fixes and improvements

backend/src/media_library_viewer_api/clients/ssh.py

@@ -20,8 +20,6 @@ from typing import Any
 
 import paramiko
 
-from media_library_viewer_api.services.known_hosts import ensure_known_host
-
 logger = logging.getLogger(__name__)
 
 
@@ -66,26 +64,12 @@ class RemoteSSHClient:
     def connect(self) -> paramiko.SSHClient:
         """Create or reuse the Paramiko connection.
 
-        Unknown host keys are recorded on first contact in the managed
-        known_hosts file when one is configured. After that, strict checking
-        remains in effect so host key changes are still rejected.
+        Host keys are expected to be managed ahead of time by startup synthesis
+        or explicit validation flows. Runtime connections only load the managed
+        known_hosts file and then let Paramiko enforce strict checking.
         """
         if self._client:
             return self._client
-        if self.known_hosts_path:
-            try:
-                ensure_known_host(self.host, self.port, Path(self.known_hosts_path), strict=True)
-            except Exception as exc:
-                message = str(exc).lower()
-                if "protocol banner" in message:
-                    raise RuntimeError(
-                        f"SSH banner not received from {self.host}:{self.port}. "
-                        "The host key could not be recorded because the backend could not talk to SSH."
-                    ) from exc
-                raise RuntimeError(
-                    f"SSH host key lookup failed for {self.host}:{self.port}. "
-                    "Confirm the host and port are correct and that SSH is reachable."
-                ) from exc
         client = paramiko.SSHClient()
         client.load_system_host_keys()
         if self.known_hosts_path and Path(self.known_hosts_path).is_file():