Interceptor v2.1.1

Interceptor v2.1.1

What is Interceptor?

Interceptor is an AI-agent control surface for the browser, desktop apps, and iPhone you already use. It works with your real signed-in sessions, so your cookies, accounts, tabs, and app state stay intact while an agent reads the interface and takes action.

Four surfaces, one CLI:

• Browser: drive your live Chrome, Brave, Edge, or Safari session from inside the page. Read the DOM and accessibility tree, click, type, navigate, observe network traffic without CDP, automate rich editors and canvas apps, capture client-side exports, and record workflows for replay.
• macOS: drive native apps through the Accessibility tree, trusted input, ScreenCaptureKit, and Apple's Vision, Speech, and Natural Language frameworks. Routine work stays in the background unless you explicitly ask the agent to show or focus an app.
• Windows and Linux: interceptor desktop drives native apps with the same verbs, flags, and JSON replies as interceptor macos, through a native provider that ships in the Full packages.
• iOS: drive any installed app on an owned, unlocked, Developer Mode iPhone through an on-device XCUITest runner, plus device-service and Instruments lanes for logs, files, processes, telemetry, location, and WebKit inspection.

Interceptor ships as one interceptor CLI, a local daemon, a browser extension, a native macOS bridge or Windows/Linux desktop provider, and an iPhone runner. It needs no API keys and does not launch a separate automation browser. interceptor mcp install exposes every surface to MCP clients such as Claude Code, Codex, Gemini CLI, Cursor, and Claude Desktop.

---

What's new in v2.1.1

Version 2.1.1 follows 2.1.0. The headline: Windows and Linux now update the way the Mac does with Sparkle: Interceptor asks, and you click.

Updates you approve, like Sparkle

• Once a day Interceptor checks for a new release (Sparkle's schedule). When there is one, it opens its update window with the release notes and Skip This Version, Remind Me Later, and Install Update.
• Nothing downloads or installs until you click. After the download, the window shows Ready to Install; Install and Relaunch installs it and Interceptor restarts.
• Before it runs, the installer is checked: its SHA-256 and length must match the signed feed (the same Ed25519 key that signs the Mac's Sparkle feed), and on Windows it must carry the Hacker Valley Media Authenticode signature. The release notes in the window are pinned by the same signed feed.
• Remind Me Later asks again the next day. Skip This Version stops asking about that release; a newer one is still offered. If an install fails, Interceptor keeps the version you had and shows the error the next time it starts.
• interceptor update checks now and opens the window when there is an update; interceptor update status shows what happened. There is no update install on any OS. An agent updates by finding and clicking the window's buttons with interceptor desktop find and interceptor desktop click, the way it clicks Sparkle's on the Mac.
• On Windows the window is WebView2. On Linux it is a native GTK window; it ships in the interceptor-overlay helper, which needs WebKitGTK 4.1. Without it, Interceptor posts a notification that links the new release.
• Set INTERCEPTOR_AUTO_UPDATE=off in the provider's login environment to stop the daily checks.

What changed from 2.1.0

2.1.0 installed updates on its own once Interceptor had been idle for 10 minutes. That is gone, along with interceptor update install. Computers already on 2.1.0 take this one update on their own, because 2.1.0's updater does that; from 2.1.1 on, every update waits for your click. Computers on 2.0.0 have no updater: install 2.1.1 once from this page.

How it was tested

On a Windows 11 ARM64 VM and an Arch Linux ARM64 VM running Hyprland, every step ran through interceptor desktop, the way an agent clicks Sparkle's window on a Mac. The feeds were signed with the real Sparkle key.

• Scheduled check. On a fresh install the first check came two minutes after start and opened the window by itself. The next check was set for 24 hours later.
• Buttons. desktop find "Install Update" returned the button. desktop click pressed it in the background: UI Automation on Windows, AT-SPI on Linux.
• Remind Me Later and Skip This Version. Remind Me Later deferred the update. Skip This Version stopped the offer, and the next check reported skipped_version.
• Busy. A second interceptor update while the window was open answered "an update session is already in progress".
• Install. Install Update downloaded and verified the installer and showed Ready to Install. Install and Relaunch installed it, and Interceptor came back on the new version.
• Failure. A signed installer that fails left the old version running, showed "Update Error!" on the next start, and was offered again at the next check.
• Click safety (Windows; the same code runs on Linux and has a unit test). A double click on Install Update stopped at Ready to Install and never installed. Enter on a focused Remind Me Later answered Remind Me Later.
• Linux fallback. Without the window helper, Linux posted a notification that links the release.
• Live release. From the published 2.1.1 feed, both VMs on an older 2.1.1-code build opened the 2.1.1 window. An agent clicked Install Update and then Install and Relaunch, and both reported 2.1.1. A Linux VM on 2.1.0 took 2.1.1 on its own, as 2.1.0 does.
• Mac. The Mac packages installed from the CLI, and Sparkle's interceptor update status reported 2.1.1.

Everything ships together

The CLI, daemon, Chromium MV3 extension, Electron MV2 extension, native macOS bridge, Safari extension, iPhone runner, Windows desktop provider, Linux desktop provider, Windows x64 and ARM64 installers, and Linux x64 and ARM64 archives all report 2.1.1.

---

Install

Download	Platform	What it installs	When to pick it
Interceptor-Browser-2.1.1.pkg	macOS 11+	CLI, daemon, and browser extension	You want browser automation without macOS Accessibility or Screen Recording prompts.
Interceptor-Full-2.1.1.pkg	macOS 15+	Browser package plus the native macOS bridge and LaunchAgent	You also want to drive Finder, Mail, Slack, system dialogs, and other desktop apps.
Interceptor-Safari-2.1.1.pkg	macOS 14+	Safari containing app and Web Extension	Add Safari support after installing either core macOS package.
Interceptor-Browser-2.1.1-windows-x64.exe or windows-arm64.exe	Windows 11 24H2+	Signed per-user browser-only install	You want the browser surface on Windows.
Interceptor-Full-2.1.1-windows-x64.exe or windows-arm64.exe	Windows 11 24H2+	Browser install plus the native desktop provider, its engines, and automatic updates	You also want to drive Windows apps with interceptor desktop.
Interceptor-Browser-2.1.1-linux-x64.tar.gz or linux-arm64.tar.gz	Linux	Browser-only archive	You want the browser surface on x64 or ARM64 Linux.
Interceptor-Full-2.1.1-linux-x64.tar.gz or linux-arm64.tar.gz	Linux, glibc 2.39+	Browser archive plus the native desktop provider, its engines, and automatic updates	You also want to drive Linux apps with interceptor desktop.

Start with Browser unless you need native app control. The Safari package is an add-on. The macOS packages are built for Apple silicon; on an Intel Mac, build from source.

Checksums. SHA256SUMS is the signed manifest for the Linux archives (SHA256SUMS.cms, verified by verify-release-manifest.sh with linux-release-apple-root.pem). SHA256SUMS-ALL lists every file in this release. The Windows installers are Authenticode-signed, and the Browser installers also carry GitHub build attestations.

On Linux, verify and install the Full archive from your graphical session:

bash verify-release-manifest.sh .
tar -xzf Interceptor-Full-2.1.1-linux-arm64.tar.gz
cd Interceptor-Full-2.1.1-linux-arm64
bash scripts/install.sh --full

Already on a Full install? Mac: interceptor update. Windows and Linux from 2.1.1 on: interceptor update checks now, and the update window does the rest.