Skip to content

v3.26.3

Choose a tag to compare

@osauer osauer released this 21 Oct 06:28
· 159 commits to main since this release

Canary — portfolio, risk and order tools for Interactive Brokers

Canary runs locally with TWS or IB Gateway, providing portfolio monitoring, market analysis, risk checks, performance review and order management. Order submission requires the trading build and its approval checks. Standard downloads and MCP remain read-only.

New in v3.26.3

Installation now explains when your terminal still selects an older Canary, and app restarts preserve paths containing spaces and refuse to cross profiles.

Upgrading from v3.26.2 or earlier: if your app uses spaced paths or separate HOME/XDG profiles, run canary update --no-restart, then run the newly installed canary restart from the original app profile. The older updater's in-process restart logic cannot acquire this fix during activation.

Install

For the standard read-only CLI and local MCP server:

curl -fsSL https://raw.githubusercontent.com/osauer/canary/main/install.sh | sh

For Claude Desktop, download canary.mcpb from the assets below. For order submission, choose a canary-trading-v3.26.3-* archive and follow the trading guide and security guidance.

Requires a local TWS or IB Gateway session on macOS, Linux or Windows through WSL. See the installation guide for setup, signature verification and other MCP clients.

  • Go module and source-built CLI: product v3 and later ship through the signed installer and release assets above. The public Go module remains on its maintained v2 line; go install github.com/osauer/canary/v2/cmd/canary@latest installs the newest v2 release, not this product release.

Detailed changes

Fixed

  • The installer warns when an older executable wins on PATH and gives an absolute command for the installed version (#122).
  • MCP setup preserves a validated stable launcher symlink across managed version-directory upgrades. Existing affected configurations need canary setup claude-desktop once through that launcher, then a full host restart (#123).
  • App restart preserves argument boundaries, including paths with spaces, and gives an exact app recovery command when resume fails (#124).
  • Readonly shell startup files no longer abort installation after replacing the binary; the installer prints the manual PATH step and continues initialization (#125).
  • Troubleshooting no longer advertises unsupported native Windows Claude Desktop setup (#126).
  • App lifecycle commands refuse a different or unverified HOME/XDG profile before stopping processes. Saved supervisor recovery now checks profile identity; older records need explicit recovery with canary setup app from their original profile (#127).

Security

  • Builds require Go 1.27.3, which fixes the certificate-verification vulnerability GO-2026-6809 in the Go standard library.