chore: 文档库全量重新入库（2026-10-20）

scripts/switch-B1-key.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+. "$(cd "$(dirname "$0")/.." && pwd)/config/load.sh"
+# B1 步（在 47 上跑）：uid 保真校验 + 建 47→106 专用密钥并打印公钥
+set -uo pipefail
+KEY=/root/.ssh/dshworker_ed25519
+
+echo "=== 1) uid 保真校验（PG 与 SQLite 必须一致 —— 否则 106 上文件属主全错） ==="
+echo -n "  PG     : "; PGPASSWORD=dshs_cluster_2026 /usr/bin/psql -h 127.0.0.1 -p 15432 -U dshs -d dshs -tAc \
+  "select string_agg(username||'='||coalesce(uid::text,'NULL'), ' ' order by row_id) from users" 2>&1 | head -1
+echo -n "  SQLite : "; node -e 'const D=require("better-sqlite3");const db=new D("'"$DSHS_DATA_ROOT"'/dshs.db",{readonly:true});console.log(db.prepare("select username, uid from users order by rowid").all().map(u=>u.username+"="+u.uid).join(" "))'
+echo "  --- 磁盘目录属主（与 uid 对照；多出的 5 个是已删用户孤儿目录） ---"
+for d in "$DSHS_DATA_ROOT"/users/*/; do printf "    %-38s uid=%s\n" "$(basename "$d")" "$(stat -c %u "$d")"; done
+
+echo "=== 2) 建 47→106 专用密钥（仅用于 rsync） ==="
+[ -f "$KEY" ] || ssh-keygen -t ed25519 -N "" -C "dshs-rsync-47to106" -f "$KEY" >/dev/null 2>&1
+echo "  PUBKEY=$(cat "$KEY.pub")"
+
+echo "=== 3) 试连通 106:22 ==="
+if ssh -i "$KEY" -o BatchMode=yes -o StrictHostKeyChecking=accept-new -o ConnectTimeout=8 root@"$DSH_PEER_PUBLIC_IP" 'echo ok' 2>/dev/null | grep -q ok; then
+  echo "  ✓ 已可连通（公钥已装）"
+else
+  echo "  ⏳ 尚不可连通 —— 需先把我本机把这个公钥装到 106"
+fi