowed := len(originSet) == 0
 			if !allowed {
 				_, allowed = originSet[origin]
@@ -27,7 +27,6 @@ func CORS(allowedOrigins []string) func(http.Handler) http.Handler {
 				w.Header().Set("Access-Control-Max-Age", "86400")
 			}
 
-			// Handle preflight
 			if r.Method == http.MethodOptions {
 				w.WriteHeader(http.StatusNoContent)
 				return