fix: lock-screen, confirm-tier, and mail-folder audit bugs

Lock screen: slock is X11-only and never grabbed the Wayland session, so C-; ! l silently did nothing. On Wayland the locker now runs loginctl lock-session, which logind turns into a Lock signal that hypridle handles by running hyprlock, the same path idle and before-sleep locking already use. X11 keeps slock. system-commands.el now also requires host-environment, which it used at load time but never declared.

Confirmation tier: the global (fset 'yes-or-no-p 'y-or-n-p) plus use-short-answers t both flattened yes-or-no-p to a single keystroke, so the deliberate strong-confirm tier for irreversible actions was dead. A stray space could power off the machine or destroy files. I added cj/confirm-strong, which binds use-short-answers nil for one call to force a typed "yes", and routed the six irreversible sites through it (shutdown/reboot, permanent file destruction, file overwrites). I dropped the redundant fset and kept use-short-answers t so ordinary prompts stay single-key.

Mail folders: the cmail context set no trash folder, so D fell back to a nonexistent /trash, and no context set a refile folder, so r targeted a nonexistent /archive everywhere. Accepting mu4e's offer to create the maildir stranded mail where mbsync never syncs it. cmail now trashes to /cmail/Trash. Refile is computed per message rather than per context, because mu4e context :vars are sticky and a per-context refile would leak one account's archive folder into another. cmail archives to /cmail/Archive. The Gmail-backed accounts have no synced archive maildir, so they signal rather than move mail into an unsynced folder.

Lock and confirm-tier need a daemon restart to fully take effect. The mail changes apply on next mu4e open.

1 files changed, 3 insertions, 3 deletions

diff --git a/modules/custom-buffer-file.el b/modules/custom-buffer-file.el
index 6c3e6c6e..25b4a418 100644
--- a/modules/custom-buffer-file.el
+++ b/modules/custom-buffer-file.el
@@ -48,6 +48,7 @@
 ;; mm-decode for email viewing (mm-handle-type is a macro, needs early require)
 (require 'mm-decode)
 (require 'external-open) ;; for cj/xdg-open, cj/open-this-file-with
+(require 'system-lib)   ;; cj/confirm-strong (overwrite confirms), used below
 
 ;; cj/kill-buffer-and-window and cj/kill-other-window-buffer defined in undead-buffers.el
 (declare-function cj/kill-buffer-and-window "undead-buffers")
@@ -156,7 +157,7 @@ When called interactively, prompts for confirmation if target file exists."
     (condition-case _
         (cj/--move-buffer-and-file dir nil)
       (file-already-exists
-       (if (yes-or-no-p (format "File %s exists; overwrite? " target))
+       (if (cj/confirm-strong (format "File %s exists; overwrite? " target))
            (cj/--move-buffer-and-file dir t)
          (message "File not moved"))))))
 
@@ -196,7 +197,7 @@ When called interactively, prompts for confirmation if target file exists."
   (condition-case err
       (cj/--rename-buffer-and-file new-name nil)
     (file-already-exists
-     (if (yes-or-no-p (format "File %s exists; overwrite? " new-name))
+     (if (cj/confirm-strong (format "File %s exists; overwrite? " new-name))
          (cj/--rename-buffer-and-file new-name t)
        (message "File not renamed")))
     (error
@@ -338,7 +339,6 @@ Do not save the deleted text in the kill ring."
   (kill-new (buffer-name))
   (message "Copied: %s" (buffer-name)))
 
-(require 'system-lib)
 (declare-function ansi-color-apply-on-region "ansi-color")
 
 (defun cj/--diff-with-difftastic (file1 file2 buffer)