Stamp a ledger operation with the caller the runner proved for the call in flight it names, refusing another module's call or one not in flight; serve the ledger calls on the pipe (issue 1966 T5)

node-tools/internal/runtime/caller_test.go

@@ -13,6 +13,7 @@ import (
 
 type saidCaller struct {
 	Caller    string         `json:"caller"`
+	Call      string         `json:"call"`
 	Arguments map[string]any `json:"arguments"`
 }
 
@@ -36,6 +37,7 @@ func TestACallOnTheCallerNamedSubjectReachesTheModuleWithItsCaller(t *testing.T)
 	asker.Logf = func(string, ...any) {}
 	defer asker.Close()
 
+	calls := map[string]bool{}
 	for _, key := range []string{"ledger.who", "ledger.who@anchor", "seat:node-desk.who@anchor"} {
 		var got saidCaller
 		mt.Until(t, func() error {
@@ -49,6 +51,11 @@ func TestACallOnTheCallerNamedSubjectReachesTheModuleWithItsCaller(t *testing.T)
 		if got.Caller != "shanks.node-tools" {
 			t.Errorf("%s reached the module with caller %q, want the asker's bus user", key, got.Caller)
 		}
+		// And the id of the call in flight, one per call, which a ledger's apply names (novox/hq ADR 0597 §7).
+		if got.Call == "" || calls[got.Call] {
+			t.Errorf("%s reached the module with call id %q, want one of its own", key, got.Call)
+		}
+		calls[got.Call] = true
 		if got.Arguments["caller"] != "novox.node-tools" {
 			t.Errorf("%s: the arguments did not reach the module as sent: %v", key, got.Arguments)
 		}