fix: stabilize mini app login and safe area

tests/GmRelay.Bot.Tests/Web/MiniAppDashboardTests.cs

@@ -12,6 +12,10 @@ public sealed class MiniAppDashboardTests
         Assert.Contains("/auth/telegram-webapp", miniAppPage, StringComparison.Ordinal);
         Assert.Contains("watchTelegramMiniAppLogin", miniAppPage, StringComparison.Ordinal);
         Assert.Contains("/auth/status", miniAppPage, StringComparison.Ordinal);
+        Assert.Contains("miniAppAuthStatus", miniAppPage, StringComparison.Ordinal);
+        Assert.Contains("telegram-webapp-missing", miniAppPage, StringComparison.Ordinal);
+        Assert.Contains("telegram-init-data-empty", miniAppPage, StringComparison.Ordinal);
+        Assert.Contains("telegram-auth-failed", miniAppPage, StringComparison.Ordinal);
     }
 
     [Fact]
@@ -24,10 +28,18 @@ public sealed class MiniAppDashboardTests
         Assert.Contains("Telegram.WebApp.initData", appShell, StringComparison.Ordinal);
         Assert.Contains("window.waitForTelegramMiniAppInitData", appShell, StringComparison.Ordinal);
         Assert.Contains("window.watchTelegramMiniAppLogin", appShell, StringComparison.Ordinal);
+        Assert.Contains("window.handleTelegramLogin", appShell, StringComparison.Ordinal);
+        Assert.Contains("/auth/telegram-login", appShell, StringComparison.Ordinal);
+        Assert.Contains("data-onauth", appShell, StringComparison.Ordinal);
+        Assert.DoesNotContain("data-auth-url", appShell, StringComparison.Ordinal);
         Assert.Contains("setTimeout(resolve, 100)", appShell, StringComparison.Ordinal);
         Assert.Contains("reloadOnReturn", appShell, StringComparison.Ordinal);
         Assert.Contains("gmRelayMiniAppLoginLeftPage", appShell, StringComparison.Ordinal);
         Assert.Contains("window.location.reload()", appShell, StringComparison.Ordinal);
+        Assert.Contains("syncTelegramMiniAppViewport", appShell, StringComparison.Ordinal);
+        Assert.Contains("safeAreaChanged", appShell, StringComparison.Ordinal);
+        Assert.Contains("contentSafeAreaChanged", appShell, StringComparison.Ordinal);
+        Assert.Contains("viewportChanged", appShell, StringComparison.Ordinal);
     }
 
     [Fact]
@@ -36,7 +48,9 @@ public sealed class MiniAppDashboardTests
         var program = await File.ReadAllTextAsync(FindRepositoryFile("src/GmRelay.Web/Program.cs"));
 
         Assert.Contains("MapPost(\"/auth/telegram-webapp\"", program, StringComparison.Ordinal);
+        Assert.Contains("MapPost(\"/auth/telegram-login\"", program, StringComparison.Ordinal);
         Assert.Contains("VerifyWebAppInitData", program, StringComparison.Ordinal);
+        Assert.Contains("VerifyLoginPayload", program, StringComparison.Ordinal);
         Assert.Contains("MapGet(\"/auth/status\"", program, StringComparison.Ordinal);
         Assert.Contains("authenticated", program, StringComparison.Ordinal);
     }
@@ -49,15 +63,24 @@ public sealed class MiniAppDashboardTests
         Assert.Contains("mini-app-page", css, StringComparison.Ordinal);
         Assert.Contains("mini-app-auth-card", css, StringComparison.Ordinal);
         Assert.Contains("@media (max-width: 768px)", css, StringComparison.Ordinal);
+        Assert.Contains("--tg-safe-area-inset-top", css, StringComparison.Ordinal);
+        Assert.Contains("--tg-content-safe-area-inset-top", css, StringComparison.Ordinal);
+        Assert.Contains(".telegram-mini-app .nav-header", css, StringComparison.Ordinal);
+        Assert.Contains(".telegram-mini-app .nav-toggle", css, StringComparison.Ordinal);
+        Assert.Contains(".telegram-mini-app .mini-app-page", css, StringComparison.Ordinal);
     }
 
     [Fact]
-    public async Task LoginPage_ShouldRefreshMiniAppAfterExternalTelegramLogin()
+    public async Task LoginPage_ShouldAuthenticateMiniAppFallbackInsideCurrentWebView()
     {
         var loginPage = await File.ReadAllTextAsync(FindRepositoryFile("src/GmRelay.Web/Components/Pages/Login.razor"));
 
         Assert.Contains(
-            "JS.InvokeVoidAsync(\"watchTelegramMiniAppLogin\", \"/auth/status\", \"/\", true)",
+            "JS.InvokeVoidAsync(\"loadTelegramWidget\", BotUsername, \"/auth/telegram-login\")",
+            loginPage,
+            StringComparison.Ordinal);
+        Assert.Contains(
+            "JS.InvokeVoidAsync(\"watchTelegramMiniAppLogin\", \"/auth/status\", \"/\", false)",
             loginPage,
             StringComparison.Ordinal);
     }