fix: remove orphaned snapshot exports at startup

accountsdb/README.md

@@ -32,6 +32,9 @@ storage. Both require quiesced account writes, and relocation must wait for
 borrowed readers. Platforms must support the reader synchronization required by
 the store; initialization failures propagate to the caller.
 
+Snapshot export directories are temporary. Keeper removes orphaned exports at
+startup; retained snapshots live in the ledger.
+
 Checksums cover persisted account state and its slot and superblock identity,
 not volatile accounts or the transaction counter. A cached checksum describes a
 previously published state. Fresh sampling requires writes and metadata updates

accountsdb/src/snapshot.rs

@@ -52,6 +52,20 @@ pub enum BackupOp {
 }
 
 impl AccountsDB {
+    /// Removes temporary snapshot exports left by a previous process.
+    ///
+    /// Call during startup, before any snapshot archiver can use these paths.
+    /// The root must contain no unrelated `snapshot-*` entries.
+    pub fn cleanup_snapshots(&self) -> SnapshotResult<()> {
+        for entry in fs::read_dir(&self.root)? {
+            let entry = entry?;
+            if entry.file_name().to_str().is_some_and(|name| name.starts_with(PREFIX)) {
+                fs::remove_dir_all(entry.path())?;
+            }
+        }
+        Ok(())
+    }
+
     /// Writes a superblock snapshot under `root`.
     ///
     /// # Safety

keeper/src/builder.rs

@@ -77,6 +77,7 @@ impl KeeperBuilder {
     pub async fn build(mut self, shutdown: &mut ShutdownManager) -> Result<Keeper> {
         let ledger = Ledger::init(&self.ledger.directory, self.ledger.size_limit, shutdown)?;
         let accountsdb = self.accountsdb(&ledger)?;
+        accountsdb.cleanup_snapshots()?;
         let (caches, featureset) = self.prepopulate(&accountsdb, &ledger).await?;
         metrics::init();
         let epoch_schedule = self.epoch_schedule();