v1.0.0-beta.16.22

Web

🔧 Bug Fixes

• Only touch the system tile when its widget mutation succeeds (#2379) 098877

Miscellaneous Tasks

• Bump version to 1.0.0-beta.16.22 (#2393) 83846a

Server

🔧 Bug Fixes

• Set no-cache headers on private project export downloads (SEC-04) (#2360) 7cb0f4
• Scope story lookup to the authorized scene in page mutations (#2391) 42b548
• Require the internal token before trusting the gRPC user-id (SEC-03) (#2392) 4170bb
• Drop unused domains.domain branch from public project lookup (SCA-03) (#2363) e18a81
• Finish REL-04 import status cutover, add duplicate-import guard [VIZ-DEV-65] (#2335) e27e01
• Stop scene lock release from getting stuck on a canceled context (REL-03) (#2371) 1be23f
• Close pipe reader to prevent goroutine leak on publish upload failure (SCA-04) (#2366) 2a035e
• Fail closed on basic-auth metadata lookup errors for published pages (REL-02) (#2372) 459a2b
• Check workspace membership for private project access (SEC-03) (#2359) 330dc5

server,web

🔧 Bug Fixes

• Create the system tile's fields atomically with the item (REL-07) (#2380) 50d1cf

web,server

🚀 Features

• Allow users to toggle water mask rendering on terrain (#2373) 2b91ab