fix auth login state race

src/components/auth/AuthGate.test.tsx

@@ -330,6 +330,42 @@ test('auth gate opens a login modal for protected actions and resumes after logi
   expect(screen.queryByRole('dialog', { name: '账号入口' })).toBeNull();
 });
 
+test('phone login result is not overwritten by an older guest hydrate', async () => {
+  const user = userEvent.setup();
+  const onAuthenticated = vi.fn();
+  authMocks.getAuthLoginOptions.mockResolvedValue({
+    availableLoginMethods: ['phone'],
+  });
+  authMocks.getCurrentAuthUser
+    .mockResolvedValueOnce({
+      user: null,
+      availableLoginMethods: ['phone'],
+    })
+    .mockResolvedValue({
+      user: mockUser,
+      availableLoginMethods: ['phone'],
+    });
+
+  render(
+    <AuthGate>
+      <ProtectedActionButton onAuthenticated={onAuthenticated} />
+      <LogoutStateProbe />
+    </AuthGate>,
+  );
+
+  await user.click(await screen.findByRole('button', { name: '进入作品' }));
+  const dialog = screen.getByRole('dialog', { name: '账号入口' });
+  await user.type(within(dialog).getByLabelText('手机号'), '13800000000');
+  await user.type(within(dialog).getByLabelText('验证码'), '123456');
+  await user.click(within(dialog).getByRole('button', { name: '登录' }));
+
+  expect(await screen.findByText('当前用户：测试玩家')).toBeTruthy();
+  expect(onAuthenticated).toHaveBeenCalledTimes(1);
+
+  expect(screen.getByText('当前用户：测试玩家')).toBeTruthy();
+  expect(screen.queryByRole('dialog', { name: '账号入口' })).toBeNull();
+});
+
 test('auth gate hides register entry and opens invite modal for new sms account', async () => {
   const user = userEvent.setup();
   window.history.replaceState(null, '', '/?inviteCode=spring-2026');