diff --git a/persona-studio/backend/middleware/auth.js b/persona-studio/backend/middleware/auth.js
new file mode 100644
index 00000000..a4f792d8
--- /dev/null
+++ b/persona-studio/backend/middleware/auth.js
@@ -0,0 +1,15 @@
+/**
+ * API 鉴权中间件 · BC-集成-005
+ * 检查请求头 X-API-Key 是否匹配
+ * 只保护 POST 写入接口，GET 查询不需要鉴权
+ */
+function apiAuth(req, res, next) {
+ var apiKey = req.headers["x-api-key"];
+ if (!apiKey || apiKey !== process.env.API_SECRET_KEY) {
+ console.log("❌ 鉴权失败：", req.ip);
+ return res.status(401).json({ error: "Unauthorized" });
+ }
+ next();
+}
+
+module.exports = apiAuth;
\ No newline at end of file
diff --git a/persona-studio/backend/patch-005.js b/persona-studio/backend/patch-005.js
new file mode 100644
index 00000000..1b1a2c7b
--- /dev/null
+++ b/persona-studio/backend/patch-005.js
@@ -0,0 +1,185 @@
+/**
+ * BC-集成-005 代码补丁
+ * 自动创建鉴权中间件 + 修改API路由 + 添加新端点
+ * DEV-010桔子 · 2026-03-13
+ */
+const fs = require('fs');
+const path = require('path');
+const backendDir = __dirname;
+console.log('📂 工作目录：', backendDir);
+// ═══════════════════════════════════════
+// 1. 创建 middleware/auth.js（API门卫）
+// ═══════════════════════════════════════
+const middlewareDir = path.join(backendDir, 'middleware');
+if (!fs.existsSync(middlewareDir)) {
+ fs.mkdirSync(middlewareDir, { recursive: true });
+}
+const authCode = [
+ '/**',
+ ' * API 鉴权中间件 · BC-集成-005',
+ ' * 检查请求头 X-API-Key 是否匹配',
+ ' * 只保护 POST 写入接口，GET 查询不需要鉴权',
+ ' */',
+ 'function apiAuth(req, res, next) {',
+ ' var apiKey = req.headers["x-api-key"];',
+ ' if (!apiKey || apiKey !== process.env.API_SECRET_KEY) {',
+ ' console.log("❌ 鉴权失败：", req.ip);',
+ ' return res.status(401).json({ error: "Unauthorized" });',
+ ' }',
+ ' next();',
+ '}',
+ '',
+ 'module.exports = apiAuth;'
+].join('\n');
+fs.writeFileSync(path.join(middlewareDir, 'auth.js'), authCode);
+console.log('✅ [1/3] middleware/auth.js 已创建（API门卫）');
+// ═══════════════════════════════════════
+// 2. 修改 syslog-api.js：给 POST /receive 加门卫
+// ═══════════════════════════════════════
+const syslogPath = path.join(backendDir, 'routes', 'syslog-api.js');
+if (fs.existsSync(syslogPath)) {
+ var syslogCode = fs.readFileSync(syslogPath, 'utf8');
+ if (!syslogCode.includes('apiAuth')) {
+ syslogCode = "const apiAuth = require('../middleware/auth');\n" + syslogCode;
+ syslogCode = syslogCode.replace(
+ /router\.post\(\s*['"\/]receive/,
+ "router.post('/receive', apiAuth"
+ );
+ fs.writeFileSync(syslogPath, syslogCode);
+ console.log('✅ [2/3] syslog-api.js 已添加鉴权（POST /receive 需要 X-API-Key）');
+ } else {
+ console.log('ℹ️ [2/3] syslog-api.js 已包含鉴权，跳过');
+ }
+} else {
+ console.log('❌ [2/3] syslog-api.js 不存在于: ', syslogPath);
+ // 尝试列出 routes 目录
+ var routesDir = path.join(backendDir, 'routes');
+ if (fs.existsSync(routesDir)) {
+   console.log('   routes 目录文件: ', fs.readdirSync(routesDir));
+ }
+}
+// 3. 修改 dashboard-api.js: 添加两个新端点
+const dashPath = path.join(backendDir, 'routes', 'dashboard-api.js');
+if (fs.existsSync(dashPath)) {
+ var dashCode = fs.readFileSync(dashPath, 'utf8');
+ if (!dashCode.includes('/dev/:id')) {
+   var newCode = `
+// ══ BC-集成-005 新增: 开发者详情 ══
+// GET /api/dashboard/dev/:id
+router.get('/dev/:id', async function(req, res) {
+  try {
+    var devId = req.params.id;
+    var resp = await axios.post(
+      'https://api.notion.com/v1/databases/' + process.env.DASHBOARD_DATABASE_ID + '/query',
+      {
+        filter: {
+          property: '孕育者',
+          rich_text: { contains: devId }
+        }
+      },
+      {
+        headers: {
+          'Authorization': 'Bearer ' + process.env.NOTION_TOKEN,
+          'Notion-Version': '2022-06-28',
+          'Content-Type': 'application/json'
+        }
+      }
+    );
+    var results = resp.data.results;
+    if (results.length === 0) {
+      return res.json({ source: 'notion', data: null, message: '未找到该开发者' });
+    }
+    var devModules = results.map(function(page) {
+      var p = page.properties;
+      function gt(prop) {
+        if (!prop) return '';
+        if (prop.title) return prop.title.map(function(t) {return t.plain_text;}).join('');
+        if (prop.rich_text) return prop.rich_text.map(function(t) {return t.plain_text;}).join('');
+        if (prop.select) return prop.select ? prop.select.name : '';
+        if (prop.status) return prop.status ? prop.status.name : '';
+        if (prop.checkbox !== undefined) return prop.checkbox;
+        return '';
+      }
+      return {
+        name: gt(p['名称']),
+        developer: gt(p['孕育者']),
+        status: gt(p['对接状态']),
+        version: gt(p['当前版本']),
+        persona: gt(p['宝宝人格体']),
+        notes: gt(p['备注']),
+        type: gt(p['类型'])
+      };
+    });
+    res.json({ source: 'notion', dev_id: devId, data: devModules });
+  } catch (err) {
+    console.log('❌ 开发者详情查询失败：', err.message);
+    res.json({ source: 'fallback', data: {} });
+  }
+});
+
+// ══ BC-集成-005 新增：模块列表 ══
+// GET /api/dashboard/modules
+router.get('/modules', async function(req, res) {
+  try {
+    var resp = await axios.post(
+      'https://api.notion.com/v1/databases/' + process.env.MODULE_DATABASE_ID + '/query',
+      {},
+      {
+        headers: {
+          'Authorization': 'Bearer ' + process.env.NOTION_TOKEN,
+          'Notion-Version': '2022-06-28',
+          'Content-Type': 'application/json'
+        }
+      }
+    );
+    var modules = resp.data.results.map(function(page) {
+      var p = page.properties;
+      function gt(prop) {
+        if (!prop) return '';
+        if (prop.title) return prop.title.map(function(t){return t.plain_text;}).join('');
+        if (prop.rich_text) return prop.rich_text.map(function(t){return t.plain_text;}).join('');
+        if (prop.select) return prop.select ? prop.select.name : '';
+        if (prop.multi_select) return prop.multi_select.map(function(s){return s.name;}).join(', ');
+        return '';
+      }
+      return {
+        module_id: gt(p['模块编号']),
+        name: gt(p['模块名称']),
+        status: gt(p['状态']),
+        developer: gt(p['执行者']),
+        tags: gt(p['功能标签']),
+        domain: gt(p['数据域'])
+      };
+    });
+    res.json({ source: 'notion', data: modules });
+  } catch (err) {
+    console.log('❌ 模块列表查询失败：', err.message);
+    res.json({ source: 'fallback', data: {} });
+  }
+});
+`;
+   if (dashCode.includes('module.exports')) {
+     dashCode = dashCode.replace(/module\.exports/, newCode + '\nmodule.exports');
+   } else {
+     dashCode += newCode;
+   }
+   fs.writeFileSync(dashPath, dashCode);
+   console.log('✅ [3/3] dashboard-api.js 已添加 /dev/:id 和 /modules');
+ } else {
+   console.log('ℹ️ [3/3] dashboard-api.js 已包含新端点，跳过');
+ }
+} else {
+ console.log('❌ [3/3] dashboard-api.js 不存在于: ', dashPath);
+ var routesDir2 = path.join(backendDir, 'routes');
+ if (fs.existsSync(routesDir2)) {
+   console.log('   routes 目录文件: ', fs.readdirSync(routesDir2));
+ }
+}
+console.log('\n🎉 BC-集成-005 代码补丁全部完成!');
+console.log('📁 新增文件: middleware/auth.js');
+console.log('📝 修改文件: routes/syslog-api.js, routes/dashboard-api.js');
+console.log('\n➡️ 下一步:');
+console.log('   cd ~/Desktop/guanghulab');
+console.log('   git add persona-studio/backend/');
+console.log('   git commit -m "[BC-集成-005-JZ][DEV-010] API鉴权+开发者详情+模块列表"');
+console.log('   git push origin main');
diff --git a/persona-studio/backend/routes/dashboard-api.js b/persona-studio/backend/routes/dashboard-api.js
new file mode 100644
index 00000000..fbcb4574
--- /dev/null
+++ b/persona-studio/backend/routes/dashboard-api.js
@@ -0,0 +1,98 @@
+// ══ BC-集成-005 新增: 开发者详情 ══
+const express = require('express');
+const router = express.Router();
+const axios = require('axios');
+
+// GET /api/dashboard/dev/:id
+router.get('/dev/:id', async function(req, res) {
+  try {
+    var devId = req.params.id;
+    var resp = await axios.post(
+      'https://api.notion.com/v1/databases/' + process.env.DASHBOARD_DATABASE_ID + '/query',
+      {
+        filter: {
+          property: '孕育者',
+          rich_text: { contains: devId }
+        }
+      },
+      {
+        headers: {
+          'Authorization': 'Bearer ' + process.env.NOTION_TOKEN,
+          'Notion-Version': '2022-06-28',
+          'Content-Type': 'application/json'
+        }
+      }
+    );
+    var results = resp.data.results;
+    if (results.length === 0) {
+      return res.json({ source: 'notion', data: null, message: '未找到该开发者' });
+    }
+    var devModules = results.map(function(page) {
+      var p = page.properties;
+      function gt(prop) {
+        if (!prop) return '';
+        if (prop.title) return prop.title.map(function(t) {return t.plain_text;}).join('');
+        if (prop.rich_text) return prop.rich_text.map(function(t) {return t.plain_text;}).join('');
+        if (prop.select) return prop.select ? prop.select.name : '';
+        if (prop.status) return prop.status ? prop.status.name : '';
+        if (prop.checkbox !== undefined) return prop.checkbox;
+        return '';
+      }
+      return {
+        name: gt(p['名称']),
+        developer: gt(p['孕育者']),
+        status: gt(p['对接状态']),
+        version: gt(p['当前版本']),
+        persona: gt(p['宝宝人格体']),
+        notes: gt(p['备注']),
+        type: gt(p['类型'])
+      };
+    });
+    res.json({ source: 'notion', dev_id: devId, data: devModules });
+  } catch (err) {
+    console.log('❌ 开发者详情查询失败：', err.message);
+    res.json({ source: 'fallback', data: {} });
+  }
+});
+
+// GET /api/dashboard/modules
+router.get('/modules', async function(req, res) {
+  try {
+    var resp = await axios.post(
+      'https://api.notion.com/v1/databases/' + process.env.MODULE_DATABASE_ID + '/query',
+      {},
+      {
+        headers: {
+          'Authorization': 'Bearer ' + process.env.NOTION_TOKEN,
+          'Notion-Version': '2022-06-28',
+          'Content-Type': 'application/json'
+        }
+      }
+    );
+    var modules = resp.data.results.map(function(page) {
+      var p = page.properties;
+      function gt(prop) {
+        if (!prop) return '';
+        if (prop.title) return prop.title.map(function(t){return t.plain_text;}).join('');
+        if (prop.rich_text) return prop.rich_text.map(function(t){return t.plain_text;}).join('');
+        if (prop.select) return prop.select ? prop.select.name : '';
+        if (prop.multi_select) return prop.multi_select.map(function(s){return s.name;}).join(', ');
+        return '';
+      }
+      return {
+        module_id: gt(p['模块编号']),
+        name: gt(p['模块名称']),
+        status: gt(p['状态']),
+        developer: gt(p['执行者']),
+        tags: gt(p['功能标签']),
+        domain: gt(p['数据域'])
+      };
+    });
+    res.json({ source: 'notion', data: modules });
+  } catch (err) {
+    console.log('❌ 模块列表查询失败：', err.message);
+    res.json({ source: 'fallback', data: {} });
+  }
+});
+
+module.exports = router;
diff --git a/persona-studio/backend/server.js b/persona-studio/backend/server.js
index a816f5ba..f8c4ea12 100644
--- a/persona-studio/backend/server.js
+++ b/persona-studio/backend/server.js
@@ -24,7 +24,10 @@ app.use('/api/ps/chat', chatRoutes);
 app.use('/api/ps/build', buildRoutes);
 app.use('/api/ps/notify', notifyRoutes);
 app.use('/api/ps/apikey', apikeyRoutes);
-app.use('/api/ps/preview', previewRoutes);
+
+// ── 健康检查 ──
+// ── 健康检查 ──app.use('/api/ps/preview', previewRoutes);
+app.use('/api/dashboard', require('./routes/dashboard-api'));
 
 // ── 健康检查 ──
 app.get('/api/ps/health', (_req, res) => {