ChatGPT

Run this plugin

Trigger collection for ChatGPT on its own with the --plugin flag, or include it in a wider sweep by category.

# Just this plugin
macfor-pro collect --plugin ai.chatgpt --output ./evidence.zip

# Dry run — list what would be collected
macfor-pro collect --plugin ai.chatgpt --dry-run

Compatibility

• macOS 12.0+

Licensing: ships in the macfor-pro binary. See Community vs Pro.

Options

Set an option with --plugin-opt ai.chatgpt.<name>=<value>. The flag is repeatable, and a value can be a literal, env:NAME (an environment variable), file:PATH (a file's contents), or literal:VALUE (a literal that starts with env: or file:). Use env: or file:for secrets so they stay out of shell history. Options are recorded in the container's manifest.json and chain of custody; values read from env: or file:, and values of secret-looking keys such as audit_key, are recorded only as [set].

macfor-pro collect --plugin ai.chatgpt \
  --plugin-opt ai.chatgpt.skip_content=true \
  --plugin-opt ai.chatgpt.include_cli_threads=true \
  --output ./evidence.zip

Requires v0.2.0+. --plugin-opt was added in collector v0.2.0. Without it the plugin runs with the defaults below.

Privacy defaults

• Secrets are redacted in records. Every record passes through redaction: values under secret-like keys, URL credentials and secret query parameters, and token-shaped strings in free text (titles, prompts, log lines, tool arguments) become [REDACTED:sha256:<8 hex>], so equal secrets still correlate across records. OAuth tokens and API keys from auth.json are never emitted; the record only notes which fields are present. include_secrets turns redaction off.
• Raw evidence files are copied byte-for-byte. Rollout JSONL files, the sqlx databases (state_N, thread_history_N, logs_N, …), LevelDB stores, desktop logs, the in-app browser History and the HTTP cache entries that are kept go into the container unmodified as original evidence. Redaction applies to records, not to these copies. skip_content hashes and records the content files instead of copying them.
• Secret-bearing files are not copied without include_secrets. auth.json, shell snapshots, the Cookies, Login Data and Web Data databases are parsed into records (or only noted) but stay out of the container. config.toml, hooks.json and .codex-global-state.json are copied only when redaction changed nothing in them. This also applies to include_raw.
• Cookie values (Chromium v10) are never decrypted or emitted, saved passwords are never read, and the Keychain is never read.
• CLI threads are counted, not emitted. ~/.codex is shared with the Codex CLI. Threads that the CLI started belong to the planned ai.codex plugin: ai.chatgpt records them only as a count in chatgpt_thread_summary (owner_plugin ai.codex) unless include_cli_threads is set.
• ChatGPT Classic is not collected yet. The legacy native app (com.openai.chat) is recorded in the install inventory, but its encrypted conversation cache is declared as planned. macfor does not decrypt it.