…t terminal blinking on SSH

Authored by ygd58. Fixes NousResearch#282.

…t terminal blinking on SSH

Authored by ygd58. Fixes NousResearch#282.

…ery (NousResearch#41098)

The salvaged approval fix (sanidhyasin) makes the dangerous-command
approval panel paint past the _invalidate() throttle. But the two sibling
user-blocking modals regressed identically and from the same root cause:

- _clarify_callback (clarify tool prompt, 120s timeout)
- _sudo_password_callback (sudo password prompt, 45s timeout)

Both set their modal state on the agent/background thread and then relied
on a single throttled self._invalidate() to paint. The approval, clarify,
and sudo prompts all originally used direct self._app.invalidate() and
worked. PR NousResearch#284 (b603b6e) blanket-replaced those with the throttled
_invalidate(), making the modal paints droppable — but the bug stayed
masked because the spinner loop's idle branch called _invalidate(
min_interval=1.0) every second, repainting a dropped modal within ~1s.
Commit 5e92b67 ('stop idle CLI redraws') removed that idle repaint to
fix tmux/Ghostty viewport-restore flicker, which unmasked the bug: a
dropped modal paint now never recovers and the prompt times out unseen.

Re-adding the idle repaint would reintroduce the flicker 5e92b67 fixed,
so the correct fix is to make the modal-entry paints unconditional via the
established min_interval=0.0 bypass idiom. Applied to clarify + sudo to
match the approval fix: initial paint, response-received, in-wait
countdown (cadence 5s->1s for clarify), and timeout teardown.

Resize-recovery edge case: even min_interval=0.0 did not bypass the
_resize_recovery_pending early-return added by 76074d9 — so during a
(possibly held) drag-resize the modal could stay invisible until it timed
out. Add a keyword-only force=True to _invalidate that bypasses BOTH the
throttle AND the resize guard, and use it for the three modal *entry*
paints only. This is safe: a modal overlay is live prompt_toolkit chrome
(not scrollback output), so painting it slightly early during a resize is
harmless, and _recover_after_resize issues its own unconditional
app.invalidate() when the debounce settles. The resize guard still
suppresses ordinary repaints (status bar / footer chrome) as before.

Also removes a copy-paste-duplicated countdown-refresh block in
_clarify_callback (the same 5s gate appeared twice).

Adds regression tests: mirror dropped-paint tests for clarify and sudo;
an approval-during-resize test; and a direct _invalidate force-vs-gates
test. Each fails if its corresponding bypass is reverted. 16 tests pass;
full tests/cli suite green (899).

…t terminal blinking on SSH

Authored by ygd58. Fixes NousResearch#282.