Env var	Default	Purpose
`HERMES_HOME`	auto-detected (`%LOCALAPPDATA%\hermes` on Windows, `~/.local/share/hermes` on POSIX)	Hermes data root
`HERMES_LINK_TOKEN`	unset	When set, every `/mcp/collab*` (except `/health`) requires `Authorization: Bearer`
`HERMES_LINK_TRUST_LEGACY`	unset (`0`)	When set (`1`), legacy `.json` consult-reply is accepted alongside the v0.2.2 `-.json`
`HERMES_LINK_MIRROR_PROJECTS`	unset	`;`/`,`-separated LOCAL paths that are in scope whatever Hermes' `state.db` says. Needed when a project directory was renamed or moved after Hermes last ran there (its recorded key goes stale and the `scoped` test then fails closed forever), or when the Hermes rows carry `cwd=null`
`HERMES_LINK_MIRROR_POLICY`	`scoped`	DSH→Hermes session-mirror policy: `off` = only an explicit `session_mirror action=enable` (pre-v0.6.0 behaviour), `scoped` = auto-mirror only sessions whose cwd matches a real Hermes project (same `state.db` `cwd` / `git_repo_root` / git worktree root), `all` = every session. Redaction is always on and the echo/noise guard always applies. An invalid value warns and falls back to `scoped` (never `all`)

@tianbuyu-wwx/dsh-hermes-link

安装