Variable	Purpose
`DSH_NX_WORKSPACE`	Only directory the server may use for CAD files
`DSH_NX_BRIDGE_URL`	Loopback-only bridge URL, for example `http://127.0.0.1:48161/rpc`
`DSH_NX_BRIDGE_TOKEN`	Random bearer token shared with the local bridge
`DSH_NX_TIMEOUT_MS`	Tool timeout; default 30000
`DSH_NX_MODE=mock`	Test-only stateful mock; never creates CAD files
`DSH_NX_ROOT`	NX installation root used by `dsh-nx-doctor`

No arbitrary journal, Python, C#, or shell execution tool is exposed.

dsh-nx

安装