fix(pipeline): re-exports keep a shot's approval, and carry no client-facing text

A shot is routinely re-exported for delivery after it has already been
client-approved — most often an unscaled/un-punched-in pass. Every
pipeline-created Version defaulted to approvalStatus PENDING_REVIEW,
which is exactly what the dashboard counts, the shot page badge and the
playlist read as "awaiting review" — so a re-export made an approved
shot look like new unreviewed work to the whole team, with nothing
actually different about its approval.

approvalStatus is now inherited from the task's previous latest version
rather than left at the create default. A task with no prior version
(its first export) still gets PENDING_REVIEW, which is correct.

Separately, every pipeline version was stamped with notes: "Pipeline
render vXXX (internal only)" — and notes is the artist's message to
reviewers, rendered verbatim in the client portal and the review player.
Nothing enforces that a pipeline version stays unshared once created (see
the gap noted in RenderPipeline2.md), so that internal-sounding string
could reach a client if the shot were re-shared after a re-export. notes
is left unset; what a version is and where it came from belongs on the
Export and its timeline, which is where a human would actually go
looking.

RenderPipeline2.md §9 documents both, plus the share-flow gap that let
notes reach a client in the first place: shareWithClient promotes
whichever Version is isLatest with no awareness that a pipeline version
is meant to stay internal permanently. Not fixed here — closing it needs
a way to identify a pipeline-origin version at the share call sites, and
Export.versionId is currently a one-way scalar with no inverse relation
on Version.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

lib/render-pipeline/preview.ts

@@ -319,6 +319,7 @@ export async function finalizePreview(jobId: string, machineId: string, body: Fi
 
     let versionId: string | null = null;
     let versionReplaced = false;
+    let inheritedApproval: string | null = null;
     if (artifacts.previewMovKey) {
       const mediaFields = {
         fileUrl: `/api/files/${artifacts.previewMovKey}`,
@@ -350,6 +351,20 @@ export async function finalizePreview(jobId: string, machineId: string, body: Fi
         // Version numbering stays monotonic for the task (existing review flows
         // rely on the newest version having the highest number) while matching
         // the export version whenever it is ahead.
+        // A re-export does not change the picture — it re-renders EXRs for
+        // delivery from a shot that has usually already been approved. A fresh
+        // Version defaults to PENDING_REVIEW, which is what the dashboard, the
+        // shot page and the client portal all read, so an approved shot would
+        // silently reappear as awaiting review. The approval carries over from
+        // the version this one supersedes.
+        const previousLatest = exportRow.taskId
+          ? await tx.version.findFirst({
+              where: { taskId: exportRow.taskId },
+              orderBy: { versionNumber: "desc" },
+              select: { approvalStatus: true, versionNumber: true },
+            })
+          : null;
+
         const taskMax = exportRow.taskId
           ? await tx.version.aggregate({
               where: { taskId: exportRow.taskId },
@@ -365,12 +380,17 @@ export async function finalizePreview(jobId: string, machineId: string, body: Fi
             shotId: exportRow.shotId,
             taskId: exportRow.taskId,
             artistId: exportRow.submittedById,
-            notes: `Pipeline render ${exportRow.versionString} (internal only)`,
+            // `notes` is the artist's message to reviewers and is shown in the
+            // client portal, so the pipeline stays out of it. What this version
+            // is and where it came from lives on the Export and its timeline,
+            // which is where someone would go looking anyway.
+            approvalStatus: previousLatest?.approvalStatus ?? "PENDING_REVIEW",
             isLatest: true,
             isClientVisible: false, // never shared to the client portal (§10.0)
           },
         });
         versionId = version.id;
+        inheritedApproval = previousLatest?.approvalStatus ?? null;
       }
 
       if (exportRow.taskId) {
@@ -416,7 +436,7 @@ export async function finalizePreview(jobId: string, machineId: string, body: Fi
           (versionId
             ? versionReplaced
               ? " — review version media replaced"
-              : " — review version created"
+              : ` — review version created (${inheritedApproval ?? "PENDING_REVIEW"})`
             : " — no preview media reported") +
           (taskRenamed ? ` — task renamed to ${taskTitle}` : ""),
       },