Herald changelog: what’s new in each release

3.0 updates: Safer connections and smoother sign-ins (17 October 2026)

Sign in to MCP servers from your phone through Hermes’ own OAuth flow, over HTTPS only.
When your Hermes moves to a new address, Herald finds it again, checks it is the same Hermes and tells you. A plain-HTTP move asks first.
Approval prompts that need your phone now say “Confirm on your phone” on Apple Watch, CarPlay and the Lock Screen.
npx herald-setup configures and verifies Tailscale Serve, supports Hermes in Docker with a loopback bridge, and asks before publishing anything through Tailscale Funnel.
HTML previews open in a locked-down, incognito view with a strict Content Security Policy.
HEIC photos are detected by their contents, and kanban attachments over Hermes’ 25 MiB limit are refused before uploading.
Plain-HTTP rules are stricter: inline media and connections over public plain HTTP are refused.

Hermes Pet: a companion that acts out what each bot is doing, on the Dynamic Island, a Lock Screen Live Activity, a StandBy and Home Screen widget, Apple Watch, the CarPlay voice screen and an Android ongoing notification.
iPad Mission Control: a sidebar, chat and inspector side by side, two chats split on wide screens, messaging several bots at once, keyboard shortcuts and drag and drop.
Herald now speaks English, Japanese and Brazilian Portuguese, including the Apple Watch app, CarPlay, Siri and permission prompts.
A language picker in Settings › General, with locale-aware dates, units and token counts.

CarPlay: pick a bot or room on the car’s screen, hear unread replies first, and talk hands-free.
A Sessions pane on the home screen and filter chips under the search box.
Group chats explain when a member’s turn fails.
Streaming replies no longer drag you down while you scroll up to read.
Files you send and receive behave like real files, and agent-made files survive a lapsed sign-in.

A setup wizard with npx herald-setup and QR pairing.
Several Hermes computers in one roster, presence dots, roster search and session resume.
Copy and select text, code-block copy and HTML preview.
Dark by default with a light appearance and accent colours.
Inline photos, video and audio in chat, and native tap menus.
The Apple Watch roster app, relayed through the iPhone.
Gated connections sign in again on their own after a 401.