ChatGPT update adds Apple Messages integration on Mac

My notes

Summary

ChatGPT’s macOS desktop app added an Apple Messages plugin that can read, search, and send iMessage/SMS/RCS conversations locally via AppleScript and Accessibility APIs, available across all plans including ChatGPT Work and Codex. Sending stays gated behind per-message user approval by default, and the update ships alongside cross-device pinned-chat sync, read-only Codex thread snapshots, and Site co-editing for workspace teams.

Key Insight

• The plugin runs entirely on-device, reading files on the Mac rather than maintaining a synced cloud index of messages, a deliberate design choice distinguishing it from an index-based assistant, and one that lowers the privacy bar for platform owners (Apple) to tolerate.
• Default safety model is per-send approval; users can skip confirmation per-conversation, but doing so removes the safety net, a trade-off OpenAI documents explicitly rather than hiding.
• Known bug: setting a task to “Full access” (or anything that disables approval prompts) breaks the Messages send confirmation entirely. Workaround is switching back to “Ask for approval” or “Approve for me”, a concrete failure mode of over-broad autonomy settings in agentic tools.
• Feature is Apple Silicon-only, not Intel, another signal that AI vendors are treating Apple Silicon as the macOS baseline going forward.
• Codex thread “snapshots” are read-only share links; links from personal accounts are accessible to anyone with the URL (unauthenticated), while workspace links stay restricted to members. OpenAI redacts known secret patterns but explicitly warns sensitive data can still leak through, redaction is a mitigation, not a guarantee.
• The bundle (Messages plugin + Site co-editing + Codex snapshots) signals ChatGPT for Mac is being repositioned as a deeper OS-integrated work tool, not just a chat client.