Merge pull request #115 from EmergentKnowledgeGroup/codex/glass-office-p5-file-locks

feat(glass): File locks — seventh Basement room (P5)

Author: EmergentKnowledgeGroup

apps/mission-control/e2e/mockGateway.mjs

@@ -5746,9 +5746,19 @@ async function routeRequest(req, res) {
   if (req.method === "GET" && requestUrl.pathname === "/api/v1/agent-mail/leases") {
     const includeReleased =
       requestUrl.searchParams.get("include_released") === "true";
+    // Production trims the holder filter and ignores a blank value; the mock
+    // must enforce the same identity boundary rather than returning one
+    // convenient dataset for every acting principal.
+    const holderParam = requestUrl.searchParams.get("holder_principal");
+    const holder =
+      typeof holderParam === "string" && holderParam.trim()
+        ? holderParam.trim()
+        : null;
     sendJson(res, 200, {
-      items: agentMailLeases.filter((lease) =>
-        includeReleased ? true : lease.released_at === null,
+      items: agentMailLeases.filter(
+        (lease) =>
+          (includeReleased ? true : lease.released_at === null) &&
+          (holder === null || lease.holder_principal === holder),
       ),
     });
     return;
@@ -5771,7 +5781,7 @@ async function routeRequest(req, res) {
       lease_id: `mail-lease-${nextAgentMailCounter++}`,
       holder_principal:
         typeof payload.holder_principal === "string" && payload.holder_principal.trim()
-          ? payload.holder_principal
+          ? payload.holder_principal.trim()
           : "agent-root",
       glob_pattern: globPattern,
       exclusive: Boolean(payload.exclusive),