Skip to content

Interceptor v2.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Oct 02:21
· 41 commits to main since this release
v2.1.0
c566010
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Interceptor v2.1.0

What is Interceptor?

Interceptor is an AI-agent control surface for the browser, desktop apps, and iPhone you already use. It works with your real signed-in sessions, so your cookies, accounts, tabs, and app state stay intact while an agent reads the interface and takes action.

Four surfaces, one CLI:

  • Browser: drive your live Chrome, Brave, Edge, or Safari session from inside the page. Read the DOM and accessibility tree, click, type, navigate, observe network traffic without CDP, automate rich editors and canvas apps, capture client-side exports, and record workflows for replay.
  • macOS: drive native apps through the Accessibility tree, trusted input, ScreenCaptureKit, and Apple's Vision, Speech, and Natural Language frameworks. Routine work stays in the background unless you explicitly ask the agent to show or focus an app.
  • Windows and Linux: interceptor desktop drives native apps with the same verbs, flags, and JSON replies as interceptor macos, through a native provider that ships in the Full packages.
  • iOS: drive any installed app on an owned, unlocked, Developer Mode iPhone through an on-device XCUITest runner, plus device-service and Instruments lanes for logs, files, processes, telemetry, location, and WebKit inspection.

Interceptor ships as one interceptor CLI, a local daemon, a browser extension, a native macOS bridge or Windows/Linux desktop provider, and an iPhone runner. It needs no API keys and does not launch a separate automation browser. interceptor mcp install exposes every surface to MCP clients such as Claude Code, Codex, Gemini CLI, Cursor, and Claude Desktop.

What's new in v2.1.0

Version 2.1.0 follows 2.0.0. The headline: Windows and Linux Full installs now update themselves, the way Sparkle updates a Mac.

Automatic updates on Windows and Linux

  • The native provider that starts at login checks the update server (updates.hackervalley.media, the same server as the Mac's Sparkle feed) 2 minutes after login and every 15 minutes.
  • When a newer release is out, it downloads the installer and proves it is the one Hacker Valley Media published. The feed is signed with the same Ed25519 key as the Mac feed and pins the installer's SHA-256 and length. On Windows the installer must also carry the Hacker Valley Media Authenticode signature, checked with Windows' own trust verification and revocation checks.
  • It installs silently once Interceptor has gone 10 minutes without a request, so it never cuts off an agent in the middle of a command or a running VM or audio capture. Windows installs are per user, so there is no administrator prompt.
  • If the installer fails, it rolls back to the version you had, the provider comes back, and the failed version is not tried again on its own.
  • New interceptor update install installs a newer release right away. interceptor update status shows the last check, the next one, and the last install.
  • Set INTERCEPTOR_AUTO_UPDATE=off in the provider's login environment to turn automatic updates off (Windows: setx INTERCEPTOR_AUTO_UPDATE off, then sign out and back in; Linux: ~/.config/environment.d/interceptor.conf).

One manual step for 2.0.0 users: Windows and Linux computers on 2.0.0 have no updater yet. Install 2.1.0 once from this page; later releases arrive on their own. Mac users keep updating through Sparkle as before.

How it was tested

  • End to end on two machines. Signed lab builds on a Windows 11 ARM64 machine and an Arch Linux ARM64 (Hyprland, Wayland) machine updated themselves from a signed feed. Every step ran: check, download, verification, waiting for idle, silent install, provider restart, and the new version reported by interceptor --version and update status.

  • Refusals. On those machines the updater refused:

    • a feed changed after signing;
    • a download whose bytes did not match the signed digest;
    • an unsigned Windows installer behind a correctly signed feed (Windows trust verification answered TRUST_E_NOSIGNATURE).

    Nothing was installed, and the running version kept running.

  • Failure handling.

    • A genuine signed installer that refused to install was recorded as failed, with the provider untouched.
    • An installer that stopped the provider and then failed was recorded as failed, and the updater started the provider again.
    • The background updater then skipped that version.

  • Settings and prompts. INTERCEPTOR_AUTO_UPDATE=off stopped background checks while update install still worked. No administrator prompt appeared on Windows.

  • Automated checks.

    • Rust unit tests for the updater: feed signature, artifact selection, verified download, idle decision, daemon port, and failure records. They include a feed signed by the release publisher with the real update key and checked by the provider.
    • The full TypeScript suite (2210 pass, 0 fail) and the typecheck.
    • The capability-blind audit and the macOS bridge build on Apple silicon and Intel.

  • Mac. The 2.1.0 Mac packages were installed with the CLI on a Mac. interceptor update still checks through Sparkle, and update install points Mac users to Sparkle.

Install

Download Platform What it installs When to pick it
Interceptor-Browser-2.1.0.pkg macOS 11+ CLI, daemon, and browser extension You want browser automation without macOS Accessibility or Screen Recording prompts.
Interceptor-Full-2.1.0.pkg macOS 15+ Browser package plus the native macOS bridge and LaunchAgent You also want to drive Finder, Mail, Slack, system dialogs, and other desktop apps.
Interceptor-Safari-2.1.0.pkg macOS 14+ Safari containing app and Web Extension Add Safari support after installing either core macOS package.
Interceptor-Browser-2.1.0-windows-x64.exe or windows-arm64.exe Windows 11 24H2+ Signed per-user browser-only install You want the browser surface on Windows.
Interceptor-Full-2.1.0-windows-x64.exe or windows-arm64.exe Windows 11 24H2+ Browser install plus the native desktop provider, its engines, and automatic updates You also want to drive Windows apps with interceptor desktop.
Interceptor-Browser-2.1.0-linux-x64.tar.gz or linux-arm64.tar.gz Linux Browser-only archive You want the browser surface on x64 or ARM64 Linux.
Interceptor-Full-2.1.0-linux-x64.tar.gz or linux-arm64.tar.gz Linux, glibc 2.39+ Browser archive plus the native desktop provider, its engines, and automatic updates You also want to drive Linux apps with interceptor desktop.

Start with Browser unless you need native app control. The Safari package is an add-on. The macOS packages are built for Apple silicon; on an Intel Mac, build from source.

Checksums. SHA256SUMS is the signed manifest for the Linux archives (SHA256SUMS.cms, verified by verify-release-manifest.sh with linux-release-apple-root.pem). SHA256SUMS-ALL lists every file in this release. The Windows installers are Authenticode-signed, and the Browser installers also carry GitHub build attestations.

On Linux, verify and install the Full archive from your graphical session:

bash verify-release-manifest.sh .
tar -xzf Interceptor-Full-2.1.0-linux-arm64.tar.gz
cd Interceptor-Full-2.1.0-linux-arm64
bash scripts/install.sh --full

Already on a Full install? Mac: interceptor update. Windows and Linux from 2.1.0 on: nothing to do; interceptor update status shows what the updater did.

Assets 20
Loading