0.0.10-beta
One chat, four security levels, and credentials that ask
Beta 10 turns ModelPiper's separate pages into one chat with projects and workbenches, puts every tool call from every app under one of four security levels, and lets a credential ask for your approval instead of refusing. It runs on macOS 26 and macOS 27 and updates from beta 9 inside the app. You will re-enter your saved API keys once.
Added
- One chat holds every conversation. Projects carry their own instructions, default model and folders, and image, video, code, tests, outreach and API discovery open as workbench tabs in a pane beside the conversation.
- Four security levels, Disabled, Default, Balanced and Strict, govern every tool call from Claude Code, Cursor, ModelPiper, ToolPiper's own chat and your voice. New installs start at Default, and the Security overview shows tools, firewall rules, credentials, tokens, connected apps and activity on one screen.
- A credential set to Every time asks for one Touch ID or password approval instead of refusing, and a chat reply that makes many requests asks once for up to 50 of them.
- The image workbench adds transform handles with snapping, canvas and image size, crop, lasso and polygon selections, editable text and fill layers, one-click edits on a selection, and export to PNG, JPEG, TIFF or layered PSD.
- Eleven new cloud providers: Baseten, Cohere, DashScope, Hugging Face Inference, Hyperbolic, Moonshot, Nebius, Novita, SambaNova, Voyage and Z.ai.
- Every typed chat turn in ModelPiper shows what it used and what it cost, priced from a reviewed table that ships with the app.
- Four browser tools read a page the way a developer would: one element, why it looks the way it does, and the page's stylesheets and scripts with their source maps. Several agents can now drive Chrome at once, each in its own tabs.
Changed
- Cloud AI models now need Pro everywhere in ToolPiper: chat, voice and the API. The pricing page always listed them under Pro, but some paths in earlier builds skipped the check, so Free accounts could use cloud models in the app. Local models stay free, including a model server on this Mac such as LM Studio or Ollama. A model server on another machine counts as cloud.
- Tool plans follow one rule: the free tool makes the plan and the paid tool makes the artifact. Pro covers the agent acting for you, Studio covers making media and Max adds automations. Prices did not change, and a tool that now needs a plan says which one the first time you call it.
- Agent turns no longer end because something unrelated changed elsewhere in the app, and answering an Ask mid-turn lets the turn carry on with your answer.
- Every app gets the same Ask answers: Allow once, Allow for session, Always allow, Deny and Always deny. Tools that run commands or change files offer Allow once, Deny and Always deny.
- Credentials move to a new store in the macOS Data Protection Keychain. Beta 10 does not convert beta 9's: it sets the old store aside without deleting it, and you re-enter your API keys and reconnect OAuth accounts once.
- An install that chose Standard or Guarded now shows Default. An automation armed before beta 10 is disarmed once, at its next call that needs an Ask, and arming it again restores it.
- The ModelPiper web app moved to http://127.0.0.1:9998/modelpiper/. The old /app/ address does not redirect, so update your bookmark.
- Beta 10 runs on macOS 26 and macOS 27. Beta 11 will require macOS 27, and on macOS 26 beta 10 keeps running and tells you the new version needs macOS 27.
- The embedded llama.cpp server moves to build b11669, and recommended models download a pinned revision, so the model we tested is the model you get.
- MCP tool renames: the media_project_* tools became the workbench family, the layer tools are now workbench_image_*, and the schedule_* tools are now automation_*.
- On team deployments, audit history and daily counts from beta 9 do not carry over. Recording starts fresh.
Fixed
- Clicking Allow allows. An Accept in Claude Code with its consent box untouched used to arrive as a refusal, and now means Allow once.
- The voice keys no longer break ordinary typing, shortcuts or ⌘C.
- The app reflects a new plan the moment the purchase completes, and promo codes work on plan changes, not only on a first checkout.
Removed
- The visual pipeline builder. Its pages redirect.
- The outreach_project_* tools. Outreach lives in projects now.
- GET and PUT /v1/tool-permissions. Use /v1/tool-capabilities, with its preview and commands.
- /v1/action-piper/* and the pipeline run routes, POST /v1/pipeline/run and /v1/pipeline/run/cancel.
- GET /v1/workflow-templates, the ports field on model presets and configurations, and catalogVersion on the model-configs.changed event. They described the visual pipeline builder, and nothing replaces them.