Add Track Changes architecture for draft revisions (CMP + CMPA)

Fixes critical bug in 1033-25: user-uploaded עריכה-*.docx files were
orphaned on disk while exports kept rebuilding from stale DB blocks.

New architecture:
- User-uploaded DOCX becomes the source of truth (cases.active_draft_path)
- System edits via XML surgery with real Word <w:ins>/<w:del> revisions
- User can Accept/Reject each change from within Word

Components:
- docx_reviser.py: XML surgery for Track Changes (15 tests)
- docx_retrofit.py: retroactive bookmark injection with Hebrew marker
  detection + heading heuristic (9 tests)
- docx_exporter.py: emits bookmarks around each of the 12 blocks
- 3 new MCP tools: apply_user_edit, list_bookmarks, revise_draft
- 4 new/updated endpoints: upload (auto-registers active draft),
  /exports/revise, /exports/bookmarks, /exports/{filename}/retrofit,
  /active-draft
- DB migration: cases.active_draft_path column
- UI: correct banner using real v-numbers, "מקור האמת" badge,
  detailed upload toast with bookmarks_added/missing_blocks
- agents: legal-exporter (3 export modes), legal-ceo (stage G for
  revision handling), legal-writer (revision mode)

Multi-tenancy:
- Works for both CMP (1xxx cases) and CMPA (8xxx/9xxx cases)
- New revise-draft skill added to both companies
- deploy-track-changes.sh syncs skills CMP ↔ CMPA
- retrofit_case.py: one-off retrofit of existing files

Tests: 34 passing (15 reviser + 9 retrofit + 4 exporter bookmarks + 6 e2e)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

mcp-server/src/legal_mcp/tools/drafting.py

@@ -384,6 +384,9 @@ async def validate_decision(case_number: str) -> str:
 async def export_docx(case_number: str, output_path: str = "") -> str:
     """ייצוא החלטה לקובץ DOCX מעוצב — גופן David, RTL, כותרות, מספור סעיפים.
 
+    הקובץ נוצר עם bookmarks ב-12 הבלוקים (אנקורים ל-revisions עתידיים),
+    ומסומן כ-active_draft_path של התיק.
+
     Args:
         case_number: מספר תיק הערר
         output_path: נתיב לשמירה (אופציונלי — ברירת מחדל: תיקיית התיק)
@@ -398,9 +401,12 @@ async def export_docx(case_number: str, output_path: str = "") -> str:
 
     try:
         path = await docx_exporter.export_decision(case_id, output_path or None)
+        # Register this export as the new source of truth
+        await db.set_active_draft_path(case_id, path)
         return json.dumps({
             "status": "completed",
             "path": path,
+            "active_draft_path": path,
             "message": f"DOCX נוצר: {path}",
         }, ensure_ascii=False, indent=2)
     except ValueError as e:
@@ -410,6 +416,163 @@ async def export_docx(case_number: str, output_path: str = "") -> str:
         }, ensure_ascii=False, indent=2)
 
 
+async def apply_user_edit(case_number: str, edit_filename: str) -> str:
+    """רישום עריכה שהעלה המשתמש כמקור האמת החדש של התיק.
+
+    התהליך:
+    1. מאתר את הקובץ `עריכה-v*.docx` בתיקיית ה-exports
+    2. מזריק bookmarks רטרואקטיבית (אם אין) דרך docx_retrofit
+    3. מעדכן את cases.active_draft_path
+
+    Args:
+        case_number: מספר תיק הערר
+        edit_filename: שם הקובץ (למשל "עריכה-v1.docx") או נתיב מלא
+    """
+    from legal_mcp.services import docx_retrofit
+
+    case = await db.get_case_by_number(case_number)
+    if not case:
+        return json.dumps({"status": "error",
+                           "message": f"תיק {case_number} לא נמצא."},
+                          ensure_ascii=False, indent=2)
+
+    case_id = UUID(case["id"])
+    export_dir = config.find_case_dir(case_number) / "exports"
+    edit_path = export_dir / edit_filename if "/" not in edit_filename else Path(edit_filename)
+    if not edit_path.exists():
+        return json.dumps({"status": "error",
+                           "message": f"קובץ לא נמצא: {edit_path}"},
+                          ensure_ascii=False, indent=2)
+
+    try:
+        retrofit_result = docx_retrofit.retrofit_bookmarks(edit_path)
+        await db.set_active_draft_path(case_id, str(edit_path))
+        return json.dumps({
+            "status": "completed",
+            "active_draft_path": str(edit_path),
+            "bookmarks_added": retrofit_result.get("bookmarks_added", []),
+            "missing_blocks": retrofit_result.get("missing_blocks", []),
+            "existing_bookmarks": retrofit_result.get("existing_bookmarks", []),
+        }, ensure_ascii=False, indent=2)
+    except Exception as e:
+        return json.dumps({"status": "error", "message": str(e)},
+                          ensure_ascii=False, indent=2)
+
+
+async def list_bookmarks(case_number: str) -> str:
+    """רשימת bookmarks הקיימים ב-active_draft של התיק.
+
+    משמש לסוכנים כדי לדעת אילו אנקורים זמינים לפני שליחת revisions.
+    """
+    from legal_mcp.services import docx_reviser
+
+    case = await db.get_case_by_number(case_number)
+    if not case:
+        return json.dumps({"status": "error",
+                           "message": f"תיק {case_number} לא נמצא."},
+                          ensure_ascii=False, indent=2)
+
+    active_path = await db.get_active_draft_path(UUID(case["id"]))
+    if not active_path or not Path(active_path).exists():
+        return json.dumps({"status": "no_active_draft",
+                           "message": "לא נמצא active_draft. הרץ ייצוא או העלה עריכה."},
+                          ensure_ascii=False, indent=2)
+
+    try:
+        names = docx_reviser.list_bookmarks(active_path)
+        return json.dumps({
+            "status": "completed",
+            "active_draft_path": active_path,
+            "bookmarks": names,
+        }, ensure_ascii=False, indent=2)
+    except Exception as e:
+        return json.dumps({"status": "error", "message": str(e)},
+                          ensure_ascii=False, indent=2)
+
+
+async def revise_draft(case_number: str, revisions_json: str,
+                       author: str = "מערכת AI") -> str:
+    """החלת revisions מסומנים כ-Track Changes על ה-active_draft של התיק.
+
+    יוצר קובץ חדש `טיוטה-v{N+1}.docx` (מגרסה הבאה בתור), ומעדכן את
+    active_draft_path אליו.
+
+    Args:
+        case_number: מספר תיק הערר
+        revisions_json: JSON string של array עם אובייקטים:
+            [{"id": "r1", "type": "insert_after"|"insert_before"|"replace"|"delete",
+              "anchor_bookmark": "block-yod", "content": "...", "style": "body"|"heading"|"quote",
+              "reason": "..."}, ...]
+        author: מחרוזת המחבר שתופיע ב-Track Changes
+    """
+    from legal_mcp.services import docx_reviser
+
+    case = await db.get_case_by_number(case_number)
+    if not case:
+        return json.dumps({"status": "error",
+                           "message": f"תיק {case_number} לא נמצא."},
+                          ensure_ascii=False, indent=2)
+
+    case_id = UUID(case["id"])
+    active_path = await db.get_active_draft_path(case_id)
+    if not active_path or not Path(active_path).exists():
+        return json.dumps({"status": "error",
+                           "message": "אין active_draft. הרץ ייצוא או apply_user_edit קודם."},
+                          ensure_ascii=False, indent=2)
+
+    try:
+        raw = json.loads(revisions_json) if isinstance(revisions_json, str) else revisions_json
+    except json.JSONDecodeError as e:
+        return json.dumps({"status": "error", "message": f"JSON לא תקף: {e}"},
+                          ensure_ascii=False, indent=2)
+
+    revisions = []
+    for item in raw:
+        revisions.append(docx_reviser.Revision(
+            id=item.get("id", ""),
+            type=item["type"],
+            anchor_bookmark=item["anchor_bookmark"],
+            content=item.get("content", ""),
+            style=item.get("style", "body"),
+            reason=item.get("reason", ""),
+            anchor_position=item.get("anchor_position", "end"),
+        ))
+
+    # Determine output path — next טיוטה-v{N}.docx
+    export_dir = config.find_case_dir(case_number) / "exports"
+    export_dir.mkdir(parents=True, exist_ok=True)
+    existing = list(export_dir.glob("טיוטה-v*.docx"))
+    next_ver = 1
+    for p in existing:
+        try:
+            ver = int(p.stem.split("-v")[1])
+            next_ver = max(next_ver, ver + 1)
+        except (IndexError, ValueError):
+            pass
+    output_path = export_dir / f"טיוטה-v{next_ver}.docx"
+
+    try:
+        result = docx_reviser.apply_tracked_revisions(
+            active_path, output_path, revisions, author=author,
+        )
+        await db.set_active_draft_path(case_id, str(output_path))
+        return json.dumps({
+            "status": "completed",
+            "output_path": str(output_path),
+            "version": next_ver,
+            "applied": result.applied,
+            "failed": result.failed,
+            "active_draft_path": str(output_path),
+            "results": [
+                {"id": r.id, "status": r.status, "error": r.error}
+                for r in result.results
+            ],
+        }, ensure_ascii=False, indent=2)
+    except Exception as e:
+        return json.dumps({"status": "error", "message": str(e)},
+                          ensure_ascii=False, indent=2)
+
+
 async def get_block_context(case_number: str, block_id: str, instructions: str = "") -> str:
     """קבלת הקשר מלא לכתיבת בלוק — ללא קריאה ל-API. Claude Code כותב את הבלוק.