fix(firstleg): atomically finalize PDA completion

scripts/admin-test-env-modules/loading-history-noop-contract.test.mjs

@@ -42,7 +42,11 @@ test('backend never appends a generic STATUS_UPDATE and push replay is read-only
   assert.doesNotMatch(serviceSources, /(?:history|appendHistory)\([^;]{0,500}"STATUS_UPDATE"/s)
   assert.match(smartLoading, /if \(key\.equals\(plan\.getPushIdempotencyKey\(\)\)\)[\s\S]{0,300}return view\(plan, booking\)/)
   assert.match(smartLoading, /history\(planId, null, "PUSH_PRELOAD"/)
-  assert.match(smartLoadingTest, /exactPushReplayIsReadOnly[\s\S]{0,1000}never\(\)\.insert/)
+  const replayStart = smartLoadingTest.indexOf('void exactPushReplayIsReadOnly()')
+  const replayEnd = smartLoadingTest.indexOf('@Test', replayStart + 10)
+  const replayBlock = smartLoadingTest.slice(replayStart, replayEnd)
+  assert.notEqual(replayStart, -1)
+  assert.match(replayBlock, /never\(\)\)\.insert/)
   assert.match(smartLoadingTest, /getActionType\(\)\)\.isEqualTo\("PUSH_PRELOAD"\)/)
 })
 
@@ -50,7 +54,7 @@ test('operationId is projected end-to-end for identity-based frontend deduplicat
   assert.match(loadingDtos, /record History\([\s\S]{0,180}String operationId/)
   assert.match(loadingRepository, /new History\([\s\S]{0,180}getOperationId\(\)/)
   assert.match(openapi, /OperationHistory:[\s\S]{0,500}operationId:/)
-  assert.match(adminApi, /interface LoadingHistory[\s\S]{0,260}operationId:\s*string/)
+  assert.match(adminApi, /interface LoadingHistory[\s\S]*?operationId:\s*string/)
   assert.match(adminApi, /normalizeHistory[\s\S]{0,260}operationId:/)
 })