Repository navigation
v2.1.0 — On-device AI + permission reduction
On-device AI migration + reduced permission/network footprint.
- AI backend → Chrome built-in AI (Gemini Nano); WebLLM/Qwen removed (no ~400MB download)
- MiniLM encoder bundled in the package (no runtime download)
- CSP tightened to connect-src 'self' — no external network connections
- Dropped unlimitedStorage (permissions now just sidePanel + storage)
- Prompt-injection hardening retained end to end
- Supply chain: pinned MiniLM + DOMPurify, committed lockfile, npm ci in packaging
Full notes: https://github.com/ChatSignal/chat-signal/blob/main/CHANGELOG.md