From 09a62765b7588e038370871db1e2ed74f60cc351 Mon Sep 17 00:00:00 2001
From: Codex <codex@noreply.local>
Date: Sat, 27 Jun 2026 16:22:20 +0000
Subject: [PATCH] fix(agentrun): accept new ssh host keys during lane bootstrap

---
 scripts/src/agentrun/yaml-lane.ts | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/scripts/src/agentrun/yaml-lane.ts b/scripts/src/agentrun/yaml-lane.ts
index c5d383fc..a1cb0f25 100644
--- a/scripts/src/agentrun/yaml-lane.ts
+++ b/scripts/src/agentrun/yaml-lane.ts
@@ -498,6 +498,18 @@ export function yamlLaneSourceBootstrapSubmitScript(spec: AgentRunLaneSpec): str
     `bootstrap_branch=${shQuote(bootstrap)}`,
     `state_dir=${shQuote(stateDir)}`,
     "mkdir -p \"$state_dir\" \"$(dirname \"$workspace\")\"",
+    "case \"$remote\" in",
+    "  git@*:*)",
+    "    mkdir -p \"$HOME/.ssh\"",
+    "    chmod 700 \"$HOME/.ssh\" 2>/dev/null || true",
+    "    export GIT_SSH_COMMAND=${GIT_SSH_COMMAND:-ssh -o StrictHostKeyChecking=accept-new}",
+    "    ;;",
+    "  ssh://*)",
+    "    mkdir -p \"$HOME/.ssh\"",
+    "    chmod 700 \"$HOME/.ssh\" 2>/dev/null || true",
+    "    export GIT_SSH_COMMAND=${GIT_SSH_COMMAND:-ssh -o StrictHostKeyChecking=accept-new}",
+    "    ;;",
+    "esac",
     "job_id=\"source-bootstrap-$(date +%s)-$$\"",
     "status_file=\"$state_dir/$job_id.json\"",
     "stdout_file=\"$state_dir/$job_id.stdout.log\"",