Skip to content

v2.1.0 — On-device AI + permission reduction

Choose a tag to compare

@johnzilla johnzilla released this 07 Sep 16:43
· 5 commits to main since this release

On-device AI migration + reduced permission/network footprint.

  • AI backend → Chrome built-in AI (Gemini Nano); WebLLM/Qwen removed (no ~400MB download)
  • MiniLM encoder bundled in the package (no runtime download)
  • CSP tightened to connect-src 'self' — no external network connections
  • Dropped unlimitedStorage (permissions now just sidePanel + storage)
  • Prompt-injection hardening retained end to end
  • Supply chain: pinned MiniLM + DOMPurify, committed lockfile, npm ci in packaging

Full notes: https://github.com/ChatSignal/chat-signal/blob/main/CHANGELOG.md