@lobehub/lobehub 2.0.0-next.61 → 2.0.0-next.62

package/CHANGELOG.md

@@ -2,6 +2,31 @@
 
 # Changelog
 
+## [Version 2.0.0-next.62](https://github.com/lobehub/lobe-chat/compare/v2.0.0-next.61...v2.0.0-next.62)
+
+<sup>Released on **2025-11-15**</sup>
+
+#### 🐛 Bug Fixes
+
+- **next16**: Resolve 'Response body object should not be disturbed or locked' error.
+
+<br/>
+
+<details>
+<summary><kbd>Improvements and Fixes</kbd></summary>
+
+#### What's fixed
+
+- **next16**: Resolve 'Response body object should not be disturbed or locked' error, closes [#10226](https://github.com/lobehub/lobe-chat/issues/10226) ([caa9c78](https://github.com/lobehub/lobe-chat/commit/caa9c78))
+
+</details>
+
+<div align="right">
+
+[![](https://img.shields.io/badge/-BACK_TO_TOP-151515?style=flat-square)](#readme-top)
+
+</div>
+
 ## [Version 2.0.0-next.61](https://github.com/lobehub/lobe-chat/compare/v2.0.0-next.60...v2.0.0-next.61)
 
 <sup>Released on **2025-11-15**</sup>

package/changelog/v1.json

@@ -1,4 +1,9 @@
 [
+  {
+    "children": {},
+    "date": "2025-11-15",
+    "version": "2.0.0-next.62"
+  },
   {
     "children": {
       "improvements": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lobehub/lobehub",
-  "version": "2.0.0-next.61",
+  "version": "2.0.0-next.62",
   "description": "LobeHub - an open-source,comprehensive AI Agent framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application.",
   "keywords": [
     "framework",

package/src/app/(backend)/middleware/auth/index.ts

@@ -33,10 +33,15 @@ export type RequestHandler = (
 
 export const checkAuth =
   (handler: RequestHandler) => async (req: Request, options: RequestOptions) => {
+    // Clone the request to avoid "Response body object should not be disturbed or locked" error
+    // in Next.js 16 when the body stream has been consumed by Next.js internal mechanisms
+    // This ensures the handler can safely read the request body
+    const clonedReq = req.clone();
+
     // we have a special header to debug the api endpoint in development mode
     const isDebugApi = req.headers.get('lobe-auth-dev-backend-api') === '1';
     if (process.env.NODE_ENV === 'development' && isDebugApi) {
-      return handler(req, { ...options, jwtPayload: { userId: 'DEV_USER' } });
+      return handler(clonedReq, { ...options, jwtPayload: { userId: 'DEV_USER' } });
     }
 
     let jwtPayload: ClientSecretPayload;
@@ -107,5 +112,5 @@ export const checkAuth =
       return createErrorResponse(errorType, { error, ...res, provider: params?.provider });
     }
 
-    return handler(req, { ...options, jwtPayload });
+    return handler(clonedReq, { ...options, jwtPayload });
   };

package/src/app/(backend)/trpc/async/[trpc]/route.ts

@@ -3,10 +3,15 @@ import type { NextRequest } from 'next/server';
 
 import { pino } from '@/libs/logger';
 import { createAsyncRouteContext } from '@/libs/trpc/async/context';
+import { prepareRequestForTRPC } from '@/libs/trpc/utils/request-adapter';
 import { asyncRouter } from '@/server/routers/async';
 
-const handler = (req: NextRequest) =>
-  fetchRequestHandler({
+const handler = (req: NextRequest) => {
+  // Clone the request to avoid "Response body object should not be disturbed or locked" error
+  // in Next.js 16 when the body stream has been consumed by Next.js internal mechanisms
+  const preparedReq = prepareRequestForTRPC(req);
+
+  return fetchRequestHandler({
     // 避免请求之间互相影响
     // https://github.com/lobehub/lobe-chat/discussions/7442#discussioncomment-13658563
     allowBatching: false,
@@ -23,8 +28,9 @@ const handler = (req: NextRequest) =>
       console.error(error);
     },
 
-    req,
+    req: preparedReq,
     router: asyncRouter,
   });
+};
 
 export { handler as GET, handler as POST };

package/src/app/(backend)/trpc/desktop/[trpc]/route.ts

@@ -3,10 +3,15 @@ import type { NextRequest } from 'next/server';
 
 import { pino } from '@/libs/logger';
 import { createLambdaContext } from '@/libs/trpc/lambda/context';
+import { prepareRequestForTRPC } from '@/libs/trpc/utils/request-adapter';
 import { desktopRouter } from '@/server/routers/desktop';
 
-const handler = (req: NextRequest) =>
-  fetchRequestHandler({
+const handler = (req: NextRequest) => {
+  // Clone the request to avoid "Response body object should not be disturbed or locked" error
+  // in Next.js 16 when the body stream has been consumed by Next.js internal mechanisms
+  const preparedReq = prepareRequestForTRPC(req);
+
+  return fetchRequestHandler({
     /**
      * @link https://trpc.io/docs/v11/context
      */
@@ -19,7 +24,7 @@ const handler = (req: NextRequest) =>
       console.error(error);
     },
 
-    req,
+    req: preparedReq,
     responseMeta({ ctx }) {
       const headers = ctx?.resHeaders;
 
@@ -27,5 +32,6 @@ const handler = (req: NextRequest) =>
     },
     router: desktopRouter,
   });
+};
 
 export { handler as GET, handler as POST };

package/src/app/(backend)/trpc/lambda/[trpc]/route.ts

@@ -3,10 +3,15 @@ import type { NextRequest } from 'next/server';
 
 import { pino } from '@/libs/logger';
 import { createLambdaContext } from '@/libs/trpc/lambda/context';
+import { prepareRequestForTRPC } from '@/libs/trpc/utils/request-adapter';
 import { lambdaRouter } from '@/server/routers/lambda';
 
-const handler = (req: NextRequest) =>
-  fetchRequestHandler({
+const handler = (req: NextRequest) => {
+  // Clone the request to avoid "Response body object should not be disturbed or locked" error
+  // in Next.js 16 when the body stream has been consumed by Next.js internal mechanisms
+  const preparedReq = prepareRequestForTRPC(req);
+
+  return fetchRequestHandler({
     /**
      * @link https://trpc.io/docs/v11/context
      */
@@ -19,7 +24,7 @@ const handler = (req: NextRequest) =>
       console.error(error);
     },
 
-    req,
+    req: preparedReq,
     responseMeta({ ctx }) {
       const headers = ctx?.resHeaders;
 
@@ -27,5 +32,6 @@ const handler = (req: NextRequest) =>
     },
     router: lambdaRouter,
   });
+};
 
 export { handler as GET, handler as POST };

package/src/app/(backend)/trpc/mobile/[trpc]/route.ts

@@ -3,10 +3,15 @@ import type { NextRequest } from 'next/server';
 
 import { pino } from '@/libs/logger';
 import { createLambdaContext } from '@/libs/trpc/lambda/context';
+import { prepareRequestForTRPC } from '@/libs/trpc/utils/request-adapter';
 import { mobileRouter } from '@/server/routers/mobile';
 
-const handler = (req: NextRequest) =>
-  fetchRequestHandler({
+const handler = (req: NextRequest) => {
+  // Clone the request to avoid "Response body object should not be disturbed or locked" error
+  // in Next.js 16 when the body stream has been consumed by Next.js internal mechanisms
+  const preparedReq = prepareRequestForTRPC(req);
+
+  return fetchRequestHandler({
     /**
      * @link https://trpc.io/docs/v11/context
      */
@@ -19,7 +24,7 @@ const handler = (req: NextRequest) =>
       console.error(error);
     },
 
-    req,
+    req: preparedReq,
     responseMeta({ ctx }) {
       const headers = ctx?.resHeaders;
 
@@ -27,5 +32,6 @@ const handler = (req: NextRequest) =>
     },
     router: mobileRouter,
   });
+};
 
 export { handler as GET, handler as POST };

package/src/app/(backend)/trpc/tools/[trpc]/route.ts

@@ -3,10 +3,15 @@ import type { NextRequest } from 'next/server';
 
 import { pino } from '@/libs/logger';
 import { createLambdaContext } from '@/libs/trpc/lambda/context';
+import { prepareRequestForTRPC } from '@/libs/trpc/utils/request-adapter';
 import { toolsRouter } from '@/server/routers/tools';
 
-const handler = (req: NextRequest) =>
-  fetchRequestHandler({
+const handler = (req: NextRequest) => {
+  // Clone the request to avoid "Response body object should not be disturbed or locked" error
+  // in Next.js 16 when the body stream has been consumed by Next.js internal mechanisms
+  const preparedReq = prepareRequestForTRPC(req);
+
+  return fetchRequestHandler({
     /**
      * @link https://trpc.io/docs/v11/context
      */
@@ -19,8 +24,9 @@ const handler = (req: NextRequest) =>
       console.error(error);
     },
 
-    req,
+    req: preparedReq,
     router: toolsRouter,
   });
+};
 
 export { handler as GET, handler as POST };

package/src/libs/trpc/utils/request-adapter.ts

@@ -0,0 +1,20 @@
+import { NextRequest } from 'next/server';
+
+/**
+ * Prepare Request object for tRPC fetchRequestHandler
+ *
+ * This function solves the "Response body object should not be disturbed or locked" error
+ * that occurs in Next.js 16 when the request body stream has been consumed or locked
+ * by Next.js internal mechanisms.
+ *
+ * By cloning the Request object, we create an independent body stream that tRPC can safely read.
+ *
+ * @see https://github.com/vercel/next.js/issues/83453
+ * @param req - The original NextRequest object
+ * @returns A cloned Request object with an independent body stream
+ */
+export function prepareRequestForTRPC(req: NextRequest): Request {
+  // Clone the Request to create an independent body stream
+  // This ensures tRPC can read the body even if the original request's body was disturbed
+  return req.clone();
+}