How add source IP (Caller ID) of PPP (l2tp and pptp) to trusted_ip address list in /ip firewall

RouterOS Scripting
1

What is the best way to add IP (caller id) of PPP
i ask deepseek

set on-up="\
  /ip/firewall/address-list/add \
    address=\"\$caller-id\" \
    list=CALLER_ID_VPN \
    comment=\"\$user (Connected at [/system clock get time])\"; \
  :log info \"VPN Connected: Caller-ID=\$caller-id, User=\$user\"\"
set on-down="\
  /ip/firewall/address-list/remove [find where address=\"\$caller-id\" list=CALLER_ID_VPN]; \
  :log info \"VPN Disconnected: Caller-ID=\$caller-id, User=\$user\"\
"

but still not working
please give advice

2 
#On-Up
:local callerId $"caller-id"
:local calledId $"called-id"

/ip firewall address-list add list=vpn_whitelist address=$callerId comment=$user
:log warning "$user (srcIp=$callerId, dstIp=$calledId) connected: caller-id added to address-list"

#On-Down
:local callerId $"caller-id"
:local user $"user"

/ip firewall address-list remove [find where list="vpn_whitelist" address=$callerId]

:log warning "$user (srcIp=$callerId) disconnected: caller-id removed from address-list"

i use this and now caller-id can add address-list