feat(submissions): t-paliad-240 — Schriftsätze sidebar + global drafts index

Add a top-level Schriftsätze entry under the Werkzeuge sidebar group
plus a new /submissions page that lists every draft the caller owns
across visible projects. Each row links to the per-project editor at
/projects/{id}/submissions/{code}/draft/{draft_id}.

Backend: SubmissionDraftService.ListAllForUser joins paliad.submission_drafts
with paliad.projects, gated by paliad.can_see_project for visibility. New
GET /api/user/submission-drafts endpoint exposes the rows; the page route
GET /submissions is gateOnboarded'd alongside the other project surfaces.

Frontend: submissions-index.tsx renders an entity-table; submissions-index.ts
hydrates from /api/user/submission-drafts and wires the row-click contract
(skip clicks on inner a/button). DE primary, EN secondary i18n.

frontend/build.ts

@@ -19,6 +19,7 @@ import { renderProjectsNew } from "./src/projects-new";
 import { renderProjectsDetail } from "./src/projects-detail";
 import { renderProjectsChart } from "./src/projects-chart";
 import { renderSubmissionDraft } from "./src/submission-draft";
+import { renderSubmissionsIndex } from "./src/submissions-index";
 import { renderEvents } from "./src/events";
 import { renderDeadlinesNew } from "./src/deadlines-new";
 import { renderDeadlinesDetail } from "./src/deadlines-detail";
@@ -254,6 +255,7 @@ async function build() {
       join(import.meta.dir, "src/client/projects-detail.ts"),
       join(import.meta.dir, "src/client/projects-chart.ts"),
       join(import.meta.dir, "src/client/submission-draft.ts"),
+      join(import.meta.dir, "src/client/submissions-index.ts"),
       join(import.meta.dir, "src/client/events.ts"),
       join(import.meta.dir, "src/client/deadlines-new.ts"),
       join(import.meta.dir, "src/client/deadlines-detail.ts"),
@@ -379,6 +381,7 @@ async function build() {
   await Bun.write(join(DIST, "projects-detail.html"), renderProjectsDetail());
   await Bun.write(join(DIST, "projects-chart.html"), renderProjectsChart());
   await Bun.write(join(DIST, "submission-draft.html"), renderSubmissionDraft());
+  await Bun.write(join(DIST, "submissions-index.html"), renderSubmissionsIndex());
   // t-paliad-115 — shared EventsPage at the canonical /events URL.
   // One HTML output; defaultType="all" baked in. Sidebar Fristen /
   // Termine entries point at /events?type=… and events.ts re-highlights

frontend/src/client/i18n.ts

@@ -27,6 +27,7 @@ const translations: Record<Lang, Record<string, string>> = {
     "nav.glossar": "Glossar",
     "nav.gebuehrentabellen": "Geb\u00fchrentabellen",
     "nav.checklisten": "Checklisten",
+    "nav.submissions": "Schriftsätze",
     "nav.gerichte": "Gerichte",
     "nav.logout": "Abmelden",
     "nav.akten": "Akten",
@@ -1450,6 +1451,18 @@ const translations: Record<Lang, Record<string, string>> = {
     "submissions.draft.name.placeholder": "Name dieses Entwurfs",
     "submissions.draft.preview.title": "Vorschau",
     "submissions.draft.preview.hint": "Read-only Vorschau — finale Bearbeitung in Word.",
+    // t-paliad-240 — global Schriftsätze drafts index page.
+    "submissions.index.title": "Schriftsätze — Paliad",
+    "submissions.index.heading": "Schriftsätze",
+    "submissions.index.subtitle": "Ihre Schriftsatz-Entwürfe über alle sichtbaren Projekte.",
+    "submissions.index.loading": "Lädt…",
+    "submissions.index.empty": "Noch keine Entwürfe. Öffnen Sie ein Projekt und legen Sie auf der Schriftsätze-Tab los.",
+    "submissions.index.empty.cta": "Zu den Projekten",
+    "submissions.index.error": "Schriftsätze konnten nicht geladen werden.",
+    "submissions.index.col.project": "Projekt",
+    "submissions.index.col.submission": "Schriftsatz",
+    "submissions.index.col.draft": "Entwurf",
+    "submissions.index.col.updated": "Zuletzt geändert",
     "projects.detail.verlauf.empty": "Noch keine Ereignisse aufgezeichnet.",
     "projects.detail.verlauf.loadMore": "Mehr laden",
     // SmartTimeline (t-paliad-171, Slice 1).
@@ -2939,6 +2952,7 @@ const translations: Record<Lang, Record<string, string>> = {
     "nav.glossar": "Glossary",
     "nav.gebuehrentabellen": "Fee Schedules",
     "nav.checklisten": "Checklists",
+    "nav.submissions": "Submissions",
     "nav.gerichte": "Courts",
     "nav.logout": "Sign Out",
     "nav.akten": "Matters",
@@ -4340,6 +4354,18 @@ const translations: Record<Lang, Record<string, string>> = {
     "submissions.draft.name.placeholder": "Name of this draft",
     "submissions.draft.preview.title": "Preview",
     "submissions.draft.preview.hint": "Read-only preview — final formatting in Word.",
+    // t-paliad-240 — global submissions drafts index page.
+    "submissions.index.title": "Submissions — Paliad",
+    "submissions.index.heading": "Submissions",
+    "submissions.index.subtitle": "Your submission drafts across every visible project.",
+    "submissions.index.loading": "Loading…",
+    "submissions.index.empty": "No drafts yet. Open a project and start from its Submissions tab.",
+    "submissions.index.empty.cta": "Go to projects",
+    "submissions.index.error": "Could not load submissions.",
+    "submissions.index.col.project": "Project",
+    "submissions.index.col.submission": "Submission",
+    "submissions.index.col.draft": "Draft",
+    "submissions.index.col.updated": "Last updated",
     "projects.detail.verlauf.empty": "No events recorded yet.",
     "projects.detail.verlauf.loadMore": "Load more",
     "projects.detail.smarttimeline.empty": "No events captured yet.",

frontend/src/client/submissions-index.ts

@@ -0,0 +1,122 @@
+import { initI18n, onLangChange, t, getLang } from "./i18n";
+import { initSidebar } from "./sidebar";
+
+// t-paliad-240 — global Schriftsätze drafts index. Loads
+// /api/user/submission-drafts and renders one entity-table row per
+// draft. Row click → editor at /projects/{project_id}/submissions/
+// {submission_code}/draft/{draft_id}. Per project CLAUDE.md row-click
+// contract: a table whose rows look clickable must navigate on click;
+// inner links / buttons keep their own affordance.
+
+interface DraftRow {
+  id: string;
+  project_id: string;
+  project_title: string;
+  project_reference?: string | null;
+  submission_code: string;
+  name: string;
+  last_exported_at?: string | null;
+  updated_at: string;
+  created_at: string;
+}
+
+let drafts: DraftRow[] = [];
+
+function esc(s: string): string {
+  const d = document.createElement("div");
+  d.textContent = s;
+  return d.innerHTML;
+}
+
+function fmtDate(iso: string): string {
+  const d = new Date(iso);
+  if (isNaN(d.getTime())) return "";
+  const isEN = getLang() === "en";
+  return d.toLocaleDateString(isEN ? "en-GB" : "de-DE", {
+    year: "numeric",
+    month: "2-digit",
+    day: "2-digit",
+    hour: "2-digit",
+    minute: "2-digit",
+  });
+}
+
+async function load(): Promise<void> {
+  const loading = document.getElementById("submissions-index-loading")!;
+  const empty = document.getElementById("submissions-index-empty")!;
+  const error = document.getElementById("submissions-index-error")!;
+  const wrap = document.getElementById("submissions-index-tablewrap")!;
+
+  try {
+    const resp = await fetch("/api/user/submission-drafts");
+    if (!resp.ok) {
+      loading.style.display = "none";
+      error.style.display = "";
+      return;
+    }
+    const data = await resp.json();
+    drafts = (data.drafts ?? []) as DraftRow[];
+  } catch {
+    loading.style.display = "none";
+    error.style.display = "";
+    return;
+  }
+
+  loading.style.display = "none";
+
+  if (drafts.length === 0) {
+    empty.style.display = "";
+    wrap.style.display = "none";
+    return;
+  }
+  empty.style.display = "none";
+  wrap.style.display = "";
+  render();
+}
+
+function render(): void {
+  const body = document.getElementById("submissions-index-body")!;
+
+  body.innerHTML = drafts.map((d) => {
+    const projectCell = (() => {
+      const title = esc(d.project_title);
+      if (d.project_reference) {
+        return `<a href="/projects/${esc(d.project_id)}" class="checklist-instance-project"><span class="entity-ref">${esc(d.project_reference)}</span> ${title}</a>`;
+      }
+      return `<a href="/projects/${esc(d.project_id)}" class="checklist-instance-project">${title}</a>`;
+    })();
+
+    const href = `/projects/${esc(d.project_id)}/submissions/${esc(d.submission_code)}/draft/${esc(d.id)}`;
+
+    return `<tr class="submissions-index-row" data-href="${esc(href)}">
+      <td>${projectCell}</td>
+      <td>${esc(d.submission_code)}</td>
+      <td><a href="${esc(href)}" class="submissions-index-draft-name">${esc(d.name)}</a></td>
+      <td>${esc(fmtDate(d.updated_at))}</td>
+    </tr>`;
+  }).join("");
+
+  body.querySelectorAll<HTMLTableRowElement>(".submissions-index-row").forEach((row) => {
+    const href = row.dataset.href!;
+    row.addEventListener("click", (e) => {
+      // Inner <a> elements (project link, draft name) handle their own
+      // navigation — let the browser dispatch them.
+      if ((e.target as HTMLElement).closest("a, button")) return;
+      window.location.href = href;
+    });
+  });
+
+  // Keep tsc happy for the imported `t` (used only via data-i18n on
+  // static markup — keep the import so future dynamic strings can hook
+  // in without re-importing).
+  void t;
+}
+
+document.addEventListener("DOMContentLoaded", () => {
+  initI18n();
+  initSidebar();
+  onLangChange(() => {
+    if (drafts.length > 0) render();
+  });
+  void load();
+});

frontend/src/components/Sidebar.tsx

@@ -13,6 +13,10 @@ const ICON_BOOK = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" st
 // at a glance.
 const ICON_BOOK_OPEN = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M2 4h7a3 3 0 0 1 3 3v13a2 2 0 0 0-2-2H2z"/><path d="M22 4h-7a3 3 0 0 0-3 3v13a2 2 0 0 1 2-2h8z"/></svg>';
 const ICON_TABLE = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="3" width="18" height="18" rx="2"/><line x1="3" y1="9" x2="21" y2="9"/><line x1="3" y1="15" x2="21" y2="15"/><line x1="9" y1="3" x2="9" y2="21"/></svg>';
+// Document-with-lines icon for /submissions (t-paliad-240) — distinct
+// from ICON_BOOK / ICON_BOOK_OPEN / ICON_NEWSPAPER so the Schriftsätze
+// affordance reads as "a draft document" at a glance.
+const ICON_FILE_TEXT = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><polyline points="14 2 14 8 20 8"/><line x1="8" y1="13" x2="16" y2="13"/><line x1="8" y1="17" x2="16" y2="17"/><line x1="8" y1="9" x2="10" y2="9"/></svg>';
 const ICON_CHECK = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M9 11l3 3L22 4"/><path d="M21 12v7a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h11"/></svg>';
 const ICON_GLOBE = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="2" y1="12" x2="22" y2="12"/><path d="M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10A15.3 15.3 0 0 1 12 2z"/></svg>';
 const ICON_BUILDING = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M3 21h18"/><path d="M5 21V5a2 2 0 0 1 2-2h7a2 2 0 0 1 2 2v16"/><path d="M16 9h3a2 2 0 0 1 2 2v10"/><path d="M9 7h2"/><path d="M9 11h2"/><path d="M9 15h2"/></svg>';
@@ -175,6 +179,7 @@ export function Sidebar({ currentPath, authenticated = true }: SidebarProps): st
           {group("nav.group.werkzeuge", "Werkzeuge",
             navItem("/tools/fristenrechner", ICON_CLOCK, "nav.fristenrechner", "Fristenrechner", currentPath) +
             navItem("/tools/verfahrensablauf", ICON_BOOK_OPEN, "nav.verfahrensablauf", "Verfahrensablauf", currentPath) +
+            navItem("/submissions", ICON_FILE_TEXT, "nav.submissions", "Schriftsätze", currentPath) +
             navItem("/tools/kostenrechner", ICON_CALC, "nav.kostenrechner", "Kostenrechner", currentPath) +
             navItem("/tools/gebuehrentabellen", ICON_TABLE, "nav.gebuehrentabellen", "Gebührentabellen", currentPath) +
             navItem("/checklists", ICON_CHECK, "nav.checklisten", "Checklisten", currentPath) +

frontend/src/i18n-keys.ts

@@ -1904,6 +1904,7 @@ export type I18nKey =
   | "nav.paliadin"
   | "nav.projekte"
   | "nav.soon.tooltip"
+  | "nav.submissions"
   | "nav.team"
   | "nav.termine"
   | "nav.user_views.new"
@@ -2507,6 +2508,17 @@ export type I18nKey =
   | "submissions.draft.preview.title"
   | "submissions.draft.switcher.label"
   | "submissions.draft.title"
+  | "submissions.index.col.draft"
+  | "submissions.index.col.project"
+  | "submissions.index.col.submission"
+  | "submissions.index.col.updated"
+  | "submissions.index.empty"
+  | "submissions.index.empty.cta"
+  | "submissions.index.error"
+  | "submissions.index.heading"
+  | "submissions.index.loading"
+  | "submissions.index.subtitle"
+  | "submissions.index.title"
   | "team.broadcast.body"
   | "team.broadcast.body_placeholder"
   | "team.broadcast.button"

frontend/src/submissions-index.tsx

@@ -0,0 +1,78 @@
+import { h } from "./jsx";
+import { Sidebar } from "./components/Sidebar";
+import { PaliadinWidget } from "./components/PaliadinWidget";
+import { BottomNav } from "./components/BottomNav";
+import { Footer } from "./components/Footer";
+import { PWAHead } from "./components/PWAHead";
+
+// t-paliad-240 — global Schriftsätze drafts index. Top-level sidebar
+// entry that lists every draft the caller owns across visible projects.
+// Per-project editor stays at /projects/{id}/submissions/{code}/draft —
+// this page only adds a discovery surface and click-through to it.
+
+export function renderSubmissionsIndex(): string {
+  return "<!DOCTYPE html>" + (
+    <html lang="de">
+      <head>
+        <meta charset="UTF-8" />
+        <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover" />
+        <meta name="theme-color" content="#BFF355" />
+        <meta name="apple-mobile-web-app-capable" content="yes" />
+        <meta name="apple-mobile-web-app-status-bar-style" content="default" />
+        <PWAHead />
+        <title data-i18n="submissions.index.title">Schriftsätze &mdash; Paliad</title>
+        <link rel="stylesheet" href="/assets/global.css" />
+      </head>
+      <body className="has-sidebar">
+        <Sidebar currentPath="/submissions" />
+        <BottomNav currentPath="/submissions" />
+
+        <main>
+          <section className="tool-page">
+            <div className="container">
+              <div className="tool-header">
+                <h1 data-i18n="submissions.index.heading">Schriftsätze</h1>
+                <p className="tool-subtitle" data-i18n="submissions.index.subtitle">
+                  Ihre Schriftsatz-Entw&uuml;rfe &uuml;ber alle sichtbaren Projekte.
+                </p>
+              </div>
+
+              <p className="entity-events-empty" id="submissions-index-loading"
+                 data-i18n="submissions.index.loading">L&auml;dt&hellip;</p>
+
+              <div className="entity-empty" id="submissions-index-empty" style="display:none">
+                <p data-i18n="submissions.index.empty">
+                  Noch keine Entw&uuml;rfe. &Ouml;ffnen Sie ein Projekt und legen Sie auf der Schrifts&auml;tze-Tab los.
+                </p>
+                <a href="/projects" className="btn-secondary"
+                   data-i18n="submissions.index.empty.cta">Zu den Projekten</a>
+              </div>
+
+              <div className="entity-empty" id="submissions-index-error" style="display:none">
+                <p data-i18n="submissions.index.error">Schrifts&auml;tze konnten nicht geladen werden.</p>
+              </div>
+
+              <div className="entity-table-wrap" id="submissions-index-tablewrap" style="display:none">
+                <table className="entity-table">
+                  <thead>
+                    <tr>
+                      <th data-i18n="submissions.index.col.project">Projekt</th>
+                      <th data-i18n="submissions.index.col.submission">Schriftsatz</th>
+                      <th data-i18n="submissions.index.col.draft">Entwurf</th>
+                      <th data-i18n="submissions.index.col.updated">Zuletzt ge&auml;ndert</th>
+                    </tr>
+                  </thead>
+                  <tbody id="submissions-index-body" />
+                </table>
+              </div>
+            </div>
+          </section>
+        </main>
+
+        <Footer />
+        <PaliadinWidget />
+        <script src="/assets/submissions-index.js"></script>
+      </body>
+    </html>
+  );
+}

internal/handlers/files.go

@@ -37,11 +37,6 @@ type fileEntry struct {
 //
 // The URL slug ("hl-patents-style.dotm") is preserved as a stable public
 // identifier so existing bookmarks keep working post-rebrand.
-//
-// Per-submission templates (slug `submission/<code>.docx`) are server-only:
-// only the submission-draft editor reaches them via fetchSubmissionTemplateBytes.
-// handleFileDownload serves any slug that lands here, but the public URL
-// surface for submission templates is the export endpoint, not /files.
 var fileRegistry = map[string]fileEntry{
 	"hl-patents-style.dotm": {
 		RawURL:       "https://mgit.msbls.de/m/mWorkRepo/raw/branch/main/6%20-%20material/Templates/Word/HL%20Patents%20Style.dotm",
@@ -51,72 +46,6 @@ var fileRegistry = map[string]fileEntry{
 		RepoName:     "mWorkRepo",
 		FilePath:     "6 - material/Templates/Word/HL Patents Style.dotm",
 	},
-	// Per-submission demo template (t-paliad-241). Exercises every
-	// placeholder SubmissionVarsService resolves so the
-	// /projects/{id}/submissions/{code}/draft editor has variables to
-	// substitute. One file per submission_code; future codes register
-	// the same way — slug shape "submission/<code>.docx" so the
-	// namespace stays separate from the universal style template.
-	"submission/de.inf.lg.erwidg.docx": {
-		RawURL:       "https://mgit.msbls.de/m/mWorkRepo/raw/branch/main/6%20-%20material/Templates/Word/Paliad/" + branding.Name + "/de.inf.lg.erwidg.docx",
-		DownloadName: "Klageerwiderung — " + branding.Name + ".docx",
-		ContentType:  "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-		RepoOwner:    "m",
-		RepoName:     "mWorkRepo",
-		FilePath:     "6 - material/Templates/Word/Paliad/" + branding.Name + "/de.inf.lg.erwidg.docx",
-	},
-}
-
-// submissionTemplateRegistry maps a deadline-rule submission_code to a
-// fileRegistry slug. Lookup order matches the cronus design fallback
-// chain §8: per-firm `templates/{FIRM_NAME}/{code}.docx` first, then
-// universal HL Patents Style as the global fallback.
-//
-// Add new entries here as the firm authors per-submission templates;
-// the file itself lives in mWorkRepo and is served through the shared
-// Gitea proxy cache so refreshes are visible to all consumers in one
-// place.
-var submissionTemplateRegistry = map[string]string{
-	"de.inf.lg.erwidg": "submission/de.inf.lg.erwidg.docx",
-}
-
-// fetchSubmissionTemplateBytes returns the per-submission_code template
-// bytes (and provenance SHA) when one is registered. The bool result
-// distinguishes "no per-code template registered" (callers fall back to
-// HL Patents Style) from an upstream fetch error.
-func fetchSubmissionTemplateBytes(ctx context.Context, submissionCode string) ([]byte, string, bool, error) {
-	slug, ok := submissionTemplateRegistry[submissionCode]
-	if !ok {
-		return nil, "", false, nil
-	}
-	entry, ok := fileRegistry[slug]
-	if !ok {
-		return nil, "", false, fmt.Errorf("file proxy: submission template slug %q not registered", slug)
-	}
-	ce := getCacheEntry(slug)
-
-	ce.mu.RLock()
-	hasData := len(ce.data) > 0
-	needsCheck := time.Since(ce.lastChecked) >= checkInterval
-	ce.mu.RUnlock()
-
-	if !hasData {
-		if err := fileFetch(ce, entry); err != nil {
-			return nil, "", false, err
-		}
-	} else if needsCheck {
-		go fileCheckAndRefresh(ce, entry)
-	}
-
-	ce.mu.RLock()
-	defer ce.mu.RUnlock()
-	if len(ce.data) == 0 {
-		return nil, "", false, fmt.Errorf("file proxy: %s cache empty after fetch", slug)
-	}
-	out := make([]byte, len(ce.data))
-	copy(out, ce.data)
-	_ = ctx
-	return out, ce.sha, true, nil
 }
 
 type cacheEntry struct {

internal/handlers/handlers.go

@@ -276,6 +276,11 @@ func Register(mux *http.ServeMux, client *auth.Client, giteaAPIToken string, svc
 	protected.HandleFunc("POST /api/checklist-instances/{id}/reset", handleResetChecklistInstance)
 	protected.HandleFunc("DELETE /api/checklist-instances/{id}", handleDeleteChecklistInstance)
 	protected.HandleFunc("GET /api/projects/{id}/checklists", handleListChecklistInstancesForProject)
+	// t-paliad-240 — global Schriftsätze drafts index (top-level sidebar
+	// entry). Lists every draft the caller owns across visible projects.
+	// The per-project Schriftsätze tab keeps the editor itself project-
+	// scoped; this index is the cross-project landing.
+	protected.HandleFunc("GET /submissions", gateOnboarded(handleSubmissionsIndexPage))
 	protected.HandleFunc("GET /courts", handleCourtsPage)
 	protected.HandleFunc("GET /api/courts", handleCourtsAPI)
 	protected.HandleFunc("POST /api/courts/feedback", handleCourtsFeedback)
@@ -329,6 +334,8 @@ func Register(mux *http.ServeMux, client *auth.Client, giteaAPIToken string, svc
 	protected.HandleFunc("DELETE /api/projects/{id}/submissions/{code}/drafts/{draft_id}", handleDeleteSubmissionDraft)
 	protected.HandleFunc("GET /api/projects/{id}/submissions/{code}/drafts/{draft_id}/preview", handlePreviewSubmissionDraft)
 	protected.HandleFunc("POST /api/projects/{id}/submissions/{code}/drafts/{draft_id}/export", handleExportSubmissionDraft)
+	// t-paliad-240 — global drafts index (across visible projects).
+	protected.HandleFunc("GET /api/user/submission-drafts", handleListUserSubmissionDrafts)
 	// /counterclaim creates a CCR sub-project linked via the new
 	// paliad.projects.counterclaim_of FK (t-paliad-174 Slice 3).
 	protected.HandleFunc("POST /api/projects/{id}/counterclaim", handleCreateProjectCounterclaim)

internal/handlers/submission_drafts.go

@@ -109,6 +109,70 @@ type submissionDraftPatchInput struct {
 // Handlers
 // ─────────────────────────────────────────────────────────────────────
 
+// userSubmissionDraftRow is the on-the-wire shape for the global
+// /submissions index — each draft enriched with the project's title +
+// reference for the row.
+type userSubmissionDraftRow struct {
+	ID               uuid.UUID  `json:"id"`
+	ProjectID        uuid.UUID  `json:"project_id"`
+	ProjectTitle     string     `json:"project_title"`
+	ProjectReference *string    `json:"project_reference,omitempty"`
+	SubmissionCode   string     `json:"submission_code"`
+	Name             string     `json:"name"`
+	LastExportedAt   *time.Time `json:"last_exported_at,omitempty"`
+	UpdatedAt        time.Time  `json:"updated_at"`
+	CreatedAt        time.Time  `json:"created_at"`
+}
+
+// handleListUserSubmissionDrafts returns every draft the caller owns
+// across every visible project, ordered by updated_at DESC. Backs the
+// global /submissions index page (t-paliad-240).
+func handleListUserSubmissionDrafts(w http.ResponseWriter, r *http.Request) {
+	if !requireDB(w) {
+		return
+	}
+	uid, ok := requireUser(w, r)
+	if !ok {
+		return
+	}
+	if dbSvc.submissionDraft == nil {
+		writeJSON(w, http.StatusServiceUnavailable, map[string]string{
+			"error": "submission drafts not configured",
+		})
+		return
+	}
+
+	rows, err := dbSvc.submissionDraft.ListAllForUser(r.Context(), uid)
+	if err != nil {
+		writeServiceError(w, err)
+		return
+	}
+
+	out := make([]userSubmissionDraftRow, 0, len(rows))
+	for i := range rows {
+		d := &rows[i]
+		out = append(out, userSubmissionDraftRow{
+			ID:               d.ID,
+			ProjectID:        d.ProjectID,
+			ProjectTitle:     d.ProjectTitle,
+			ProjectReference: d.ProjectReference,
+			SubmissionCode:   d.SubmissionCode,
+			Name:             d.Name,
+			LastExportedAt:   d.LastExportedAt,
+			UpdatedAt:        d.UpdatedAt,
+			CreatedAt:        d.CreatedAt,
+		})
+	}
+	writeJSON(w, http.StatusOK, map[string]any{"drafts": out})
+}
+
+// handleSubmissionsIndexPage serves dist/submissions-index.html for the
+// global /submissions index — lists every draft the caller owns across
+// visible projects. Sits at top level alongside /checklists, /courts etc.
+func handleSubmissionsIndexPage(w http.ResponseWriter, r *http.Request) {
+	http.ServeFile(w, r, "dist/submissions-index.html")
+}
+
 // handleListSubmissionDrafts returns every draft the caller owns for
 // the given (project, submission_code).
 func handleListSubmissionDrafts(w http.ResponseWriter, r *http.Request) {
@@ -532,17 +596,16 @@ func buildSubmissionDraftView(ctx context.Context, d *services.SubmissionDraft,
 }
 
 // resolveSubmissionTemplate returns the .docx bytes for the given
-// submission code. Lookup order matches the cronus design fallback chain
-// §8: per-firm template registered in submissionTemplateRegistry first,
-// then the universal HL Patents Style as the global fallback. The
-// returned SHA is the cache entry's commit SHA so the export audit row
-// can record provenance.
+// submission code. Slice A: universal HL Patents Style .dotm only;
+// Slice B will wire the per-code fallback chain here. SHA is returned
+// from the file registry's cache entry so the export audit row can
+// record provenance.
+//
+// submissionCode is intentionally unused in Slice A — Slice B's
+// TemplateRegistry resolves the per-code chain from this parameter
+// without callers having to change signature.
 func resolveSubmissionTemplate(ctx context.Context, submissionCode string) ([]byte, string, error) {
-	if data, sha, found, err := fetchSubmissionTemplateBytes(ctx, submissionCode); err != nil {
-		return nil, "", err
-	} else if found {
-		return data, sha, nil
-	}
+	_ = submissionCode
 	bytes, err := fetchHLPatentsStyleBytes(ctx)
 	if err != nil {
 		return nil, "", err

internal/services/submission_draft_service.go

@@ -117,6 +117,45 @@ func (s *SubmissionDraftService) List(ctx context.Context, userID, projectID uui
 	return rows, nil
 }
 
+// DraftWithProject is the row shape for the global /submissions index —
+// a draft joined with the minimal project metadata the table needs.
+// Visibility is gated by paliad.can_see_project in the SELECT itself.
+type DraftWithProject struct {
+	SubmissionDraft
+	ProjectTitle     string  `db:"project_title"     json:"project_title"`
+	ProjectReference *string `db:"project_reference" json:"project_reference,omitempty"`
+}
+
+// ListAllForUser returns every draft the user owns across visible
+// projects, ordered by updated_at DESC. Joined with paliad.projects for
+// the row's project name + reference; gated through can_see_project so
+// a draft on a project the user no longer has access to is silently
+// dropped from the result.
+func (s *SubmissionDraftService) ListAllForUser(ctx context.Context, userID uuid.UUID) ([]DraftWithProject, error) {
+	var rows []DraftWithProject
+	err := s.db.SelectContext(ctx, &rows,
+		`SELECT d.id, d.project_id, d.submission_code, d.user_id, d.name,
+		        d.variables, d.last_exported_at, d.last_exported_sha,
+		        d.created_at, d.updated_at,
+		        p.title     AS project_title,
+		        p.reference AS project_reference
+		   FROM paliad.submission_drafts d
+		   JOIN paliad.projects p ON p.id = d.project_id
+		  WHERE d.user_id = $1
+		    AND paliad.can_see_project(d.project_id)
+		  ORDER BY d.updated_at DESC`,
+		userID)
+	if err != nil {
+		return nil, fmt.Errorf("list all submission drafts for user: %w", err)
+	}
+	for i := range rows {
+		if err := rows[i].decodeVariables(); err != nil {
+			return nil, err
+		}
+	}
+	return rows, nil
+}
+
 // Get returns a single draft by id, gated on project visibility AND
 // owner-only — the caller can only fetch drafts they own. RLS in the
 // DB enforces this independently; the Go check makes the 404 semantics

scripts/gen-demo-submission-template/main.go

@@ -1,343 +0,0 @@
-// Demo submission template generator (t-paliad-241).
-//
-// One-shot authoring tool that emits a minimal but Word-compatible
-// .docx file exercising every placeholder SubmissionVarsService
-// resolves. Drop the output into m/mWorkRepo at
-//
-//	6 - material/Templates/Word/Paliad/HLC/de.inf.lg.erwidg.docx
-//
-// so paliad's submission-draft editor (t-paliad-238 Slice A) can fetch
-// it via the per-submission_code fallback chain wired into
-// handlers/files.go. The structure is a fake Klageerwiderung skeleton
-// in German — fake legal prose, real placeholder tokens.
-//
-// Why a generator instead of authoring in Word: the per-placeholder
-// docx grammar is `{{[A-Za-z][A-Za-z0-9_.]*}}` and Word's autocorrect
-// happily fragments such tokens across <w:r> runs ({{ → "{", "{",
-// project.case_number, "}", "}"). A programmatic emitter writes each
-// placeholder as a single run so the renderer's pass-1 substitution
-// (format-preserving) catches it cleanly. The merge engine handles
-// cross-run cases too (pass 2) but pass 1 is the cheaper path.
-//
-// Run:
-//
-//	go run ./scripts/gen-demo-submission-template -out /tmp/de.inf.lg.erwidg.docx
-//
-// Output is deterministic so re-generating to the same path produces a
-// byte-identical file (modulo zip mtime — we pin those to a fixed UTC
-// timestamp so the bytes are reproducible).
-package main
-
-import (
-	"archive/zip"
-	"bytes"
-	"flag"
-	"fmt"
-	"os"
-	"strings"
-	"time"
-)
-
-func main() {
-	out := flag.String("out", "de.inf.lg.erwidg.docx", "output .docx path")
-	flag.Parse()
-
-	docx, err := buildDocx()
-	if err != nil {
-		fmt.Fprintln(os.Stderr, "gen-demo-submission-template:", err)
-		os.Exit(1)
-	}
-	if err := os.WriteFile(*out, docx, 0o644); err != nil {
-		fmt.Fprintln(os.Stderr, "gen-demo-submission-template: write:", err)
-		os.Exit(1)
-	}
-	fmt.Printf("wrote %s (%d bytes)\n", *out, len(docx))
-}
-
-// fixedTime is the zip mtime stamp baked into every entry so the output
-// is byte-reproducible.
-var fixedTime = time.Date(2026, 5, 23, 0, 0, 0, 0, time.UTC)
-
-// buildDocx assembles the four-part .docx zip Word needs to open the
-// file cleanly: Content_Types, root rels, document.xml, and document
-// rels. Everything else (styles, theme, fonts) is optional — Word
-// supplies sane defaults when absent.
-func buildDocx() ([]byte, error) {
-	var buf bytes.Buffer
-	zw := zip.NewWriter(&buf)
-
-	add := func(name, body string) error {
-		hdr := &zip.FileHeader{
-			Name:     name,
-			Method:   zip.Deflate,
-			Modified: fixedTime,
-		}
-		w, err := zw.CreateHeader(hdr)
-		if err != nil {
-			return fmt.Errorf("create %s: %w", name, err)
-		}
-		if _, err := w.Write([]byte(body)); err != nil {
-			return fmt.Errorf("write %s: %w", name, err)
-		}
-		return nil
-	}
-
-	if err := add("[Content_Types].xml", contentTypesXML); err != nil {
-		return nil, err
-	}
-	if err := add("_rels/.rels", rootRelsXML); err != nil {
-		return nil, err
-	}
-	if err := add("word/_rels/document.xml.rels", documentRelsXML); err != nil {
-		return nil, err
-	}
-	if err := add("word/styles.xml", stylesXML); err != nil {
-		return nil, err
-	}
-	if err := add("word/document.xml", buildDocumentXML()); err != nil {
-		return nil, err
-	}
-
-	if err := zw.Close(); err != nil {
-		return nil, fmt.Errorf("finalise zip: %w", err)
-	}
-	return buf.Bytes(), nil
-}
-
-const contentTypesXML = `<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
-<Types xmlns="http://schemas.openxmlformats.org/package/2006/content-types">
-  <Default Extension="rels" ContentType="application/vnd.openxmlformats-package.relationships+xml"/>
-  <Default Extension="xml" ContentType="application/xml"/>
-  <Override PartName="/word/document.xml" ContentType="application/vnd.openxmlformats-officedocument.wordprocessingml.document.main+xml"/>
-  <Override PartName="/word/styles.xml" ContentType="application/vnd.openxmlformats-officedocument.wordprocessingml.styles+xml"/>
-</Types>`
-
-const rootRelsXML = `<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
-<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">
-  <Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument" Target="word/document.xml"/>
-</Relationships>`
-
-const documentRelsXML = `<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
-<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">
-  <Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/styles" Target="styles.xml"/>
-</Relationships>`
-
-// stylesXML provides minimal Heading1 + Heading2 paragraph styles so
-// the section headings render with visual weight. Body text falls
-// through to Word's Normal style.
-const stylesXML = `<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
-<w:styles xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main">
-  <w:style w:type="paragraph" w:styleId="Heading1">
-    <w:name w:val="heading 1"/>
-    <w:basedOn w:val="Normal"/>
-    <w:pPr><w:spacing w:before="360" w:after="120"/></w:pPr>
-    <w:rPr><w:b/><w:sz w:val="28"/></w:rPr>
-  </w:style>
-  <w:style w:type="paragraph" w:styleId="Heading2">
-    <w:name w:val="heading 2"/>
-    <w:basedOn w:val="Normal"/>
-    <w:pPr><w:spacing w:before="240" w:after="80"/></w:pPr>
-    <w:rPr><w:b/><w:sz w:val="24"/></w:rPr>
-  </w:style>
-  <w:style w:type="paragraph" w:default="1" w:styleId="Normal">
-    <w:name w:val="Normal"/>
-  </w:style>
-</w:styles>`
-
-// Document body — a fake Klageerwiderung skeleton with every placeholder
-// SubmissionVarsService resolves embedded in natural positions. Each
-// placeholder is in its own run so pass-1 substitution catches it without
-// fragmentation worries. The DEMO marker in the header makes it obvious
-// this is not approved firm content.
-//
-// Structure mirrors a real submission:
-//
-//	1. Firm letterhead + author block (firm.*, user.*, today.*)
-//	2. Court caption (project.*, project.proceeding.*)
-//	3. Parties block (parties.*)
-//	4. Submission title + legal source (rule.*)
-//	5. Deadline (deadline.*)
-//	6. Boilerplate body + signature
-//
-// Order matches what a lawyer drafting a real Klageerwiderung would put
-// at the top of the document, so when the lawyer customises this
-// template later they don't have to restructure.
-func buildDocumentXML() string {
-	var b strings.Builder
-	b.WriteString(`<?xml version="1.0" encoding="UTF-8" standalone="yes"?>`)
-	b.WriteString(`<w:document xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main">`)
-	b.WriteString(`<w:body>`)
-
-	demoBanner(&b)
-
-	heading1(&b, "{{firm.name}} — Patentstreitsachen")
-	plain(&b, "Bearbeiter: {{user.display_name}}")
-	plain(&b, "E-Mail: {{user.email}} · Büro: {{user.office}}")
-	plain(&b, "Datum: {{today.long_de}} ({{today.iso}})")
-
-	heading1(&b, "{{project.court}}")
-	plain(&b, "Aktenzeichen: {{project.case_number}}")
-	plain(&b, "Verfahrensart: {{project.proceeding.name}} ({{project.proceeding.code}})")
-	plain(&b, "Instanz: {{project.instance_level}}")
-
-	heading2(&b, "In der Patentstreitsache")
-	plain(&b, "{{parties.claimant.name}}")
-	plain(&b, "vertreten durch {{parties.claimant.representative}}")
-	bold(&b, "— Klägerin —")
-	plain(&b, "")
-	plain(&b, "gegen")
-	plain(&b, "")
-	plain(&b, "{{parties.defendant.name}}")
-	plain(&b, "vertreten durch {{parties.defendant.representative}}")
-	bold(&b, "— Beklagte —")
-	plainOptional(&b, "Weitere Beteiligte: {{parties.other.name}}, vertreten durch {{parties.other.representative}}")
-
-	heading2(&b, "Betreff")
-	plain(&b, "Streitpatent: {{project.patent_number}} (UPC: {{project.patent_number_upc}})")
-	plain(&b, "Anmeldung: {{project.filing_date}} · Erteilung: {{project.grant_date}}")
-	plain(&b, "Projekttitel: {{project.title}}")
-	plain(&b, "Unsere Seite: {{project.our_side_de}} ({{project.our_side}})")
-	plain(&b, "Mandant: {{project.client_number}} · Matter: {{project.matter_number}}")
-	plain(&b, "Internes Aktenzeichen: {{project.reference}}")
-
-	heading1(&b, "{{rule.name}}")
-	plain(&b, "(Schriftsatz-Code: {{rule.submission_code}})")
-	plain(&b, "Rechtsgrundlage: {{rule.legal_source_pretty}} ({{rule.legal_source}})")
-	plain(&b, "Typische Partei: {{rule.primary_party}} · Schriftsatz-Typ: {{rule.event_type}}")
-
-	heading2(&b, "Frist")
-	plain(&b, "Diese Frist wurde berechnet aus: {{deadline.computed_from}}")
-	plain(&b, "Fälligkeit: {{deadline.due_date_long_de}} ({{deadline.due_date}})")
-	plainOptional(&b, "Ursprüngliche Frist: {{deadline.original_due_date}}")
-	plain(&b, "Frist-Bezeichnung: {{deadline.title}} · Quelle: {{deadline.source}}")
-
-	heading2(&b, "I. Anträge")
-	plain(&b, "Die Beklagte beantragt,")
-	plain(&b, "")
-	plain(&b, "1. die Klage abzuweisen;")
-	plain(&b, "2. der Klägerin die Kosten des Rechtsstreits aufzuerlegen.")
-
-	heading2(&b, "II. Sachverhalt")
-	plain(&b, "[DEMO-Platzhalter] Hier folgt der Sachvortrag der Beklagten zum Streitpatent {{project.patent_number}} und zu den von der Klägerin geltend gemachten Ansprüchen.")
-
-	heading2(&b, "III. Rechtsausführungen")
-	plain(&b, "[DEMO-Platzhalter] Die Beklagte tritt der Klage aus den nachfolgenden Gründen entgegen.")
-
-	heading2(&b, "Schlussformel")
-	plain(&b, "{{today.long_de}}")
-	plain(&b, "")
-	plain(&b, "{{user.display_name}}")
-	plain(&b, "{{firm.name}}")
-	plainOptional(&b, "{{firm.signature_block}}")
-
-	// English-locale exercise — lets the lawyer verify the EN long-form
-	// date and EN proceeding name resolve correctly when the user's
-	// preference is en.
-	heading2(&b, "Locale-aware variants (DEMO)")
-	plain(&b, "EN long date: {{today.long_en}} · Deadline EN: {{deadline.due_date_long_en}}")
-	plain(&b, "Project our side (EN): {{project.our_side_en}} · Proceeding (EN): {{project.proceeding.name_en}}")
-	plain(&b, "Rule name (EN): {{rule.name_en}} · Project our side (DE): {{project.our_side_de}}")
-	plain(&b, "Proceeding (DE): {{project.proceeding.name_de}} · Rule name (DE): {{rule.name_de}}")
-
-	b.WriteString(`</w:body></w:document>`)
-	return b.String()
-}
-
-// demoBanner writes a clearly-marked DEMO header so the file can't be
-// mistaken for approved firm content (HLC branding compliance has not
-// reviewed this — it's a developer-authored placeholder fixture).
-func demoBanner(b *strings.Builder) {
-	b.WriteString(`<w:p><w:pPr><w:pStyle w:val="Heading1"/></w:pPr><w:r><w:rPr><w:b/><w:color w:val="C00000"/></w:rPr><w:t xml:space="preserve">DEMO — interne Vorlage (nicht freigegeben)</w:t></w:r></w:p>`)
-}
-
-// heading1 emits a styled "Heading 1" paragraph with placeholder runs
-// emitted intact (one run per placeholder so pass-1 substitution works).
-func heading1(b *strings.Builder, text string) { paragraph(b, "Heading1", text, false) }
-
-// heading2 emits a "Heading 2" paragraph.
-func heading2(b *strings.Builder, text string) { paragraph(b, "Heading2", text, false) }
-
-// plain emits a Normal-style paragraph.
-func plain(b *strings.Builder, text string) { paragraph(b, "", text, false) }
-
-// plainOptional is a Normal paragraph rendered as italic so the lawyer
-// recognises rows that contain placeholders which may be empty
-// (parties.other.*, deadline.original_due_date, firm.signature_block).
-// Visual cue only; the merge engine still substitutes the same way.
-func plainOptional(b *strings.Builder, text string) { paragraph(b, "", text, true) }
-
-// bold emits a Normal paragraph with bold run formatting.
-func bold(b *strings.Builder, text string) {
-	b.WriteString(`<w:p>`)
-	b.WriteString(`<w:r><w:rPr><w:b/></w:rPr><w:t xml:space="preserve">`)
-	b.WriteString(xmlEscape(text))
-	b.WriteString(`</w:t></w:r></w:p>`)
-}
-
-// paragraph splits text on placeholder boundaries and emits one <w:r>
-// per segment. Each placeholder occupies a dedicated run so the
-// renderer's pass-1 substitution (format-preserving, single-run) hits
-// the placeholder without the cross-run fallback. Italic runs are
-// flagged via the italic argument.
-func paragraph(b *strings.Builder, style, text string, italic bool) {
-	b.WriteString(`<w:p>`)
-	if style != "" {
-		b.WriteString(`<w:pPr><w:pStyle w:val="`)
-		b.WriteString(style)
-		b.WriteString(`"/></w:pPr>`)
-	}
-	for _, seg := range splitOnPlaceholders(text) {
-		b.WriteString(`<w:r>`)
-		if italic {
-			b.WriteString(`<w:rPr><w:i/></w:rPr>`)
-		}
-		b.WriteString(`<w:t xml:space="preserve">`)
-		b.WriteString(xmlEscape(seg))
-		b.WriteString(`</w:t></w:r>`)
-	}
-	b.WriteString(`</w:p>`)
-}
-
-// splitOnPlaceholders returns the input split into alternating text /
-// placeholder segments while keeping each placeholder intact in its own
-// segment. Empty input yields a single empty segment so the paragraph
-// still emits a (visible) blank line.
-func splitOnPlaceholders(s string) []string {
-	if s == "" {
-		return []string{""}
-	}
-	var out []string
-	for {
-		open := strings.Index(s, "{{")
-		if open < 0 {
-			out = append(out, s)
-			return out
-		}
-		close := strings.Index(s[open:], "}}")
-		if close < 0 {
-			out = append(out, s)
-			return out
-		}
-		end := open + close + 2
-		if open > 0 {
-			out = append(out, s[:open])
-		}
-		out = append(out, s[open:end])
-		s = s[end:]
-		if s == "" {
-			return out
-		}
-	}
-}
-
-// xmlEscape handles the five XML-significant characters for <w:t>
-// content. Whitespace is preserved by the xml:space="preserve" attr we
-// always emit on text runs.
-func xmlEscape(s string) string {
-	s = strings.ReplaceAll(s, "&", "&amp;")
-	s = strings.ReplaceAll(s, "<", "&lt;")
-	s = strings.ReplaceAll(s, ">", "&gt;")
-	s = strings.ReplaceAll(s, `"`, "&quot;")
-	s = strings.ReplaceAll(s, "'", "&apos;")
-	return s
-}