
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
dsh-ths-holdings
Advanced tools
DSH 持仓盈亏悬浮卡片(同花顺投资账本)— 自动同步真实持仓数据,显示今日盈亏、上证指数和当日走势图,无需手动添加股票。Real portfolio holdings overlay for the DSH web GUI — automatically syncs your positions from the Tonghuashun investment-ledger API.
English | 中文
A floating position P&L card for DeepSeek Harness (DSH) Desktop and Web. It automatically syncs your real portfolio data from the Tonghuashun investment-ledger (同花顺投资账本) — no manual stock picking. Displays 今日盈亏 (today's P&L), 上证指数 (Shanghai Composite Index), and an intraday mini chart, all in the A-share red-up/green-down convention.
Unlike watchlist tools, this plugin reads your actual positions and shows your real profit & loss — both as a percentage and as a yuan amount — updating every 20 seconds.

Plugin 0.3.1 targets the DSH 0.2 series and has been tested with Desktop 0.2.0-rc.2, without a compatibility exemption. For DSH 0.1, keep plugin 0.2.0; this migration does not support the older host.
0.3.1 adds Settings → Tonghuashun holdings, with a refresh interval field and card visibility switch. Changes apply when saved and persist after restart.
dsh-ths-holdings in the package field.Desktop does not currently update plugins automatically. To upgrade an installed version, uninstall it from the Plugins page, then install the new version. See the official DSH installation guide.
Run in a terminal:
dsh plugin --profile web add dsh-ths-holdings
After installation, restart dsh web and refresh the DSH page. The floating card appears at the bottom-right corner.
Desktop and Web manage their plugins separately; use the installation method for the application you run.
Recommended — auto-acquire:
Click 立即更新数据 in the expanded ⚙ settings to fetch P&L and the index immediately using the saved sign-in and selected portfolio. The button shows a loading state during the request; failures retain previous successful values and their original update time.
Open Settings → Tonghuashun holdings in DSH to change the refresh interval (default: 20000 ms, or 20 seconds) and card visibility. Click Save to apply changes immediately and retain them after restart. Hiding the card stops its automatic refresh; chat queries and scheduled reports remain available.
Manual (backup):
… in Edge, ⋮ in Chrome). F12 may have no effect on this page; open the tools through the browser menu.tzzb.10jqka.com.cn. Under Headers → Request Headers, copy the complete Cookie value. Copy only the name=value; name2=value2 portion, without the Cookie: prefix; do not copy a response's Set-Cookie header.If the page reports that developer tools are unsupported, first check whether Network has already recorded a ledger request with a Cookie header. If no usable Cookie is available, use auto-acquire above. Keep developer tools open while inspecting cookies manually.
The session cookie expires eventually — when it does, the card shows a Token 已过期 banner; re-open ⚙ and click auto-acquire (or repeat manual steps 1–5) with a fresh cookie.
💡 After completing a new trade, re-upload your data from the investment-ledger app to the web version so your holdings stay consistent between the two.
Installing and enabling the plugin automatically makes the bundled ths-portfolio-report Skill available in ordinary chat and scheduled tasks. No separate Skill installation or MCP server is needed. Sign-in and portfolio selection use the card settings; you do not need to find or enter a portfolio ID.
After signing in, simply say in DSH chat:
Show my holdings in Tonghuashun Investment Ledger.
The assistant uses the selected portfolio. If several are available and none is selected, choose by name when asked. You can also say “Show holdings from my ‘Long-term investments’ portfolio in Tonghuashun Investment Ledger.”
Reports default to an asset overview, the full holdings table and the largest positions. They include security names and codes, quantities, cost and current prices, market values, portfolio weights, holding P&L and daily P&L. Query time and ledger upload time are shown separately; missing data is identified rather than treated as zero.
For example, say:
Every weekday at 4:30 p.m. Beijing time, check my holdings in Tonghuashun Investment Ledger and generate a holdings and P&L report. Keep this task linked to the currently selected portfolio.
You can also include relevant news:
Every weekday at 9:00 a.m., check my holdings in Tonghuashun Investment Ledger and tell me about important news related to those holdings.
Have the assistant confirm the portfolio name and next run time. Scheduled reports require a running DSH host with Schedule enabled. Weekday rules do not automatically exclude exchange holidays.
fund_key is discovered from the portfolio list; multi-account selection via dropdown| Symptom | Cause & fix |
|---|---|
Card shows 请配置 Cookie | STOCK_PNL_COOKIE is empty — click auto-acquire in the ⚙ panel, or paste manually. |
Card shows Token 已过期 | Re-acquire the cookie or copy the Cookie request header using the manual steps above. |
| F12 has no effect | Click the browser's top-right menu → More tools → Developer tools, then follow the manual steps. |
| Login page says developer tools are unsupported | Auto-acquire does not require developer tools. For manual acquisition, check already recorded ledger requests in Network; if no usable Cookie is available, use auto-acquire. |
| No portfolio in the dropdown | The account list needs a valid Cookie first; save the Cookie, then click ↻ to refresh. |
| Multiple portfolios | Select the one you want from the dropdown — the choice is saved as STOCK_PNL_FUND_KEY. |
| Cookie pasted with line breaks | The plugin strips whitespace on save, so wrapped lines are fine. |
| “稍后重试” or “数据暂时无法获取” | Wait and retry. The card may retain previous successful values; check the displayed update time. |
| The assistant cannot query holdings | Check that the plugin is enabled and sign-in is complete. Fully restart DSH, then try again. |
| The report fails while the card still has values | The card may be showing an earlier snapshot. Reports treat the current query as failed and do not reuse old results. |
FAQs
DSH 持仓盈亏悬浮卡片(同花顺投资账本)— 自动同步真实持仓数据,显示今日盈亏、上证指数和当日走势图,无需手动添加股票。Real portfolio holdings overlay for the DSH web GUI — automatically syncs your positions from the Tonghuashun investment-ledger API.
The npm package dsh-ths-holdings receives a total of 157 weekly downloads. As such, dsh-ths-holdings popularity was classified as not popular.
We found that dsh-ths-holdings demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.