- Stop scanning extension flags after end-of-options marker `--`
- Allow string extension flag to consume `--` as its value
- Extract extension-flag parsing into a testable exported helper
- Introduce minimal extension flag runner/session interfaces to reduce coupling
- Add regression tests for `--` boundary behavior