ci: sync hardcoded Light CPI signer with anchor keys sync'd program ID (anchor lane)

Author: ananas-block

.github/workflows/typescript-tests.yml

@@ -59,7 +59,18 @@ jobs:
 
       - name: Build and sync program ID
         working-directory: ${{ matrix.example }}
-        run: anchor build
+        run: |
+          # Anchor 1.0 verifies declare_id! matches the program keypair. Sync it,
+          # then keep the hardcoded Light CPI signer (derived from the program ID
+          # at compile time) in sync with the synced ID so the CPI signer check
+          # in the light-system-program passes at runtime.
+          anchor keys sync
+          PROGRAM_ID=$(grep -A 10 '\[programs.localnet\]' Anchor.toml | grep '=' | head -1 | sed 's/.*"\(.*\)".*/\1/')
+          echo "Synced program ID: $PROGRAM_ID"
+          grep -rl 'derive_light_cpi_signer!' programs 2>/dev/null | while IFS= read -r f; do
+            sed -i -E "s/derive_light_cpi_signer!\(\"[^\"]*\"\)/derive_light_cpi_signer!(\"$PROGRAM_ID\")/g" "$f"
+          done
+          anchor build
 
       - name: Test sbf
         working-directory: ${{ matrix.example }}