# perf\(server\): prune expired DPoP and cloud replay-guard files · pingdotgg/t3code

[View on GitCafe](https://git.cafe/pingdotgg/t3code/commit/252fd532d9f996da0a1ed51c2a0d818afc260585)

Repository: [pingdotgg/t3code](https://git.cafe/pingdotgg/t3code)

Visibility: public

Requested revision: 252fd532d9f996da0a1ed51c2a0d818afc260585

Requested commit: 252fd532d9f996da0a1ed51c2a0d818afc260585

Commit: 252fd532d9f996da0a1ed51c2a0d818afc260585

Tree: 6ed076f71bad6cfcfbf315f4aa0188ad2b965dfa

Author: Claude

Committer: Claude

## Message

```
perf(server): prune expired DPoP and cloud replay-guard files

Every DPoP-authenticated request and cloud health/mint call writes a
single-use marker to the secrets directory, and nothing ever removed
them. Proofs are only accepted for a few minutes, so sweep markers older
than an hour on startup and every ten minutes.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y1jWssjvT14xf2uw1daK7Z

```

## Parents

- [3efa5ef2ea81d4d138ecfa1417795f164622cd94](https://git.cafe/pingdotgg/t3code/commit/3efa5ef2ea81d4d138ecfa1417795f164622cd94?format=markdown)

[Source at this commit](https://git.cafe/pingdotgg/t3code/tree/252fd532d9f996da0a1ed51c2a0d818afc260585?format=markdown)