pub fn internal_proxy_entry() -> Option<ExitCode>
Handle the private companion invocation before the ordinary CLI. The only argument is a local journal path, never a request body or credential.