Hiiscript 1.0.11

What's new

PDF import now works in packaged builds. The bundled PDF.js reader
was not included in the Electron artifact. It is now shipped under
www/vendor/.
Autosave no longer has a 5 MB ceiling. Drafts, character library,
scene library, and recovery snapshots now persist to IndexedDB instead
of localStorage, removing the practical cap that could silently drop
edits on large scripts.
Recovery prompt no longer blocks the app. The "recover unsaved work"
confirmation now uses the app's own modal rather than a native dialog.
GPU acceleration is restored on Windows and macOS. It is only disabled
on Linux by default, and can be re-enabled with HIISCRIPT_FORCE_GPU=1.

Content Security Policy is enforced. The inline application script
has moved to www/js/app.js, and script-src 'unsafe-inline' has been
removed.
Update checks are opt-in. The app no longer contacts GitHub unless
you enable "Check for updates automatically" in the About dialog.
Privacy documentation updated to disclose both outbound requests
(update checks and, if the bundled PDF reader is missing, the PDF.js
CDN fallback).

Added tests for screenplay-core (classification, validation, Markdown
export, statistics).
Unified the character-cue length limit at 42 characters.
Guarded the preview pagination loop against mid-iteration DOM growth.
Landing page now carries Open Graph and Twitter card metadata.

Windows and Linux artifacts are built through the release workflow.
SHA-256 checksums are generated for every artifact.
Signed Windows installers require the repository secrets
WINDOWS_CERTIFICATE_BASE64 and WINDOWS_CERTIFICATE_PASSWORD.
Android APKs should be generated locally via Capacitor.

Screenshots for the release page belong in docs/screenshots/ and are
uploaded automatically when present.

Full Changelog: v1.0.10...v1.0.11