@lobehub/lobehub 2.0.0-next.17 → 2.0.0-next.19

package/.env.desktop

@@ -4,6 +4,5 @@ FEATURE_FLAGS=-check_updates,+pin_list
 KEY_VAULTS_SECRET=oLXWIiR/AKF+rWaqy9lHkrYgzpATbW3CtJp3UfkVgpE=
 DATABASE_URL=postgresql://postgres@localhost:5432/postgres
 SEARCH_PROVIDERS=search1api
-NEXT_PUBLIC_SERVICE_MODE='server'
 NEXT_PUBLIC_IS_DESKTOP_APP=1
-NEXT_PUBLIC_ENABLE_NEXT_AUTH=0
+NEXT_PUBLIC_ENABLE_NEXT_AUTH=0

package/.env.example

@@ -273,9 +273,6 @@ OPENAI_API_KEY=sk-xxxxxxxxx
 ########## Server Database #############
 ########################################
 
-# Specify the service mode as server if you want to use the server database
-# NEXT_PUBLIC_SERVICE_MODE=server
-
 # Postgres database URL
 # DATABASE_URL=postgres://username:password@host:port/database
 

package/.env.example.development

@@ -8,8 +8,6 @@ UNSAFE_SECRET="ww+0igxjGRAAR/eTNFQ55VmhQB5KE5trFZseuntThJs="
 UNSAFE_PASSWORD="CHANGE_THIS_PASSWORD_IN_PRODUCTION"
 
 # Core Server Configuration
-# Service mode - set to 'server' for server-side deployment
-NEXT_PUBLIC_SERVICE_MODE=server
 
 # Service Ports Configuration
 LOBE_PORT=3010

package/.github/workflows/e2e.yml

@@ -14,6 +14,17 @@ jobs:
     e2e:
         name: Test Web App
         runs-on: ubuntu-latest
+        services:
+          postgres:
+            image: paradedb/paradedb:latest
+            env:
+              POSTGRES_PASSWORD: postgres
+            options: >-
+              --health-cmd pg_isready --health-interval 10s --health-timeout 5s  --health-retries 5
+
+            ports:
+              - 5432:5432
+
         timeout-minutes: 25
         steps:
             - name: Checkout
@@ -33,6 +44,9 @@ jobs:
             - name: Run E2E tests
               env:
                   PORT: 3010
+                  DATABASE_URL: postgresql://postgres:postgres@localhost:5432/postgres
+                  DATABASE_DRIVER: node
+                  KEY_VAULTS_SECRET: LA7n9k3JdEcbSgml2sxfw+4TV1AzaaFU5+R176aQz4s=
               run: bun run e2e
 
             - name: Upload Cucumber HTML report (on failure)

package/.github/workflows/release.yml

@@ -54,7 +54,6 @@ jobs:
         env:
           DATABASE_TEST_URL: postgresql://postgres:postgres@localhost:5432/postgres
           DATABASE_DRIVER: node
-          NEXT_PUBLIC_SERVICE_MODE: server
           KEY_VAULTS_SECRET: LA7n9k3JdEcbSgml2sxfw+4TV1AzaaFU5+R176aQz4s=
           S3_PUBLIC_DOMAIN: https://example.com
           APP_URL: https://home.com

package/.github/workflows/test.yml

@@ -165,7 +165,6 @@ jobs:
         env:
           DATABASE_TEST_URL: postgresql://postgres:postgres@localhost:5432/postgres
           DATABASE_DRIVER: node
-          NEXT_PUBLIC_SERVICE_MODE: server
           KEY_VAULTS_SECRET: LA7n9k3JdEcbSgml2sxfw+4TV1AzaaFU5+R176aQz4s=
           S3_PUBLIC_DOMAIN: https://example.com
           APP_URL: https://home.com

package/CHANGELOG.md

@@ -2,6 +2,64 @@
 
 # Changelog
 
+## [Version 2.0.0-next.19](https://github.com/lobehub/lobe-chat/compare/v2.0.0-next.18...v2.0.0-next.19)
+
+<sup>Released on **2025-11-03**</sup>
+
+#### ♻ Code Refactoring
+
+- **misc**: Remove `NEXT_PUBLIC_SERVICE_MODE` env and use server by default.
+
+<br/>
+
+<details>
+<summary><kbd>Improvements and Fixes</kbd></summary>
+
+#### Code refactoring
+
+- **misc**: Remove `NEXT_PUBLIC_SERVICE_MODE` env and use server by default, closes [#10017](https://github.com/lobehub/lobe-chat/issues/10017) ([f2ab2fc](https://github.com/lobehub/lobe-chat/commit/f2ab2fc))
+
+</details>
+
+<div align="right">
+
+[![](https://img.shields.io/badge/-BACK_TO_TOP-151515?style=flat-square)](#readme-top)
+
+</div>
+
+## [Version 2.0.0-next.18](https://github.com/lobehub/lobe-chat/compare/v2.0.0-next.17...v2.0.0-next.18)
+
+<sup>Released on **2025-11-03**</sup>
+
+#### ♻ Code Refactoring
+
+- **misc**: Refactor trpc request to use zod schema.
+
+#### 💄 Styles
+
+- **misc**: Improve built-in client OIDC user flow.
+
+<br/>
+
+<details>
+<summary><kbd>Improvements and Fixes</kbd></summary>
+
+#### Code refactoring
+
+- **misc**: Refactor trpc request to use zod schema, closes [#10016](https://github.com/lobehub/lobe-chat/issues/10016) ([1a84f2c](https://github.com/lobehub/lobe-chat/commit/1a84f2c))
+
+#### Styles
+
+- **misc**: Improve built-in client OIDC user flow, closes [#10020](https://github.com/lobehub/lobe-chat/issues/10020) ([80202ed](https://github.com/lobehub/lobe-chat/commit/80202ed))
+
+</details>
+
+<div align="right">
+
+[![](https://img.shields.io/badge/-BACK_TO_TOP-151515?style=flat-square)](#readme-top)
+
+</div>
+
 ## [Version 2.0.0-next.17](https://github.com/lobehub/lobe-chat/compare/v2.0.0-next.16...v2.0.0-next.17)
 
 <sup>Released on **2025-11-03**</sup>

package/Dockerfile

@@ -37,7 +37,6 @@ FROM base AS builder
 
 ARG USE_CN_MIRROR
 ARG NEXT_PUBLIC_BASE_PATH
-ARG NEXT_PUBLIC_SERVICE_MODE
 ARG NEXT_PUBLIC_ENABLE_NEXT_AUTH
 ARG NEXT_PUBLIC_ENABLE_CLERK_AUTH
 ARG NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY
@@ -53,8 +52,7 @@ ARG FEATURE_FLAGS
 ENV NEXT_PUBLIC_BASE_PATH="${NEXT_PUBLIC_BASE_PATH}" \
     FEATURE_FLAGS="${FEATURE_FLAGS}"
 
-ENV NEXT_PUBLIC_SERVICE_MODE="${NEXT_PUBLIC_SERVICE_MODE:-server}" \
-    NEXT_PUBLIC_ENABLE_NEXT_AUTH="${NEXT_PUBLIC_ENABLE_NEXT_AUTH:-1}" \
+ENV NEXT_PUBLIC_ENABLE_NEXT_AUTH="${NEXT_PUBLIC_ENABLE_NEXT_AUTH:-1}" \
     NEXT_PUBLIC_ENABLE_CLERK_AUTH="${NEXT_PUBLIC_ENABLE_CLERK_AUTH:-0}" \
     NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY="${NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY}" \
     CLERK_WEBHOOK_SECRET="whsec_xxx" \

package/changelog/v1.json

@@ -1,4 +1,22 @@
 [
+  {
+    "children": {
+      "improvements": [
+        "Remove NEXT_PUBLIC_SERVICE_MODE env and use server by default."
+      ]
+    },
+    "date": "2025-11-03",
+    "version": "2.0.0-next.19"
+  },
+  {
+    "children": {
+      "improvements": [
+        "Improve built-in client OIDC user flow."
+      ]
+    },
+    "date": "2025-11-03",
+    "version": "2.0.0-next.18"
+  },
   {
     "children": {
       "fixes": [

package/locales/ar/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "طلب الأذونات التالية:",
     "redirectUri": "سيتم إعادة التوجيه إلى بعد نجاح التفويض",
+    "redirecting": "تم التفويض بنجاح، جارٍ إعادة التوجيه...",
     "scope": {
       "email": "الوصول إلى عنوان بريدك الإلكتروني",
       "offline_access": "السماح للتطبيق بالوصول إلى بياناتك",

package/locales/bg-BG/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "Искаме следните разрешения:",
     "redirectUri": "Ще бъдете пренасочени след успешното разрешение",
+    "redirecting": "Успешно упълномощено, пренасочване...",
     "scope": {
       "email": "Достъп до вашия имейл адрес",
       "offline_access": "Позволете на клиента да получи достъп до вашите данни",

package/locales/de-DE/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "Anforderung der folgenden Berechtigungen:",
     "redirectUri": "Nach erfolgreicher Autorisierung werden Sie umgeleitet zu",
+    "redirecting": "Autorisierung erfolgreich, Weiterleitung...",
     "scope": {
       "email": "Zugriff auf Ihre E-Mail-Adresse",
       "offline_access": "Erlauben Sie dem Client, auf Ihre Daten zuzugreifen",

package/locales/en-US/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "Requesting the following permissions:",
     "redirectUri": "You will be redirected to after successful authorization",
+    "redirecting": "Authorization successful, redirecting...",
     "scope": {
       "email": "Access your email address",
       "offline_access": "Allow the client to access your data",

package/locales/es-ES/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "Solicitar los siguientes permisos:",
     "redirectUri": "Se redirigirá a después de la autorización exitosa",
+    "redirecting": "Autorización exitosa, redirigiendo...",
     "scope": {
       "email": "Acceder a su dirección de correo electrónico",
       "offline_access": "Permitir que el cliente acceda a sus datos",

package/locales/fa-IR/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "درخواست مجوزهای زیر:",
     "redirectUri": "پس از موفقیت در مجوز، به آدرس زیر هدایت می‌شوید",
+    "redirecting": "دسترسی با موفقیت انجام شد، در حال انتقال...",
     "scope": {
       "email": "دسترسی به آدرس ایمیل شما",
       "offline_access": "اجازه دسترسی به داده‌های شما توسط کلاینت",

package/locales/fr-FR/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "Demander les autorisations suivantes :",
     "redirectUri": "Vous serez redirigé vers après une autorisation réussie",
+    "redirecting": "Autorisation réussie, redirection en cours...",
     "scope": {
       "email": "Accéder à votre adresse e-mail",
       "offline_access": "Autoriser le client à accéder à vos données",

package/locales/it-IT/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "Richiesta delle seguenti autorizzazioni:",
     "redirectUri": "Verrai reindirizzato a dopo un'autorizzazione riuscita",
+    "redirecting": "Autorizzazione completata, reindirizzamento in corso...",
     "scope": {
       "email": "Accesso al tuo indirizzo email",
       "offline_access": "Consenti all'accesso del client ai tuoi dati",

package/locales/ja-JP/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "以下の権限をリクエストします：",
     "redirectUri": "承認が成功した後、次の場所にリダイレクトされます",
+    "redirecting": "認証に成功しました。リダイレクト中です...",
     "scope": {
       "email": "あなたのメールアドレスにアクセス",
       "offline_access": "クライアントがあなたのデータにアクセスすることを許可",

package/locales/ko-KR/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "다음 권한을 요청합니다:",
     "redirectUri": "인증이 완료되면 다음으로 리디렉션됩니다:",
+    "redirecting": "인증이 완료되었습니다. 이동 중...",
     "scope": {
       "email": "귀하의 이메일 주소에 접근",
       "offline_access": "클라이언트가 귀하의 데이터에 접근할 수 있도록 허용",

package/locales/nl-NL/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "Vraag om de volgende toestemmingen:",
     "redirectUri": "U wordt omgeleid naar na succesvolle autorisatie",
+    "redirecting": "Autorisatie geslaagd, doorverwijzen...",
     "scope": {
       "email": "Toegang tot uw e-mailadres",
       "offline_access": "Toestaan dat de client toegang heeft tot uw gegevens",

package/locales/pl-PL/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "Proszę o następujące uprawnienia:",
     "redirectUri": "Zostaniesz przekierowany po pomyślnym autoryzowaniu",
+    "redirecting": "Autoryzacja zakończona pomyślnie, przekierowywanie...",
     "scope": {
       "email": "Dostęp do Twojego adresu e-mail",
       "offline_access": "Zezwól klientowi na dostęp do Twoich danych",

package/locales/pt-BR/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "Solicitar as seguintes permissões:",
     "redirectUri": "Você será redirecionado após a autorização bem-sucedida",
+    "redirecting": "Autorização bem-sucedida, redirecionando...",
     "scope": {
       "email": "Acessar seu endereço de e-mail",
       "offline_access": "Permitir que o cliente acesse seus dados",

package/locales/ru-RU/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "Запросить следующие разрешения:",
     "redirectUri": "После успешного авторизации будет выполнен редирект на",
+    "redirecting": "Авторизация прошла успешно, перенаправление...",
     "scope": {
       "email": "Доступ к вашему адресу электронной почты",
       "offline_access": "Разрешить клиенту доступ к вашим данным",

package/locales/tr-TR/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "Aşağıdaki izinleri talep et:",
     "redirectUri": "İzin verildikten sonra şu adrese yönlendirileceksiniz",
+    "redirecting": "Yetkilendirme başarılı, yönlendiriliyor...",
     "scope": {
       "email": "E-posta adresinize erişim",
       "offline_access": "Müşterinin verilerinize erişmesine izin ver",

package/locales/vi-VN/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "Yêu cầu các quyền sau:",
     "redirectUri": "Sẽ được chuyển hướng đến sau khi ủy quyền thành công",
+    "redirecting": "Ủy quyền thành công, đang chuyển hướng...",
     "scope": {
       "email": "Truy cập địa chỉ email của bạn",
       "offline_access": "Cho phép ứng dụng truy cập dữ liệu của bạn",

package/locales/zh-CN/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "请求以下权限：",
     "redirectUri": "授权成功后将重定向到",
+    "redirecting": "授权成功，跳转中...",
     "scope": {
       "email": "访问您的电子邮件地址",
       "offline_access": "允许客户端访问您的数据",

package/locales/zh-TW/oauth.json

@@ -18,6 +18,7 @@
     },
     "permissionsTitle": "請求以下權限：",
     "redirectUri": "授權成功後將重定向到",
+    "redirecting": "授權成功，正在跳轉...",
     "scope": {
       "email": "訪問您的電子郵件地址",
       "offline_access": "允許客戶端訪問您的資料",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lobehub/lobehub",
-  "version": "2.0.0-next.17",
+  "version": "2.0.0-next.19",
   "description": "LobeHub - an open-source,comprehensive AI Agent framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application.",
   "keywords": [
     "framework",
@@ -38,7 +38,7 @@
     "build:analyze": "NODE_OPTIONS=--max-old-space-size=6144 ANALYZE=true next build --webpack",
     "build:docker": "npm run prebuild && NODE_OPTIONS=--max-old-space-size=6144 DOCKER=true next build --webpack && npm run build-sitemap",
     "prebuild:electron": "cross-env NEXT_PUBLIC_IS_DESKTOP_APP=1 tsx scripts/prebuild.mts",
-    "build:electron": "cross-env NODE_OPTIONS=--max-old-space-size=6144 NEXT_PUBLIC_IS_DESKTOP_APP=1 NEXT_PUBLIC_SERVICE_MODE=server next build --webpack",
+    "build:electron": "cross-env NODE_OPTIONS=--max-old-space-size=6144 NEXT_PUBLIC_IS_DESKTOP_APP=1 next build --webpack",
     "clean:node_modules": "bash -lc 'set -e; echo \"Removing all node_modules...\"; rm -rf node_modules; pnpm -r exec rm -rf node_modules; rm -rf apps/desktop/node_modules; echo \"All node_modules removed.\"'",
     "db:generate": "drizzle-kit generate && npm run db:generate-client && npm run workflow:dbml",
     "db:generate-client": "tsx ./scripts/migrateClientDB/compile-migrations.ts",

package/packages/database/src/core/web-server.ts

@@ -10,7 +10,8 @@ import * as schema from '../schemas';
 import { LobeChatDatabase } from '../type';
 
 export const getDBInstance = (): LobeChatDatabase => {
-  if (!(process.env.NEXT_PUBLIC_SERVICE_MODE === 'server')) return {} as any;
+  // In test environment, return a mock instance to avoid initialization errors
+  if (process.env.NODE_ENV === 'test') return {} as LobeChatDatabase;
 
   if (!serverDBEnv.KEY_VAULTS_SECRET) {
     throw new Error(

package/packages/memory-extract/package.json

@@ -9,7 +9,7 @@
   "dependencies": {
     "@lobechat/model-runtime": "workspace:*",
     "@lobechat/prompts": "workspace:*",
-    "dotenv": "^16.4.7",
+    "dotenv": "^17.2.3",
     "ora": "^8.2.0"
   },
   "devDependencies": {

package/packages/types/src/message/ui/params.ts

@@ -1,9 +1,14 @@
 /* eslint-disable sort-keys-fix/sort-keys-fix , typescript-sort-keys/interface */
+import { z } from 'zod';
+
 import { UploadFileItem } from '../../files';
 import { MessageSemanticSearchChunk } from '../../rag';
-import { ChatMessageError } from '../common/base';
+import { ChatMessageError, ChatMessageErrorSchema } from '../common/base';
 import { ChatPluginPayload } from '../common/tools';
-import { UIChatMessage, UIMessageRoleType } from './chat';
+import { UIChatMessage } from './chat';
+import { SemanticSearchChunkSchema } from './rag';
+
+export type CreateMessageRoleType = 'user' | 'assistant' | 'tool' | 'supervisor';
 
 export interface CreateMessageParams
   extends Partial<Omit<UIChatMessage, 'content' | 'role' | 'topicId' | 'chunksList'>> {
@@ -14,7 +19,7 @@ export interface CreateMessageParams
   fromModel?: string;
   fromProvider?: string;
   groupId?: string;
-  role: UIMessageRoleType;
+  role: CreateMessageRoleType;
   sessionId: string;
   targetId?: string | null;
   threadId?: string | null;
@@ -28,7 +33,7 @@ export interface CreateMessageParams
  */
 export interface CreateNewMessageParams {
   // ========== Required fields ==========
-  role: UIMessageRoleType;
+  role: CreateMessageRoleType;
   content: string;
   sessionId: string;
 
@@ -103,3 +108,92 @@ export interface SendGroupMessageParams {
    */
   targetMemberId?: string | null;
 }
+
+// ========== Zod Schemas ========== //
+
+const UIMessageRoleTypeSchema = z.enum(['user', 'assistant', 'tool', 'supervisor']);
+
+const ChatPluginPayloadSchema = z.object({
+  apiName: z.string(),
+  arguments: z.string(),
+  identifier: z.string(),
+  type: z.string(),
+});
+
+export const CreateMessageParamsSchema = z
+  .object({
+    content: z.string(),
+    role: UIMessageRoleTypeSchema,
+    sessionId: z.string().nullable().optional(),
+    error: ChatMessageErrorSchema.nullable().optional(),
+    fileChunks: z.array(SemanticSearchChunkSchema).optional(),
+    files: z.array(z.string()).optional(),
+    fromModel: z.string().optional(),
+    fromProvider: z.string().optional(),
+    groupId: z.string().optional(),
+    targetId: z.string().nullable().optional(),
+    threadId: z.string().nullable().optional(),
+    topicId: z.string().optional(),
+    traceId: z.string().optional(),
+    // Allow additional fields from UIChatMessage (many can be null)
+    agentId: z.string().optional(),
+    children: z.any().optional(),
+    chunksList: z.any().optional(),
+    createdAt: z.number().optional(),
+    extra: z.any().optional(),
+    favorite: z.boolean().optional(),
+    fileList: z.any().optional(),
+    id: z.string().optional(),
+    imageList: z.any().optional(),
+    meta: z.any().optional(),
+    metadata: z.any().nullable().optional(),
+    model: z.string().nullable().optional(),
+    observationId: z.string().optional(),
+    parentId: z.string().optional(),
+    performance: z.any().optional(),
+    plugin: z.any().optional(),
+    pluginError: z.any().optional(),
+    pluginState: z.any().optional(),
+    provider: z.string().nullable().optional(),
+    quotaId: z.string().optional(),
+    ragQuery: z.string().nullable().optional(),
+    ragQueryId: z.string().nullable().optional(),
+    reasoning: z.any().optional(),
+    search: z.any().optional(),
+    tool_call_id: z.string().optional(),
+    toolCalls: z.any().optional(),
+    tools: z.any().optional(),
+    translate: z.any().optional(),
+    tts: z.any().optional(),
+    updatedAt: z.number().optional(),
+  })
+  .passthrough();
+
+export const CreateNewMessageParamsSchema = z
+  .object({
+    // Required fields
+    role: UIMessageRoleTypeSchema,
+    content: z.string(),
+    sessionId: z.string().nullable().optional(),
+    // Tool related
+    tool_call_id: z.string().optional(),
+    plugin: ChatPluginPayloadSchema.optional(),
+    // Grouping
+    parentId: z.string().optional(),
+    groupId: z.string().optional(),
+    // Context
+    topicId: z.string().optional(),
+    threadId: z.string().nullable().optional(),
+    targetId: z.string().nullable().optional(),
+    // Model info
+    model: z.string().nullable().optional(),
+    provider: z.string().nullable().optional(),
+    // Content
+    files: z.array(z.string()).optional(),
+    // Error handling
+    error: ChatMessageErrorSchema.nullable().optional(),
+    // Metadata
+    traceId: z.string().optional(),
+    fileChunks: z.array(SemanticSearchChunkSchema).optional(),
+  })
+  .passthrough();

package/packages/types/src/user/index.ts

@@ -3,7 +3,7 @@ import { z } from 'zod';
 
 import { Plans } from '../subscription';
 import { TopicDisplayMode } from '../topic';
-import { UserSettings } from '../user/settings';
+import { UserSettings } from './settings';
 
 export interface LobeUser {
   avatar?: string;
@@ -74,3 +74,15 @@ export const NextAuthAccountSchame = z.object({
   provider: z.string(),
   providerAccountId: z.string(),
 });
+
+export const UserPreferenceSchema = z
+  .object({
+    disableInputMarkdownRender: z.boolean().optional(),
+    enableGroupChat: z.boolean().optional(),
+    guide: UserGuideSchema.optional(),
+    hideSyncAlert: z.boolean().optional(),
+    telemetry: z.boolean().nullable(),
+    topicDisplayMode: z.nativeEnum(TopicDisplayMode).optional(),
+    useCmdEnterToSend: z.boolean().optional(),
+  })
+  .partial();

package/packages/types/src/user/settings/index.ts

@@ -1,3 +1,5 @@
+import { z } from 'zod';
+
 import type { LobeAgentSettings } from '../../session';
 import { UserGeneralConfig } from './general';
 import { UserHotkeyConfig } from './hotkey';
@@ -18,6 +20,7 @@ export * from './keyVaults';
 export * from './modelProvider';
 export * from './sync';
 export * from './systemAgent';
+export * from './tool';
 export * from './tts';
 
 /**
@@ -34,3 +37,22 @@ export interface UserSettings {
   tool: UserToolConfig;
   tts: UserTTSConfig;
 }
+
+/**
+ * Zod schema for partial UserSettings updates
+ * Uses passthrough to allow any nested settings fields
+ */
+export const UserSettingsSchema = z
+  .object({
+    defaultAgent: z.any().optional(),
+    general: z.any().optional(),
+    hotkey: z.any().optional(),
+    image: z.any().optional(),
+    keyVaults: z.any().optional(),
+    languageModel: z.any().optional(),
+    systemAgent: z.any().optional(),
+    tool: z.any().optional(),
+    tts: z.any().optional(),
+  })
+  .passthrough()
+  .partial();

package/scripts/migrateServerDB/errorHint.js

@@ -15,13 +15,7 @@ if you have any other question, please open issue here: https://github.com/lobeh
 const DB_FAIL_INIT_HINT = `------------------------------------------------------------------------------------------
 ⚠️ Database migrate failed due to not find the db instance.
 
-1) You might not switch to server db mode, please set the env blow and try again:
-
-\`\`\`
-NEXT_PUBLIC_SERVICE_MODE=server
-\`\`\`
-
-2) if you are using docker postgres image, you may need to set DATABASE_DRIVER to node
+if you are using docker postgres image, you may need to set DATABASE_DRIVER to node
 
 \`\`\`
 DATABASE_DRIVER=node

package/src/app/[variants]/(main)/_layout/Desktop/SideBar/TopActions.tsx

@@ -32,9 +32,6 @@ const TopActions = memo<TopActionProps>(({ tab, isPinned }) => {
     useServerConfigStore(featureFlagsSelectors);
   const hotkey = useUserStore(settingsSelectors.getHotkeyById(HotkeyEnum.NavigateToChat));
 
-  // Check if server mode is enabled
-  const isServerMode = process.env.NEXT_PUBLIC_SERVICE_MODE === 'server';
-
   const isChatActive = tab === SidebarTabKey.Chat && !isPinned;
   const isFilesActive = tab === SidebarTabKey.Files;
   const isDiscoverActive = tab === SidebarTabKey.Discover;
@@ -69,7 +66,7 @@ const TopActions = memo<TopActionProps>(({ tab, isPinned }) => {
           tooltipProps={{ placement: 'right' }}
         />
       </Link>
-      {enableKnowledgeBase && isServerMode && (
+      {enableKnowledgeBase && (
         <Link aria-label={t('tab.knowledgeBase')} href={'/knowledge'}>
           <ActionIcon
             active={isFilesActive}

package/src/app/[variants]/oauth/consent/[uid]/Consent/BuiltinConsent.tsx

@@ -0,0 +1,57 @@
+'use client';
+
+import { Icon } from '@lobehub/ui';
+import { Card, Result } from 'antd';
+import { useTheme } from 'antd-style';
+import { LoaderCircle } from 'lucide-react';
+import { memo, useEffect, useRef } from 'react';
+import { useTranslation } from 'react-i18next';
+import { Center } from 'react-layout-kit';
+
+interface BuiltinConsentProps {
+  uid: string;
+}
+
+const BuiltinConsent = memo<BuiltinConsentProps>(({ uid }) => {
+  const { t } = useTranslation('oauth');
+  const formRef = useRef<HTMLFormElement>(null);
+
+  useEffect(() => {
+    // Auto-submit on mount
+    formRef.current?.submit();
+  }, []);
+
+  const theme = useTheme();
+  return (
+    <>
+      <Center height="100vh">
+        <Card
+          style={{
+            alignItems: 'center',
+            display: 'flex',
+            justifyContent: 'center',
+            minHeight: 280,
+            minWidth: 500,
+            width: '100%',
+          }}
+        >
+          <Result
+            icon={<Icon icon={LoaderCircle} spin style={{ color: theme.colorText }} />}
+            status="success"
+            style={{ padding: 0 }}
+            subTitle={t('consent.redirecting')}
+            title=""
+          />
+        </Card>
+      </Center>
+      <form action="/oidc/consent" method="post" ref={formRef} style={{ display: 'none' }}>
+        <input name="uid" type="hidden" value={uid} />
+        <input name="consent" type="hidden" value="accept" />
+      </form>
+    </>
+  );
+});
+
+BuiltinConsent.displayName = 'BuiltinConsent';
+
+export default BuiltinConsent;

package/src/app/[variants]/oauth/consent/[uid]/{Consent.tsx → Consent/index.tsx}

@@ -7,7 +7,8 @@ import { memo, useState } from 'react';
 import { useTranslation } from 'react-i18next';
 import { Center, Flexbox } from 'react-layout-kit';
 
-import OAuthApplicationLogo from './components/OAuthApplicationLogo';
+import OAuthApplicationLogo from '../components/OAuthApplicationLogo';
+import BuiltinConsent from './BuiltinConsent';
 
 interface ClientProps {
   clientId: string;
@@ -117,6 +118,8 @@ function getScopeDescription(scope: string, t: any): string {
   return t(`consent.scope.${scope.replace(':', '-')}`, scope);
 }
 
+const BUILTIN_CLIENTS = new Set(['lobehub-desktop', 'lobehub-mobile', 'lobehub-market']);
+
 const ConsentClient = memo<ClientProps>(({ uid, clientId, scopes, clientMetadata }) => {
   const { styles } = useStyles();
   const { t } = useTranslation('oauth');
@@ -124,6 +127,11 @@ const ConsentClient = memo<ClientProps>(({ uid, clientId, scopes, clientMetadata
   const [isLoading, setIsLoading] = useState(false);
 
   const clientDisplayName = clientMetadata?.clientName || clientId;
+
+  if (BUILTIN_CLIENTS.has(clientId)) {
+    return <BuiltinConsent uid={clientId} />;
+  }
+
   return (
     <Center className={styles.container} gap={16}>
       <Flexbox gap={40}>

package/src/app/[variants]/oauth/consent/[uid]/Login.tsx

@@ -59,6 +59,8 @@ const LoginConfirmClient = memo<LoginConfirmProps>(({ uid, clientMetadata }) =>
   const avatar = useUserStore(userProfileSelectors.userAvatar);
   const nickName = useUserStore(userProfileSelectors.nickName);
 
+  const [isLoading, setIsLoading] = React.useState(false);
+
   const titleText = t('login.title', { clientName: clientDisplayName });
   const descriptionText = t('login.description', { clientName: clientDisplayName });
   const buttonText = t('login.button'); // Or "Continue"
@@ -99,7 +101,12 @@ const LoginConfirmClient = memo<LoginConfirmProps>(({ uid, clientMetadata }) =>
 
           <Flexbox gap={16}>
             {/* Form points to the endpoint handling login confirmation */}
-            <form action="/oidc/consent" method="post" style={{ width: '100%' }}>
+            <form
+              action="/oidc/consent"
+              method="post"
+              onSubmit={() => setIsLoading(true)}
+              style={{ width: '100%' }}
+            >
               {/* Adjust action URL */}
               <input name="uid" type="hidden" value={uid} />
               <input name="choice" type="hidden" value={'accept'} />
@@ -108,6 +115,7 @@ const LoginConfirmClient = memo<LoginConfirmProps>(({ uid, clientMetadata }) =>
                 className={styles.authButton}
                 disabled={!isUserStateInit}
                 htmlType="submit"
+                loading={isLoading}
                 name="consent"
                 size="large"
                 type="primary"

package/src/config/db.ts

@@ -3,9 +3,6 @@ import { z } from 'zod';
 
 export const getServerDBConfig = () => {
   return createEnv({
-    client: {
-      NEXT_PUBLIC_ENABLED_SERVER_SERVICE: z.boolean(),
-    },
     runtimeEnv: {
       DATABASE_DRIVER: process.env.DATABASE_DRIVER || 'neon',
       DATABASE_TEST_URL: process.env.DATABASE_TEST_URL,
@@ -13,8 +10,6 @@ export const getServerDBConfig = () => {
 
       KEY_VAULTS_SECRET: process.env.KEY_VAULTS_SECRET,
 
-      NEXT_PUBLIC_ENABLED_SERVER_SERVICE: process.env.NEXT_PUBLIC_SERVICE_MODE === 'server',
-
       REMOVE_GLOBAL_FILE: process.env.DISABLE_REMOVE_GLOBAL_FILE !== '0',
     },
     server: {

package/src/libs/next-auth/auth.config.ts

@@ -1,6 +1,5 @@
 import type { NextAuthConfig } from 'next-auth';
 
-import { getServerDBConfig } from '@/config/db';
 import { getAuthConfig } from '@/envs/auth';
 
 import { LobeNextAuthDbAdapter } from './adapter';
@@ -14,8 +13,6 @@ const {
   NEXT_PUBLIC_ENABLE_NEXT_AUTH,
 } = getAuthConfig();
 
-const { NEXT_PUBLIC_ENABLED_SERVER_SERVICE } = getServerDBConfig();
-
 export const initSSOProviders = () => {
   return NEXT_PUBLIC_ENABLE_NEXT_AUTH
     ? NEXT_AUTH_SSO_PROVIDERS.split(/[,，]/).map((provider) => {
@@ -30,7 +27,7 @@ export const initSSOProviders = () => {
 
 // Notice this is only an object, not a full Auth.js instance
 export default {
-  adapter: NEXT_PUBLIC_ENABLED_SERVER_SERVICE ? LobeNextAuthDbAdapter() : undefined,
+  adapter: NEXT_PUBLIC_ENABLE_NEXT_AUTH ? LobeNextAuthDbAdapter() : undefined,
   callbacks: {
     // Note: Data processing order of callback: authorize --> jwt --> session
     async jwt({ token, user }) {
@@ -61,7 +58,7 @@ export default {
   secret: NEXT_AUTH_SECRET ?? process.env.AUTH_SECRET,
   session: {
     // Force use JWT if server service is disabled
-    strategy: NEXT_PUBLIC_ENABLED_SERVER_SERVICE ? NEXT_AUTH_SSO_SESSION_STRATEGY : 'jwt',
+    strategy: NEXT_AUTH_SSO_SESSION_STRATEGY,
   },
   trustHost: process.env?.AUTH_TRUST_HOST ? process.env.AUTH_TRUST_HOST === 'true' : true,
 } satisfies NextAuthConfig;

package/src/locales/default/oauth.ts

@@ -19,6 +19,7 @@ const oauth = {
     },
     permissionsTitle: '请求以下权限：',
     redirectUri: '授权成功后将重定向到',
+    redirecting: '授权成功，跳转中...',
     scope: {
       'email': '访问您的电子邮件地址',
       'offline_access': '允许客户端访问您的数据',

package/src/server/routers/lambda/__tests__/integration/message.integration.test.ts

@@ -318,47 +318,6 @@ describe('Message Router Integration Tests', () => {
     });
   });
 
-  describe('batchCreateMessages', () => {
-    it('should create multiple messages in batch', async () => {
-      const caller = messageRouter.createCaller(createTestContext(userId));
-
-      const messagesToCreate = [
-        {
-          content: 'Batch message 1',
-          role: 'user' as const,
-          sessionId: testSessionId,
-        },
-        {
-          content: 'Batch message 2',
-          role: 'assistant' as const,
-          sessionId: testSessionId,
-        },
-        {
-          content: 'Batch message 3',
-          role: 'user' as const,
-          sessionId: testSessionId,
-          topicId: testTopicId,
-        },
-      ];
-
-      const result = await caller.batchCreateMessages(messagesToCreate);
-
-      expect(result.success).toBe(true);
-      // Note: rowCount might be undefined in PGlite, so we skip this check
-      // expect(result.added).toBe(3);
-
-      // 验证数据库中的消息
-      const dbMessages = await serverDB
-        .select()
-        .from(messages)
-        .where(eq(messages.sessionId, testSessionId));
-
-      expect(dbMessages.length).toBeGreaterThanOrEqual(3);
-      const topicMessage = dbMessages.find((m) => m.content === 'Batch message 3');
-      expect(topicMessage?.topicId).toBe(testTopicId);
-    });
-  });
-
   describe('removeMessages', () => {
     it('should remove multiple messages', async () => {
       const caller = messageRouter.createCaller(createTestContext(userId));

package/src/server/routers/lambda/message.ts

@@ -1,5 +1,6 @@
 import {
-  BatchTaskResult,
+  CreateMessageParamsSchema,
+  CreateNewMessageParamsSchema,
   UIChatMessage,
   UpdateMessageParamsSchema,
   UpdateMessageRAGParamsSchema,
@@ -27,14 +28,6 @@ const messageProcedure = authedProcedure.use(serverDatabase).use(async (opts) =>
 });
 
 export const messageRouter = router({
-  batchCreateMessages: messageProcedure
-    .input(z.array(z.any()))
-    .mutation(async ({ input, ctx }): Promise<BatchTaskResult> => {
-      const data = await ctx.messageModel.batchCreate(input);
-
-      return { added: data.rowCount as number, ids: [], skips: [], success: true };
-    }),
-
   count: messageProcedure
     .input(
       z
@@ -64,7 +57,7 @@ export const messageRouter = router({
     }),
 
   createMessage: messageProcedure
-    .input(z.object({}).passthrough().partial())
+    .input(CreateMessageParamsSchema)
     .mutation(async ({ input, ctx }) => {
       const data = await ctx.messageModel.create(input as any);
 
@@ -72,7 +65,7 @@ export const messageRouter = router({
     }),
 
   createNewMessage: messageProcedure
-    .input(z.object({}).passthrough().partial())
+    .input(CreateNewMessageParamsSchema)
     .mutation(async ({ input, ctx }) => {
       return ctx.messageModel.createNewMessage(input as any, {
         postProcessUrl: (path) => ctx.fileService.getFullFileUrl(path),

package/src/server/routers/lambda/user.ts

@@ -1,9 +1,17 @@
 import { UserJSON } from '@clerk/backend';
+import { enableClerk, isDesktop } from '@lobechat/const';
+import {
+  NextAuthAccountSchame,
+  UserGuideSchema,
+  UserInitializationState,
+  UserPreference,
+  UserPreferenceSchema,
+  UserSettings,
+  UserSettingsSchema,
+} from '@lobechat/types';
 import { v4 as uuidv4 } from 'uuid';
 import { z } from 'zod';
 
-import { enableClerk } from '@/const/auth';
-import { isDesktop } from '@/const/version';
 import { MessageModel } from '@/database/models/message';
 import { SessionModel } from '@/database/models/session';
 import { UserModel, UserNotFoundError } from '@/database/models/user';
@@ -16,13 +24,6 @@ import { S3 } from '@/server/modules/S3';
 import { FileService } from '@/server/services/file';
 import { NextAuthUserService } from '@/server/services/nextAuthUser';
 import { UserService } from '@/server/services/user';
-import {
-  NextAuthAccountSchame,
-  UserGuideSchema,
-  UserInitializationState,
-  UserPreference,
-} from '@/types/user';
-import { UserSettings } from '@/types/user/settings';
 
 const userProcedure = authedProcedure.use(serverDatabase).use(async ({ ctx, next }) => {
   return next({
@@ -199,30 +200,28 @@ export const userRouter = router({
     return ctx.userModel.updateGuide(input);
   }),
 
-  updatePreference: userProcedure.input(z.any()).mutation(async ({ ctx, input }) => {
+  updatePreference: userProcedure.input(UserPreferenceSchema).mutation(async ({ ctx, input }) => {
     return ctx.userModel.updatePreference(input);
   }),
 
-  updateSettings: userProcedure
-    .input(z.object({}).passthrough())
-    .mutation(async ({ ctx, input }) => {
-      const { keyVaults, ...res } = input as Partial<UserSettings>;
+  updateSettings: userProcedure.input(UserSettingsSchema).mutation(async ({ ctx, input }) => {
+    const { keyVaults, ...res } = input as Partial<UserSettings>;
 
-      // Encrypt keyVaults
-      let encryptedKeyVaults: string | null = null;
+    // Encrypt keyVaults
+    let encryptedKeyVaults: string | null = null;
 
-      if (keyVaults) {
-        // TODO: better to add a validation
-        const data = JSON.stringify(keyVaults);
-        const gateKeeper = await KeyVaultsGateKeeper.initWithEnvKey();
+    if (keyVaults) {
+      // TODO: better to add a validation
+      const data = JSON.stringify(keyVaults);
+      const gateKeeper = await KeyVaultsGateKeeper.initWithEnvKey();
 
-        encryptedKeyVaults = await gateKeeper.encrypt(data);
-      }
+      encryptedKeyVaults = await gateKeeper.encrypt(data);
+    }
 
-      const nextValue = { ...res, keyVaults: encryptedKeyVaults };
+    const nextValue = { ...res, keyVaults: encryptedKeyVaults };
 
-      return ctx.userModel.updateSetting(nextValue);
-    }),
+    return ctx.userModel.updateSetting(nextValue);
+  }),
 });
 
 export type UserRouter = typeof userRouter;

package/src/services/message/server.ts

@@ -21,10 +21,6 @@ export class ServerService implements IMessageService {
     });
   };
 
-  batchCreateMessages: IMessageService['batchCreateMessages'] = async (messages) => {
-    return lambdaClient.message.batchCreateMessages.mutate(messages);
-  };
-
   getMessages: IMessageService['getMessages'] = async (sessionId, topicId, groupId) => {
     const data = await lambdaClient.message.getMessages.query({
       groupId,

package/src/services/message/type.ts

@@ -5,7 +5,6 @@ import {
   ChatTranslate,
   CreateMessageParams,
   CreateMessageResult,
-  DBMessageItem,
   ModelRankItem,
   UIChatMessage,
   UpdateMessageParams,
@@ -19,7 +18,6 @@ import type { HeatmapsProps } from '@lobehub/charts';
 export interface IMessageService {
   createMessage(data: CreateMessageParams): Promise<string>;
   createNewMessage(data: CreateMessageParams): Promise<CreateMessageResult>;
-  batchCreateMessages(messages: DBMessageItem[]): Promise<any>;
 
   getMessages(sessionId: string, topicId?: string, groupId?: string): Promise<UIChatMessage[]>;
   getGroupMessages(groupId: string, topicId?: string): Promise<UIChatMessage[]>;