dsh-ths-holdings

Awesome DSH Plugin npm version GitHub stars MIT

English | [中文](README.zh.md) A floating **position P&L card** for the [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (DSH) web GUI. It automatically syncs your **real portfolio data** from the [Tonghuashun investment-ledger](https://tzzb.10jqka.com.cn) (同花顺投资账本) — no manual stock picking. Displays **今日盈亏** (today's P&L), **上证指数** (Shanghai Composite Index), and an intraday mini chart, all in the A-share red-up/green-down convention. Unlike watchlist tools, this plugin reads your **actual positions** and shows your **real profit & loss** — both as a percentage and as a yuan amount — updating every 20 seconds. ## Screenshots ![dsh-ths-holdings card](assets/screenshot.png) ## Installation ```sh dsh plugin --profile web add dsh-ths-holdings ``` Installation is `pnpm add` inside your web profile: the package's `dsh.bundle.patch` is applied to the profile layer automatically. Then **restart `dsh web`** — a floating card appears at the bottom-right corner. To install manually (without `dsh plugin`), edit `$DSH_HOME/profiles/web/package.json`: ```jsonc { "dependencies": { "dsh-ths-holdings": "^0.1.0" }, "dsh": { "profile": { "bundles": [ // ...existing bundles, "dsh-ths-holdings" ] } } } ``` then `cd $DSH_HOME/profiles/web && pnpm install` and restart `dsh web`. The plugin row itself comes from the package's `cordis.patch.yml` — you don't write it by hand. ## Usage 1. Open [https://tzzb.10jqka.com.cn](https://tzzb.10jqka.com.cn) and log in. 2. Press **F12 → Console** and run: ```javascript copy(document.cookie) ``` 3. The cookie is now in your clipboard. 4. Open the DSH web GUI — click **⚙** on the card. 5. Paste the cookie into **STOCK_PNL_COOKIE** → **save**. 6. The plugin auto-discovers your portfolio — if you have several, pick one from the dropdown. Done. The session cookie expires eventually — when it does, the card shows a **Token 已过期** banner; repeat steps 1–5 with a fresh cookie (the `v` anti-bot token is handled automatically). > 💡 After completing a new trade, re-upload your data from the investment-ledger **app** to the web version so your holdings stay consistent between the two. > > ![Data upload tutorial](assets/update.png) ## Features - **📊 Real-time position P&L** — polls every 20 s (configurable) from your actual portfolio - **¥ / % toggle** — show today's P&L as a yuan amount, a percentage, or both - **📈 Intraday chart** — mini polyline with a zero axis, red-up/green-down - **🇨🇳 Shanghai Composite Index** — displayed alongside your P&L - **🔄 Auto-discovery** — `fund_key` is discovered from the portfolio list; multi-account selection via dropdown - **↕ Draggable** — drag the title bar vertically along the right edge (position persists in localStorage) - **⚙ In-place settings** — paste Cookie and select portfolio from the card itself - **🔒 Credential-safe** — the Cookie never leaves the host process ## How it works ```text ┌─────────────── Web browser ───────────────┐ │ lib/client.js (browser module) │ │ · shell.overlay slot → floating card │ │ · React + CSS Modules │ │ · config in localStorage │ │ │ fetch (same-origin) │ └──────────┼─────────────────────────────────┘ ▼ ┌─────────────── DSH Host (lib/index.js) ───┐ │ cordis plugin: webServer routes │ │ · GET /api/stock-pnl snapshot │ │ · GET /api/stock-pnl/portfolios accounts │ │ resolves Cookie via ctx.credentials │ │ auto-discovers user_id + fund_key │ │ POSTs Tonghuashun ledger APIs │ └───────────────────────────────────────────┘ ``` The node half reads the login Cookie per request through the credential-reference seam (`ctx.credentials`) — it never reaches the browser. Credential-bearing requests never follow a redirect. The `v` anti-bot token is minted per request from the User-Agent; the stored Cookie only needs its session fields. ## Config | Key | Default | Meaning | |---|---|---| | `cookieEnv` | `STOCK_PNL_COOKIE` | Credential reference holding the ledger Cookie. | | `fundKeyEnv` | `STOCK_PNL_FUND_KEY` | Credential reference holding the ledger fund key (saved from the card's ⚙ form). | | `user_id` | the Cookie's `userid` | The ledger user id, included in every form payload; an empty value falls back to the Cookie's own `userid`. | | `fund_key` | auto-discovered | The ledger fund key selecting the managed portfolio; overridden by the `fundKeyEnv` credential when set, auto-discovered from the account list when empty. | | `pnlUrl` | Tonghuashun `time_share` endpoint | P&L endpoint override (tests point at a scripted server). | | `indexUrl` | Tonghuashun `getQuotes` endpoint | Index endpoint override (tests point at a scripted server). | | `pollMs` | `20000` | Poll interval (ms) the card uses; reported to the browser in each response's `poll_ms`. | ## Directory structure ``` dsh-ths-holdings/ ├── src/ │ ├── index.ts # node half: webServer routes + credential resolution │ ├── fetch.ts # Tonghuashun ledger API calls + auto-discovery │ └── client/ │ ├── index.ts # browser half: shell.overlay registration │ └── StockPnlCard.tsx ├── lib/ # built artifacts (index.js + client.js) ├── cordis.patch.yml # dsh.bundle patch layer ├── package.json # dsh.bundle + dsh.client manifests ├── tests/ # ledger acquisition unit tests └── README.md ``` ## FAQ / Troubleshooting | Symptom | Cause & fix | |---|---| | Card shows `请配置 Cookie` | `STOCK_PNL_COOKIE` is empty — paste your cookie in the ⚙ panel. | | Card shows `Token 已过期` | The session Cookie expired — re-run `copy(document.cookie)` and paste the fresh one. | | No portfolio in the dropdown | The account list needs a valid Cookie first; save the Cookie, then click ↻ to refresh. | | Multiple portfolios | Select the one you want from the dropdown — the choice is saved as `STOCK_PNL_FUND_KEY`. | | Cookie pasted with line breaks | The plugin strips whitespace on save, so wrapped lines are fine. | ## Model Experience None — the card is a browser-side overlay over a host data route and registers nothing model-facing. #### KV Cache effect None — the plugin contributes no prompt, schema, or result. ## Known Limitations - **The ledger API is an undocumented, login-gated endpoint** — its response format can change and the Cookie expires; the plugin surfaces both as errors rather than retrying or caching. - **The portfolio list endpoint (`account_list`) requires the Cookie to be saved first** — the portfolio selector appears after you paste a valid Cookie. - **No server-side polling** — the route fetches on each request and the card polls at the configured `pollMs` interval; there is no shared cache or push channel. ## License [MIT](LICENSE)