load dialog: reachable address field, project mode, and a way back from a bad answer

Three bugs, reported together, with one shared root: you couldn't get to the
address field, so the address went into the processor filter, so IDA got a
nonsense processor name and refused to open — and the app dead-ended with a
misleading error.

**Tab never reached any modal.** Binding("tab,shift+tab", "toggle_view",
priority=True) is an APP binding, and priority bindings run before the focus
chain. Nothing in any dialog in this app could ever be tabbed to; the load
dialog is just where it finally mattered. action_toggle_view now hands the key
back when a modal is up, which fixes it everywhere.

**...and DOM order was the wrong tab order anyway.** focus_next() stopped at the
processor list, which is arrow-driven and has nothing to type. LoadOptionsScreen
overrides it to cycle the two fields you actually type into.

**...and the dialog outgrew the terminal.** With the palette's default
max-height the 21-row list pushed the address field and help line off the bottom
of the screen. Nothing errors — the field simply isn't there, which reads as
"Tab does nothing". Capped per-dialog.

**Project mode never asked.** _should_ask_load_options bailed on
`self._project is not None` with the comment "project mode carries per-binary
options already" — true only if someone had already filled them in. A raw blob
added to a project got the silent x86-at-0 treatment the dialog exists to
prevent. Now asked at boot AND on switching to an undescribed binary, and the
answer is written back to the project entry (Project.set_load), so it is asked
once per binary, not once per run.

**A rejected answer dead-ended.** Getting a processor wrong is an ordinary
mistake; it left an empty app with "connect failed: worker exited (code 1)" and
a message blaming a locked .i64. The worker now names the real suspect when load
switches were in play, and the app re-opens the dialog instead of giving up.

Verified with real keys in a tmux pane, which is the only way any of this shows
up: Tab -> address field -> 0x8000000 -> Enter -> 35 functions at 0x80039AC; a
bogus processor -> "those load options were rejected — try again" with the
dialog back; project mode -> asks, loads at the right base, and the answer is in
the project file.

tests: +3 scenarios (Tab moves focus under a modal, lands on the address field,
cycles back). 202/0 scenarios, 39/0 project, 32/0 formats, 30/0 project UI.
docs/TEXTUAL_NOTES.md gets the priority-binding and clipped-modal traps.

1 files changed, 25 insertions, 0 deletions

diff --git a/tests/test_scenarios.py b/tests/test_scenarios.py
index ee2f77b..6ccbf0d 100644
--- a/tests/test_scenarios.py
+++ b/tests/test_scenarios.py
@@ -369,6 +369,31 @@ async def s_load_options(c: Ctx):
     c.check("dialog output converts a base to paragraphs",
             load_args("arm", 0x8000000) == "-parm -b800000")
 
+    # Tab is a PRIORITY app binding (disasm<->pseudocode), so it fired even with
+    # a modal up and nothing in a dialog could be tabbed to. That is why the load
+    # dialog's address field was unreachable — and it was broken in every other
+    # modal too.
+    from idatui.app import LoadOptionsScreen
+    app.push_screen(LoadOptionsScreen("/tmp/probe.bin", 1234))
+    await c.wait(lambda: isinstance(app.screen, LoadOptionsScreen), 10)
+    sc = app.screen
+    first = app.focused
+    await c.press("tab")
+    await c.pause(0.2)
+    c.check("Tab moves focus inside a modal instead of toggling the view",
+            app.focused is not first and isinstance(app.screen, LoadOptionsScreen),
+            f"focus={getattr(app.focused, 'id', None)}")
+    c.check("Tab in the load dialog lands on the address field",
+            getattr(app.focused, "id", None) == "load-base",
+            f"focus={getattr(app.focused, 'id', None)}")
+    await c.press("tab")
+    await c.pause(0.2)
+    c.check("Tab again returns to the processor filter",
+            getattr(app.focused, "id", None) == "pal-input",
+            f"focus={getattr(app.focused, 'id', None)}")
+    await c.press("escape")
+    await c.wait(lambda: not isinstance(app.screen, LoadOptionsScreen), 10)
+
 
 @scenario("command_palette")
 async def s_command_palette(c: Ctx):