Decouple admin from public max-w-7xl via (site) route group.

Public chrome and width live only under (site). /admin and /client inherit the root layout alone, so housekeeping width is no longer tied to the public template.

Co-authored-by: Cursor <[email protected]>

src/app/(site)/settings/sessions/page.tsx

@@ -0,0 +1,131 @@
+import { redirect } from "next/navigation";
+import { ContentCard, EmptyState } from "@/components/public/ui";
+import { auth } from "@/lib/auth";
+import { prisma } from "@/lib/prisma";
+
+export const dynamic = "force-dynamic";
+export const metadata = { title: "Login activity" };
+
+function fromDate(d: Date | null | undefined): string {
+	return d ? d.toISOString().slice(0, 16).replace("T", " ") : "—";
+}
+
+/** Tiny user-agent → "Browser on OS" summary (no dependency). */
+function device(ua: string | null): string {
+	if (!ua) return "Unknown device";
+	const browser = /Edg/.test(ua)
+		? "Edge"
+		: /OPR|Opera/.test(ua)
+			? "Opera"
+			: /Chrome/.test(ua)
+				? "Chrome"
+				: /Firefox/.test(ua)
+					? "Firefox"
+					: /Safari/.test(ua)
+						? "Safari"
+						: "Browser";
+	const os = /Windows/.test(ua)
+		? "Windows"
+		: /Android/.test(ua)
+			? "Android"
+			: /iPhone|iPad|iOS/.test(ua)
+				? "iOS"
+				: /Mac OS X|Macintosh/.test(ua)
+					? "macOS"
+					: /Linux/.test(ua)
+						? "Linux"
+						: "";
+	return os ? `${browser} on ${os}` : browser;
+}
+
+export default async function SessionsPage() {
+	const session = await auth();
+	if (!session?.user?.id) redirect("/login");
+	const userId = Number(session.user.id);
+
+	const logins = await prisma.websiteLoginLogs
+		.findMany({
+			where: { userId },
+			orderBy: { id: "desc" },
+			take: 30,
+			select: { id: true, ip: true, userAgent: true, createdAt: true },
+		})
+		.catch(() => []);
+
+	// Failed attempts on this username (failed_logins is keyless → raw query).
+	type Failed = { ip_address: string; attempted_at: Date | string };
+	const failed = await prisma.$queryRaw<Failed[]>`
+    SELECT ip_address, attempted_at FROM failed_logins
+    WHERE username = ${session.user.name} ORDER BY id DESC LIMIT 15
+  `.catch(() => [] as Failed[]);
+
+	return (
+		<main style={{ display: "grid", gap: "1.5rem" }}>
+			<ContentCard
+				icon="🔐"
+				title="Login activity"
+				subtitle="Recent sign-ins and failed attempts on your account"
+			/>
+
+			<ContentCard
+				icon="✅"
+				title="Recent sign-ins"
+				padded={logins.length === 0}
+			>
+				{logins.length === 0 ? (
+					<EmptyState icon="🔐">No sign-ins recorded yet.</EmptyState>
+				) : (
+					<table>
+						<thead>
+							<tr>
+								<th>When</th>
+								<th>IP</th>
+								<th>Device</th>
+							</tr>
+						</thead>
+						<tbody>
+							{logins.map((l) => (
+								<tr key={String(l.id)}>
+									<td className="muted" style={{ whiteSpace: "nowrap" }}>
+										{fromDate(l.createdAt)}
+									</td>
+									<td className="muted">{l.ip}</td>
+									<td>{device(l.userAgent)}</td>
+								</tr>
+							))}
+						</tbody>
+					</table>
+				)}
+			</ContentCard>
+
+			{failed.length > 0 ? (
+				<ContentCard
+					icon="⚠️"
+					title="Failed attempts"
+					subtitle="Wrong password on your username"
+				>
+					<table>
+						<thead>
+							<tr>
+								<th>When</th>
+								<th>IP</th>
+							</tr>
+						</thead>
+						<tbody>
+							{failed.map((f, i) => (
+								<tr key={`${f.ip_address}-${i}`}>
+									<td className="muted" style={{ whiteSpace: "nowrap" }}>
+										{typeof f.attempted_at === "string"
+											? f.attempted_at.slice(0, 16).replace("T", " ")
+											: fromDate(f.attempted_at)}
+									</td>
+									<td className="muted">{f.ip_address}</td>
+								</tr>
+							))}
+						</tbody>
+					</table>
+				</ContentCard>
+			) : null}
+		</main>
+	);
+}