v2.45.1 — '--' guard for the positional prompt
CLI argv fix: variadic --allowedTools/--disallowedTools no longer swallow the non-streaming positional prompt.
- Prompt now travels after a POSIX '--' end-of-options separator (reproduced against claude CLI 2.1.185: prompt words were parsed as tool rules and the call exited 1).
- extra_args are emitted before the separator so escape-hatch flags always parse as options (ordering change vs 2.45.0 where they trailed the prompt).
- Trigger condition: non-streaming call with a tool flag as the last option — e.g. hosts using a 'disallow local CLI tools' safety default. Streaming was never affected (stdin prompt).
Verified: bare CLI repro + create_message E2E with disallow_tools; full suite 4489 passed.