Repository navigation
v3.26.3
Canary — portfolio, risk and order tools for Interactive Brokers
Canary runs locally with TWS or IB Gateway, providing portfolio monitoring, market analysis, risk checks, performance review and order management. Order submission requires the trading build and its approval checks. Standard downloads and MCP remain read-only.
New in v3.26.3
Installation now explains when your terminal still selects an older Canary, and app restarts preserve paths containing spaces and refuse to cross profiles.
Upgrading from v3.26.2 or earlier: if your app uses spaced paths or separate HOME/XDG profiles, run canary update --no-restart, then run the newly installed canary restart from the original app profile. The older updater's in-process restart logic cannot acquire this fix during activation.
Install
For the standard read-only CLI and local MCP server:
curl -fsSL https://raw.githubusercontent.com/osauer/canary/main/install.sh | shFor Claude Desktop, download canary.mcpb from the assets below. For order submission, choose a canary-trading-v3.26.3-* archive and follow the trading guide and security guidance.
Requires a local TWS or IB Gateway session on macOS, Linux or Windows through WSL. See the installation guide for setup, signature verification and other MCP clients.
- Go module and source-built CLI: product v3 and later ship through the signed installer and release assets above. The public Go module remains on its maintained v2 line;
go install github.com/osauer/canary/v2/cmd/canary@latestinstalls the newest v2 release, not this product release.
Detailed changes
Fixed
- The installer warns when an older executable wins on PATH and gives an absolute command for the installed version (#122).
- MCP setup preserves a validated stable launcher symlink across managed version-directory upgrades. Existing affected configurations need
canary setup claude-desktoponce through that launcher, then a full host restart (#123). - App restart preserves argument boundaries, including paths with spaces, and gives an exact app recovery command when resume fails (#124).
- Readonly shell startup files no longer abort installation after replacing the binary; the installer prints the manual PATH step and continues initialization (#125).
- Troubleshooting no longer advertises unsupported native Windows Claude Desktop setup (#126).
- App lifecycle commands refuse a different or unverified HOME/XDG profile before stopping processes. Saved supervisor recovery now checks profile identity; older records need explicit recovery with
canary setup appfrom their original profile (#127).
Security
- Builds require Go 1.27.3, which fixes the certificate-verification vulnerability GO-2026-6809 in the Go standard library.