create-nextblock 0.13.7 → 0.13.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-nextblock",
-  "version": "0.13.7",
+  "version": "0.13.8",
   "description": "",
   "main": "index.js",
   "bin": {

package/templates/nextblock-template/app/(auth-pages)/two-factor/actions.ts

@@ -5,6 +5,7 @@ import { redirect } from 'next/navigation';
 import { createClient } from '@nextblock-cms/db/server';
 import {
   createEmailChallenge,
+  getEmailResendCooldownSeconds,
   issueTwoFactorVerifiedCookie,
   verifyEmailChallenge,
 } from '../../../lib/auth/twoFactor';
@@ -15,6 +16,7 @@ import {
   getCookieValue,
 } from '../../../lib/auth/cookies';
 import { sendTwoFactorCodeEmail } from '../../actions/twoFactorEmail';
+import { isEmailConfigured } from '../../../lib/config/email-settings';
 
 function safeRedirect(path?: string): string {
   return path && path.startsWith('/') && !path.startsWith('//') ? path : '/cms/dashboard';
@@ -85,7 +87,25 @@ export async function resendEmailCode() {
   } = await supabase.auth.getUser();
   if (!user?.email) return { error: 'No email address is associated with your account.' };
 
+  // No transport means the code can never arrive; say so rather than claiming it was sent.
+  if (!(await isEmailConfigured())) {
+    return {
+      error:
+        'This site has no email server configured, so a code cannot be sent. Contact your administrator.',
+    };
+  }
+
+  const wait = await getEmailResendCooldownSeconds(user.id);
+  if (wait > 0) {
+    return { error: `A code was just sent. Please wait ${wait}s before requesting another.` };
+  }
+
   const code = await createEmailChallenge(user.id);
-  await sendTwoFactorCodeEmail(user.email, code);
+  try {
+    await sendTwoFactorCodeEmail(user.email, code);
+  } catch (sendError) {
+    console.error('Failed to send 2FA email code:', sendError);
+    return { error: 'The mail server rejected the message. Please try again in a moment.' };
+  }
   return { success: true, message: `A new code is on its way to ${user.email}.` };
 }

package/templates/nextblock-template/app/(auth-pages)/two-factor/components/TwoFactorForm.tsx

@@ -1,10 +1,13 @@
 'use client';
 
-import { useState, useTransition } from 'react';
+import { useEffect, useState, useTransition } from 'react';
 import { unstable_rethrow } from 'next/navigation';
 import { Alert, AlertDescription, Button, Input, Label, Spinner } from '@nextblock-cms/ui';
 import { resendEmailCode, verifyEmailCode, verifyTotpChallenge } from '../actions';
 
+/** Matches the security panel: relays queue, so parking the button beats spamming it. */
+const RESEND_COOLDOWN_SECONDS = 30;
+
 interface TwoFactorFormProps {
   type: 'totp' | 'email';
   email: string;
@@ -24,6 +27,13 @@ export default function TwoFactorForm({
   const [info, setInfo] = useState<string | null>(
     type === 'email' && pendingEmailCode ? `Enter the code we sent to ${email}.` : null,
   );
+  const [cooldown, setCooldown] = useState(0);
+
+  useEffect(() => {
+    if (cooldown <= 0) return;
+    const timer = setTimeout(() => setCooldown((seconds) => seconds - 1), 1000);
+    return () => clearTimeout(timer);
+  }, [cooldown]);
 
   const submit = (codeToSubmit: string = code) => {
     if (codeToSubmit.length !== 6) return;
@@ -48,13 +58,17 @@ export default function TwoFactorForm({
   };
 
   const resend = () => {
+    if (cooldown > 0) return;
     setError(null);
     setInfo(null);
     startTransition(async () => {
       try {
         const result = await resendEmailCode();
         if (result?.error) setError(result.error);
-        else if (result?.message) setInfo(result.message);
+        else if (result?.message) {
+          setInfo(result.message);
+          setCooldown(RESEND_COOLDOWN_SECONDS);
+        }
       } catch (err) {
         setError(err instanceof Error ? err.message : 'Could not send a code.');
       }
@@ -116,14 +130,24 @@ export default function TwoFactorForm({
       </form>
 
       {type === 'email' && (
-        <button
-          type="button"
-          onClick={resend}
-          disabled={isPending}
-          className="mt-4 w-full text-center text-xs text-muted-foreground underline underline-offset-2 hover:text-foreground disabled:opacity-50"
-        >
-          {pendingEmailCode ? 'Resend code' : 'Send me a code'}
-        </button>
+        <>
+          <button
+            type="button"
+            onClick={resend}
+            disabled={isPending || cooldown > 0}
+            className="mt-4 w-full text-center text-xs text-muted-foreground underline underline-offset-2 hover:text-foreground disabled:no-underline disabled:opacity-50"
+          >
+            {cooldown > 0
+              ? `Resend available in ${cooldown}s`
+              : pendingEmailCode
+                ? 'Resend code'
+                : 'Send me a code'}
+          </button>
+          <p className="mt-2 text-center text-xs text-muted-foreground">
+            Codes can take a minute to arrive. If you request another, the earlier one still
+            works — enter whichever reaches you first.
+          </p>
+        </>
       )}
     </div>
   );

package/templates/nextblock-template/app/actions/email.ts

@@ -1,8 +1,12 @@
-"use server";
+import 'server-only';
+// The single outbound-mail choke point. Deliberately NOT a "use server" module: every
+// caller is server-side (2FA codes, form/interaction notifications, feedback, the SMTP
+// test), and marking it as an action would register `sendEmail` as a client-callable
+// endpoint — an open relay taking an arbitrary recipient, subject and HTML body.
 
-import { resolveEmailServerConfig } from '../../lib/config/email-settings';
+import nodemailer, { type Transporter } from 'nodemailer';
+import { resolveEmailServerConfig, type ResolvedEmailConfig } from '../../lib/config/email-settings';
 import { applyEmailBranding, resolveEmailBranding } from '../../lib/email/branding';
-import nodemailer from 'nodemailer';
 
 interface EmailParams {
   to: string;
@@ -11,9 +15,77 @@ interface EmailParams {
   html: string;
 }
 
+// Without explicit bounds nodemailer inherits the OS socket timeouts, so an unreachable
+// or silently-dropping relay hangs the request (and the user's spinner) for minutes.
+const CONNECTION_TIMEOUT_MS = 10_000;
+const GREETING_TIMEOUT_MS = 10_000;
+const SOCKET_TIMEOUT_MS = 20_000;
+
+// Opening a fresh SMTP connection per message costs a TCP handshake + TLS negotiation +
+// AUTH round trip before the first byte of the message is sent — typically the bulk of the
+// wait when a user clicks "send me a code". A pooled transport keeps the authenticated
+// connection warm so subsequent sends start at DATA. Set SMTP_POOL=false to opt out.
+const POOL_ENABLED = process.env['SMTP_POOL'] !== 'false';
+
+let cachedTransport: { key: string; transporter: Transporter } | null = null;
+
+/** Identity of a transport: anything that changes it must force a rebuild. */
+function transportKey(config: ResolvedEmailConfig): string {
+  return [config.host, config.port, config.secure, config.auth.user].join('|');
+}
+
+function getTransporter(config: ResolvedEmailConfig): Transporter {
+  const key = transportKey(config);
+  if (cachedTransport && cachedTransport.key === key) {
+    return cachedTransport.transporter;
+  }
+
+  // Settings changed — tear the old pool down rather than leaking its sockets.
+  if (cachedTransport) {
+    try {
+      cachedTransport.transporter.close();
+    } catch {
+      /* already closed */
+    }
+    cachedTransport = null;
+  }
+
+  const base = {
+    host: config.host,
+    port: config.port,
+    secure: config.secure,
+    auth: config.auth,
+    connectionTimeout: CONNECTION_TIMEOUT_MS,
+    greetingTimeout: GREETING_TIMEOUT_MS,
+    socketTimeout: SOCKET_TIMEOUT_MS,
+  };
+
+  // Branched rather than `pool: POOL_ENABLED` — nodemailer types `pool` as the literal
+  // `true` to select the pooled transport overload, so a boolean matches neither.
+  const transporter: Transporter = POOL_ENABLED
+    ? nodemailer.createTransport({ ...base, pool: true, maxConnections: 3, maxMessages: 100 })
+    : nodemailer.createTransport(base);
+
+  // A pool that errors out (relay restart, credentials rotated, idle socket reaped) must
+  // not be handed to the next caller — drop it so the following send reconnects cleanly.
+  transporter.on('error', () => {
+    if (cachedTransport?.transporter === transporter) {
+      cachedTransport = null;
+    }
+  });
+
+  cachedTransport = { key, transporter };
+  return transporter;
+}
+
 export async function sendEmail({ to, subject, text, html }: EmailParams) {
   // DB-first (CMS Settings → Configuration → Email), falling back to SMTP_* env vars.
-  const emailConfig = await resolveEmailServerConfig();
+  // Resolved in parallel with branding — neither depends on the other, and both are
+  // pure reads standing between the click and the first SMTP packet.
+  const [emailConfig, branding] = await Promise.all([
+    resolveEmailServerConfig(),
+    resolveEmailBranding(),
+  ]);
 
   if (!emailConfig) {
     throw new Error("Email server is not configured. Configure SMTP in CMS Settings → Configuration → Email.");
@@ -22,10 +94,9 @@ export async function sendEmail({ to, subject, text, html }: EmailParams) {
   // Single interception point: white-label every outgoing email with the tenant's own
   // logo + site name (or a text banner when no logo is set). Every app-dispatched email
   // funnels through here, so branding is applied once, centrally.
-  const branding = await resolveEmailBranding();
   const brandedHtml = applyEmailBranding(html, branding);
 
-  const transporter = nodemailer.createTransport(emailConfig);
+  const transporter = getTransporter(emailConfig);
 
   const options = {
     from: emailConfig.from,
@@ -36,4 +107,4 @@ export async function sendEmail({ to, subject, text, html }: EmailParams) {
   };
 
   return transporter.sendMail(options);
-}
+}

package/templates/nextblock-template/app/actions/feedback.ts

@@ -1,37 +1,79 @@
 "use server";
 
+import { createClient } from "@nextblock-cms/db/server";
 import { sendEmail } from "./email";
 
-
 interface FeedbackData {
   subject: string;
   message: string;
-  userEmail: string;
+  /** Accepted for call-site compatibility but ignored — identity comes from the session. */
+  userEmail?: string;
   userName?: string;
   url?: string;
 }
 
+const MAX_SUBJECT_LENGTH = 200;
+const MAX_MESSAGE_LENGTH = 5000;
+const MAX_URL_LENGTH = 500;
+
+/** Everything below is attacker-controlled text landing in an HTML email body. */
+function escapeHtml(value: string): string {
+  return value
+    .replace(/&/g, '&')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&#39;');
+}
+
 export async function submitFeedback(data: FeedbackData) {
   try {
-    // If we have an email config, we use it. If not, we might fail or log.
-    // sendEmail throws if not configured.
-    
-    const { subject, message, userEmail, userName, url } = data;
-    
+    // This is a client-callable action, so the CMS-only modal in front of it is not a
+    // gate: without this check any unauthenticated caller could relay arbitrary mail
+    // through the tenant's SMTP credentials.
+    const supabase = createClient();
+    const {
+      data: { user },
+    } = await supabase.auth.getUser();
+    if (!user) {
+      return { success: false, error: "You must be signed in to send feedback." };
+    }
+
+    const { data: profile } = await supabase
+      .from('profiles')
+      .select('role, full_name')
+      .eq('id', user.id)
+      .maybeSingle();
+    if (profile?.role !== 'ADMIN' && profile?.role !== 'WRITER') {
+      return { success: false, error: "You do not have permission to send feedback." };
+    }
+
+    const subject = (data.subject ?? '').slice(0, MAX_SUBJECT_LENGTH);
+    const message = (data.message ?? '').slice(0, MAX_MESSAGE_LENGTH);
+    const url = (data.url ?? '').slice(0, MAX_URL_LENGTH);
+    if (!message.trim()) {
+      return { success: false, error: "Feedback message is empty." };
+    }
+
+    // Identity is read from the session rather than the request body — the client cannot
+    // choose whose name a report is filed under.
+    const senderEmail = user.email ?? 'unknown';
+    const senderName = profile?.full_name || senderEmail;
+
     const htmlContent = `
       {{brand_header}}
       <h2>New Feedback Received</h2>
-      <p><strong>From:</strong> ${userName || 'Unknown'} (${userEmail})</p>
-      <p><strong>Subject:</strong> ${subject}</p>
-      <p><strong>URL:</strong> ${url || 'N/A'}</p>
+      <p><strong>From:</strong> ${escapeHtml(senderName)} (${escapeHtml(senderEmail)})</p>
+      <p><strong>Subject:</strong> ${escapeHtml(subject)}</p>
+      <p><strong>URL:</strong> ${escapeHtml(url) || 'N/A'}</p>
       <br/>
       <h3>Message:</h3>
-      <p style="white-space: pre-wrap;">${message}</p>
+      <p style="white-space: pre-wrap;">${escapeHtml(message)}</p>
     `;
 
     const textContent = `
       New Feedback Received
-      From: ${userName || 'Unknown'} (${userEmail})
+      From: ${senderName} (${senderEmail})
       Subject: ${subject}
       URL: ${url || 'N/A'}
 
@@ -40,8 +82,9 @@ export async function submitFeedback(data: FeedbackData) {
     `;
 
     await sendEmail({
-      to: "feedback@nextblock.ca", // Fixed typo from 'feeedback'
-      subject: `[CMS Feedback] ${subject}`,
+      to: "feedback@nextblock.ca",
+      // Newlines in a header would let a caller inject extra headers (Bcc, …).
+      subject: `[CMS Feedback] ${subject.replace(/[\r\n]+/g, ' ')}`,
       text: textContent,
       html: htmlContent,
     });

package/templates/nextblock-template/app/actions/interactions.test.ts

@@ -2,6 +2,9 @@ import { beforeEach, describe, expect, it, vi } from "vitest";
 
 const cacheMocks = vi.hoisted(() => ({
   revalidatePath: vi.fn(),
+  // Reached transitively: interactions -> email -> email/branding -> site-settings, which
+  // wraps its reader in unstable_cache at module scope. Pass the loader straight through.
+  unstable_cache: vi.fn((fn: unknown) => fn),
 }));
 
 const dbServerMocks = vi.hoisted(() => ({

package/templates/nextblock-template/app/actions.ts

@@ -3,6 +3,7 @@
 import { encodedRedirect } from "@nextblock-cms/utils/server";
 import { createClient, getServiceRoleSupabaseClient } from "@nextblock-cms/db/server";
 import { headers } from "next/headers";
+import { after } from "next/server";
 import { redirect } from "next/navigation";
 import { resolvePostAuthRedirect } from "../lib/auth-redirects";
 import { createEmailChallenge, evaluateTwoFactor } from "../lib/auth/twoFactor";
@@ -169,13 +170,25 @@ export const signInAction = async (formData: FormData) => {
       await setSecureCookie(REMEMBER_INTENT_COOKIE, "1", 15 * 60);
     }
 
-    // Email factor: send the first code now so the challenge page has one waiting.
+    // Email factor: mint the first code now so the challenge page has one waiting. The
+    // challenge row is created synchronously because the page reads it to decide between
+    // "Resend code" and "Send me a code"; only the SMTP conversation is deferred, so the
+    // redirect isn't held behind a relay handshake that can take seconds. Delivery failure
+    // was already swallowed here — the user resends from the challenge page — so moving it
+    // off the response path costs no error reporting.
     if (evaluation.status === "email_required" && data.user.email) {
+      const recipient = data.user.email;
       try {
         const code = await createEmailChallenge(data.user.id);
-        await sendTwoFactorCodeEmail(data.user.email, code);
-      } catch (sendError) {
-        console.error("Failed to send 2FA email code:", sendError);
+        after(async () => {
+          try {
+            await sendTwoFactorCodeEmail(recipient, code);
+          } catch (sendError) {
+            console.error("Failed to send 2FA email code:", sendError);
+          }
+        });
+      } catch (challengeError) {
+        console.error("Failed to create 2FA email challenge:", challengeError);
       }
     }
 

package/templates/nextblock-template/app/cms/CmsClientLayout.tsx

@@ -496,7 +496,7 @@ export default function CmsClientLayout({
               {pageTitle}
             </h1>
             <Button asChild variant="outline" size="sm" className="shrink-0">
-              <Link href="/">
+              <Link href="/" target="_blank">
                 <ExternalLink className="h-4 w-4" />
                 <span className="hidden sm:inline">View Site</span>
               </Link>

package/templates/nextblock-template/app/cms/settings/bot-protection/actions.ts

@@ -3,6 +3,7 @@
 
 import { createClient } from '@nextblock-cms/db/server';
 import { revalidatePath } from 'next/cache';
+import type { SettingsActionResult } from '../../../../lib/cms/action-result';
 
 export type BotProtectionSettings = {
   provider: 'none' | 'turnstile' | 'recaptcha';
@@ -37,13 +38,15 @@ export async function getBotProtectionSettings(): Promise<BotProtectionSettings>
   };
 }
 
-export async function updateBotProtectionSettings(formData: FormData) {
+export async function updateBotProtectionSettings(
+  formData: FormData,
+): Promise<SettingsActionResult> {
   const supabase = createClient();
 
   // Verify auth and role
   const { data: { user } } = await supabase.auth.getUser();
   if (!user) {
-    throw new Error('You must be logged in to update settings.');
+    return { ok: false, error: 'You must be logged in to update settings.' };
   }
 
   const { data: profile, error: profileError } = await supabase
@@ -53,7 +56,7 @@ export async function updateBotProtectionSettings(formData: FormData) {
     .single();
 
   if (profileError || !profile || profile.role !== 'ADMIN') {
-    throw new Error('You do not have permission to perform this action.');
+    return { ok: false, error: 'You do not have permission to perform this action.' };
   }
 
   const provider = formData.get('provider') as 'none' | 'turnstile' | 'recaptcha';
@@ -70,7 +73,7 @@ export async function updateBotProtectionSettings(formData: FormData) {
 
   if (publicError) {
     console.error('Error updating public bot protection settings:', publicError);
-    throw new Error('Failed to update bot protection settings.');
+    return { ok: false, error: 'Failed to update bot protection settings.' };
   }
 
   // Update secret settings (secretKey)
@@ -83,11 +86,11 @@ export async function updateBotProtectionSettings(formData: FormData) {
 
   if (secretError) {
     console.error('Error updating secret bot protection settings:', secretError);
-    throw new Error('Failed to update bot protection secrets.');
+    return { ok: false, error: 'Failed to update bot protection secrets.' };
   }
 
   // Revalidate root layout so scripts update instantly
   revalidatePath('/', 'layout');
 
-  return { success: true, message: 'Bot protection settings updated successfully.' };
+  return { ok: true, message: 'Bot protection settings updated successfully.' };
 }

package/templates/nextblock-template/app/cms/settings/bot-protection/components/BotProtectionForm.tsx

@@ -33,11 +33,7 @@ export default function BotProtectionForm({ initialSettings }: BotProtectionForm
     startTransition(async () => {
       try {
         const result = await updateBotProtectionSettings(formData);
-        if (result.success) {
-          setMessage({ success: result.message });
-        } else {
-          setMessage({ error: 'An unexpected error occurred.' });
-        }
+        setMessage(result.ok ? { success: result.message } : { error: result.error });
       } catch (error) {
         setMessage({ error: error instanceof Error ? error.message : 'An unknown error occurred.' });
       }

package/templates/nextblock-template/app/cms/settings/copyright/actions.ts

@@ -3,6 +3,7 @@
 
 import { createClient } from '@nextblock-cms/db/server';
 import { revalidatePath } from 'next/cache';
+import type { SettingsActionResult } from '../../../../lib/cms/action-result';
 
 export type CopyrightSettings = {
   [key: string]: string;
@@ -50,13 +51,15 @@ export async function getCopyrightSettings(): Promise<CopyrightSettings> {
   return data.value as CopyrightSettings;
 }
 
-export async function updateCopyrightSettings(formData: FormData) {
+export async function updateCopyrightSettings(
+  formData: FormData,
+): Promise<SettingsActionResult> {
   const supabase = createClient();
 
   // Check if user is an admin
   const { data: { user } } = await supabase.auth.getUser();
   if (!user) {
-    throw new Error('You must be logged in to update settings.');
+    return { ok: false, error: 'You must be logged in to update settings.' };
   }
   const { data: profile, error: profileError } = await supabase
     .from('profiles')
@@ -65,7 +68,7 @@ export async function updateCopyrightSettings(formData: FormData) {
     .single();
 
   if (profileError || !profile || !['ADMIN', 'WRITER'].includes(profile.role)) {
-    throw new Error('You do not have permission to perform this action.');
+    return { ok: false, error: 'You do not have permission to perform this action.' };
   }
 
   const newSettings: CopyrightSettings = {};
@@ -82,7 +85,7 @@ export async function updateCopyrightSettings(formData: FormData) {
 
   if (error) {
     console.error('Error updating copyright settings:', error);
-    throw new Error('Failed to update copyright settings.');
+    return { ok: false, error: 'Failed to update copyright settings.' };
   }
 
   // Persist the footer attribution toggle. The client always submits an explicit
@@ -94,11 +97,11 @@ export async function updateCopyrightSettings(formData: FormData) {
 
   if (attributionError) {
     console.error('Error updating footer attribution setting:', attributionError);
-    throw new Error('Failed to update footer attribution setting.');
+    return { ok: false, error: 'Failed to update footer attribution setting.' };
   }
 
   // Revalidate the root layout to reflect changes immediately across the site.
   revalidatePath('/', 'layout');
 
-  return { success: true, message: 'Copyright settings updated successfully.' };
+  return { ok: true, message: 'Copyright settings updated successfully.' };
 }

package/templates/nextblock-template/app/cms/settings/copyright/components/CopyrightForm.tsx

@@ -44,11 +44,7 @@ export default function CopyrightForm({ languages, initialSettings, initialAttri
     startTransition(async () => {
       try {
         const result = await updateCopyrightSettings(formData);
-        if (result.success) {
-          setMessage({ success: result.message });
-        } else {
-          setMessage({ error: 'An unexpected error occurred.' });
-        }
+        setMessage(result.ok ? { success: result.message } : { error: result.error });
       } catch (error) {
         setMessage({ error: error instanceof Error ? error.message : 'An unknown error occurred.' });
       }

package/templates/nextblock-template/app/cms/settings/cortex-ai/actions.ts

@@ -50,6 +50,16 @@ type CortexAiSettingsStatus = {
   unsplashAppName: string | null;
 };
 
+/**
+ * How every action in this file reports back: the page reads `?success=` / `?error=` and
+ * renders it. These are plain `<form action={fn}>` submissions, so a return value would be
+ * discarded and a thrown error would take out the page (with its message replaced by a
+ * generic string in production).
+ *
+ * Must be called OUTSIDE the try blocks below. `redirect()` signals itself by throwing
+ * NEXT_REDIRECT, so calling this inside a `try` would have the `catch` swallow the
+ * navigation and re-redirect with the framework's digest as the user-facing message.
+ */
 function redirectWithStatus(status: 'success' | 'error', message: string): never {
   redirect(`${CORTEX_AI_SETTINGS_PATH}?${status}=${encodeURIComponent(message)}`);
 }
@@ -173,7 +183,7 @@ export async function getCortexAiSettingsStatus(): Promise<CortexAiSettingsStatu
 
 export async function saveOpenRouterApiKeyAction(formData: FormData) {
   if (process.env.NEXT_PUBLIC_IS_SANDBOX === 'true') {
-    throw new Error('Sandbox environment cannot save keys to the database.');
+    redirectWithStatus('error', 'Sandbox environment cannot save keys to the database.');
   }
 
   try {
@@ -206,7 +216,7 @@ export async function saveOpenRouterApiKeyAction(formData: FormData) {
 
 export async function clearOpenRouterApiKeyAction() {
   if (process.env.NEXT_PUBLIC_IS_SANDBOX === 'true') {
-    throw new Error('Sandbox environment cannot clear keys from the database.');
+    redirectWithStatus('error', 'Sandbox environment cannot clear keys from the database.');
   }
 
   try {
@@ -235,7 +245,7 @@ export async function clearOpenRouterApiKeyAction() {
 
 export async function saveStockPhotoKeysAction(formData: FormData) {
   if (process.env.NEXT_PUBLIC_IS_SANDBOX === 'true') {
-    throw new Error('Sandbox environment cannot save keys to the database.');
+    redirectWithStatus('error', 'Sandbox environment cannot save keys to the database.');
   }
 
   try {
@@ -287,7 +297,7 @@ export async function saveStockPhotoKeysAction(formData: FormData) {
 
 export async function clearStockPhotoKeysAction() {
   if (process.env.NEXT_PUBLIC_IS_SANDBOX === 'true') {
-    throw new Error('Sandbox environment cannot clear keys from the database.');
+    redirectWithStatus('error', 'Sandbox environment cannot clear keys from the database.');
   }
 
   try {
@@ -313,7 +323,7 @@ export async function clearStockPhotoKeysAction() {
 
 export async function saveCortexAiAgentSettingsAction(formData: FormData) {
   if (process.env.NEXT_PUBLIC_IS_SANDBOX === 'true') {
-    throw new Error('Sandbox environment cannot save settings to the database.');
+    redirectWithStatus('error', 'Sandbox environment cannot save settings to the database.');
   }
 
   try {
@@ -357,7 +367,7 @@ export async function saveCortexAiAgentSettingsAction(formData: FormData) {
 
 export async function resetCortexAiAgentSettingsAction() {
   if (process.env.NEXT_PUBLIC_IS_SANDBOX === 'true') {
-    throw new Error('Sandbox environment cannot change settings in the database.');
+    redirectWithStatus('error', 'Sandbox environment cannot change settings in the database.');
   }
 
   try {
@@ -383,7 +393,7 @@ export async function resetCortexAiAgentSettingsAction() {
 
 export async function saveCortexAiModelSelectionAction(formData: FormData) {
   if (process.env.NEXT_PUBLIC_IS_SANDBOX === 'true') {
-    throw new Error('Sandbox environment cannot save model selection to the database.');
+    redirectWithStatus('error', 'Sandbox environment cannot save model selection to the database.');
   }
 
   try {
@@ -440,7 +450,7 @@ export async function saveCortexAiModelSelectionAction(formData: FormData) {
 
 export async function clearCortexAiModelSelectionAction() {
   if (process.env.NEXT_PUBLIC_IS_SANDBOX === 'true') {
-    throw new Error('Sandbox environment cannot clear model selection from the database.');
+    redirectWithStatus('error', 'Sandbox environment cannot clear model selection from the database.');
   }
 
   try {