feat: Phase 6 — Global Search, CSV Export, Printable Invoice

- Add SearchController (GET /search?q=) returning JSON results for
  invoices, contacts, products, purchase orders, and employees;
  permission-gated per module, debounced in the client
- Add CommandPalette component (Cmd/Ctrl+K) with keyboard navigation,
  type badges, and backdrop dismiss; wired into AppLayout
- Add ExportController with streaming CSV downloads for products,
  invoices, and employees; gated by viewAny policy
- Add export routes under /export/{products,invoices,employees}
- Add Export CSV buttons to Products, Invoices, and Employees index pages
- Add InvoiceController::print() rendering standalone Print page with
  company name and currency from TenantSetting
- Add printable invoice page (Finance/Invoices/Print) with print:hidden
  controls bar and window.print() button
- Add Print / PDF button to Invoice Show page
- Fix ExportController: selling_price → sale_price (Product field name)
- Add SearchTest (6 tests) and ExportTest (5 tests); all 172 tests pass

https://claude.ai/code/session_01RdUGwo74JXChRCF88Yu27d

Author: claude

erp/app/Http/Controllers/ExportController.php

@@ -0,0 +1,93 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Modules\Finance\Models\Invoice;
+use App\Modules\HR\Models\Employee;
+use App\Modules\Inventory\Models\Product;
+use Illuminate\Support\Facades\Gate;
+use Symfony\Component\HttpFoundation\StreamedResponse;
+
+class ExportController extends Controller
+{
+    public function products(): StreamedResponse
+    {
+        Gate::authorize('viewAny', Product::class);
+
+        return response()->streamDownload(function () {
+            $out = fopen('php://output', 'w');
+            fputcsv($out, ['SKU', 'Name', 'Category', 'Cost Price', 'Selling Price', 'Reorder Point', 'Active']);
+
+            Product::with('category')->chunk(200, function ($products) use ($out) {
+                foreach ($products as $p) {
+                    fputcsv($out, [
+                        $p->sku ?? '',
+                        $p->name,
+                        $p->category?->name ?? '',
+                        $p->cost_price,
+                        $p->sale_price,
+                        $p->reorder_point,
+                        $p->is_active ? 'Yes' : 'No',
+                    ]);
+                }
+            });
+
+            fclose($out);
+        }, 'products-' . now()->format('Y-m-d') . '.csv', ['Content-Type' => 'text/csv']);
+    }
+
+    public function invoices(): StreamedResponse
+    {
+        Gate::authorize('viewAny', Invoice::class);
+
+        return response()->streamDownload(function () {
+            $out = fopen('php://output', 'w');
+            fputcsv($out, ['Number', 'Contact', 'Status', 'Issue Date', 'Due Date', 'Total', 'Amount Due']);
+
+            Invoice::with(['contact', 'items', 'payments'])->chunk(200, function ($invoices) use ($out) {
+                foreach ($invoices as $inv) {
+                    fputcsv($out, [
+                        $inv->number ?? '',
+                        $inv->contact?->name ?? '',
+                        $inv->status,
+                        $inv->issue_date?->toDateString() ?? '',
+                        $inv->due_date?->toDateString() ?? '',
+                        $inv->total,
+                        $inv->amount_due,
+                    ]);
+                }
+            });
+
+            fclose($out);
+        }, 'invoices-' . now()->format('Y-m-d') . '.csv', ['Content-Type' => 'text/csv']);
+    }
+
+    public function employees(): StreamedResponse
+    {
+        Gate::authorize('viewAny', Employee::class);
+
+        return response()->streamDownload(function () {
+            $out = fopen('php://output', 'w');
+            fputcsv($out, ['Employee #', 'First Name', 'Last Name', 'Email', 'Position', 'Department', 'Type', 'Status', 'Start Date', 'Salary']);
+
+            Employee::with('department')->chunk(200, function ($employees) use ($out) {
+                foreach ($employees as $emp) {
+                    fputcsv($out, [
+                        $emp->employee_number ?? '',
+                        $emp->first_name,
+                        $emp->last_name,
+                        $emp->email ?? '',
+                        $emp->position ?? '',
+                        $emp->department?->name ?? '',
+                        $emp->employment_type,
+                        $emp->status,
+                        $emp->start_date?->toDateString() ?? '',
+                        $emp->salary_amount,
+                    ]);
+                }
+            });
+
+            fclose($out);
+        }, 'employees-' . now()->format('Y-m-d') . '.csv', ['Content-Type' => 'text/csv']);
+    }
+}

erp/app/Http/Controllers/SearchController.php

@@ -0,0 +1,56 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Modules\Finance\Models\Contact;
+use App\Modules\Finance\Models\Invoice;
+use App\Modules\HR\Models\Employee;
+use App\Modules\Inventory\Models\Product;
+use App\Modules\Inventory\Models\PurchaseOrder;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class SearchController extends Controller
+{
+    private const LIMIT = 5;
+
+    public function __invoke(Request $request): JsonResponse
+    {
+        $query = trim($request->get('q', ''));
+
+        if (strlen($query) < 2) {
+            return response()->json(['results' => []]);
+        }
+
+        $user    = auth()->user();
+        $results = [];
+
+        if ($user->can('finance.view')) {
+            foreach (Invoice::where('number', 'like', "%{$query}%")->with('contact')->limit(self::LIMIT)->get() as $inv) {
+                $results[] = ['type' => 'Invoice', 'label' => $inv->number ?? "Invoice #{$inv->id}", 'sub' => $inv->contact?->name ?? '', 'href' => "/finance/invoices/{$inv->id}"];
+            }
+
+            foreach (Contact::search($query)->limit(self::LIMIT)->get() as $c) {
+                $results[] = ['type' => 'Contact', 'label' => $c->name, 'sub' => $c->email ?? '', 'href' => "/finance/contacts"];
+            }
+        }
+
+        if ($user->can('inventory.view')) {
+            foreach (Product::search($query)->limit(self::LIMIT)->get() as $p) {
+                $results[] = ['type' => 'Product', 'label' => $p->name, 'sub' => $p->sku ?? '', 'href' => "/inventory/products/{$p->id}"];
+            }
+
+            foreach (PurchaseOrder::with('supplier')->where('id', 'like', "%{$query}%")->orWhereHas('supplier', fn ($q) => $q->where('name', 'like', "%{$query}%"))->limit(self::LIMIT)->get() as $po) {
+                $results[] = ['type' => 'Purchase Order', 'label' => "PO #{$po->id}", 'sub' => $po->supplier?->name ?? '', 'href' => "/inventory/purchase-orders/{$po->id}"];
+            }
+        }
+
+        if ($user->can('hr.view')) {
+            foreach (Employee::search($query)->limit(self::LIMIT)->get() as $emp) {
+                $results[] = ['type' => 'Employee', 'label' => $emp->full_name, 'sub' => $emp->position ?? '', 'href' => "/hr/employees/{$emp->id}"];
+            }
+        }
+
+        return response()->json(['results' => $results]);
+    }
+}

erp/app/Modules/Core/routes/core.php

@@ -4,7 +4,9 @@
 use App\Http\Controllers\Admin\UserController;
 use App\Http\Controllers\AnalyticsController;
 use App\Http\Controllers\DashboardController;
+use App\Http\Controllers\ExportController;
 use App\Http\Controllers\NotificationController;
+use App\Http\Controllers\SearchController;
 use App\Http\Controllers\SettingController;
 use Illuminate\Support\Facades\Route;
 
@@ -18,6 +20,14 @@
     Route::patch('/notifications/read-all', [NotificationController::class, 'markAllRead'])->name('notifications.read-all');
     Route::delete('/notifications/{id}', [NotificationController::class, 'destroy'])->name('notifications.destroy');
 
+    Route::get('/search', SearchController::class)->name('search');
+
+    Route::prefix('export')->name('export.')->group(function () {
+        Route::get('products',  [ExportController::class, 'products'])->name('products');
+        Route::get('invoices',  [ExportController::class, 'invoices'])->name('invoices');
+        Route::get('employees', [ExportController::class, 'employees'])->name('employees');
+    });
+
     Route::get('/settings', [SettingController::class, 'edit'])->name('settings.edit');
     Route::put('/settings', [SettingController::class, 'update'])->name('settings.update');
 

erp/app/Modules/Finance/Http/Controllers/InvoiceController.php

@@ -3,6 +3,7 @@
 namespace App\Modules\Finance\Http\Controllers;
 
 use App\Http\Controllers\Controller;
+use App\Modules\Core\Models\TenantSetting;
 use App\Modules\Finance\Http\Requests\StoreInvoiceRequest;
 use App\Modules\Finance\Http\Requests\StorePaymentRequest;
 use App\Modules\Finance\Http\Resources\InvoiceResource;
@@ -161,6 +162,21 @@ public function recordPayment(StorePaymentRequest $request, Invoice $invoice): R
         return back()->with('success', 'Payment recorded.');
     }
 
+    public function print(Invoice $invoice): Response
+    {
+        $this->authorize('view', $invoice);
+
+        $invoice->load(['contact', 'items', 'payments', 'creator']);
+
+        $tenantId = auth()->user()->tenant_id;
+
+        return Inertia::render('Finance/Invoices/Print', [
+            'invoice'  => new InvoiceResource($invoice),
+            'company'  => TenantSetting::getValue($tenantId, 'company_name', 'My Company'),
+            'currency' => TenantSetting::getValue($tenantId, 'currency', 'USD'),
+        ]);
+    }
+
     public function destroy(Invoice $invoice): RedirectResponse
     {
         $this->authorize('delete', $invoice);

erp/app/Modules/Finance/routes/finance.php

@@ -26,6 +26,8 @@
     Route::patch('invoices/{invoice}/cancel', [InvoiceController::class, 'cancel'])->name('invoices.cancel');
     Route::post('invoices/{invoice}/payments', [InvoiceController::class, 'recordPayment'])
         ->name('invoices.payments.store');
+    Route::get('invoices/{invoice}/print', [InvoiceController::class, 'print'])
+        ->name('invoices.print');
 
     // Reports
     Route::get('reports/trial-balance', [ReportController::class, 'trialBalance'])

erp/resources/js/Components/Layout/CommandPalette.tsx

@@ -0,0 +1,153 @@
+import { router } from '@inertiajs/react';
+import { useEffect, useRef, useState } from 'react';
+
+interface SearchResult {
+    type: string;
+    label: string;
+    sub?: string;
+    href: string;
+}
+
+interface Props {
+    open: boolean;
+    onClose: () => void;
+}
+
+const TYPE_COLORS: Record<string, string> = {
+    'Invoice':        'bg-blue-100 text-blue-700',
+    'Contact':        'bg-purple-100 text-purple-700',
+    'Product':        'bg-emerald-100 text-emerald-700',
+    'Purchase Order': 'bg-amber-100 text-amber-700',
+    'Employee':       'bg-teal-100 text-teal-700',
+};
+
+export function CommandPalette({ open, onClose }: Props) {
+    const [query, setQuery] = useState('');
+    const [results, setResults] = useState<SearchResult[]>([]);
+    const [loading, setLoading] = useState(false);
+    const [selected, setSelected] = useState(0);
+    const inputRef = useRef<HTMLInputElement>(null);
+
+    useEffect(() => {
+        if (open) {
+            setQuery('');
+            setResults([]);
+            setSelected(0);
+            setTimeout(() => inputRef.current?.focus(), 50);
+        }
+    }, [open]);
+
+    useEffect(() => {
+        if (query.length < 2) { setResults([]); return; }
+
+        const timer = setTimeout(async () => {
+            setLoading(true);
+            try {
+                const res = await fetch(`/search?q=${encodeURIComponent(query)}`, {
+                    headers: { 'X-Requested-With': 'XMLHttpRequest' },
+                });
+                const data = await res.json();
+                setResults(data.results ?? []);
+                setSelected(0);
+            } catch {
+                setResults([]);
+            } finally {
+                setLoading(false);
+            }
+        }, 280);
+
+        return () => clearTimeout(timer);
+    }, [query]);
+
+    function navigate(href: string) {
+        router.visit(href);
+        onClose();
+    }
+
+    function handleKeyDown(e: React.KeyboardEvent) {
+        if (e.key === 'Escape') { onClose(); return; }
+        if (e.key === 'ArrowDown') { e.preventDefault(); setSelected((s) => Math.min(s + 1, results.length - 1)); }
+        if (e.key === 'ArrowUp') { e.preventDefault(); setSelected((s) => Math.max(s - 1, 0)); }
+        if (e.key === 'Enter' && results[selected]) { navigate(results[selected].href); }
+    }
+
+    if (!open) return null;
+
+    return (
+        <div
+            className="fixed inset-0 z-50 flex items-start justify-center pt-20 px-4"
+            onClick={onClose}
+        >
+            {/* Backdrop */}
+            <div className="absolute inset-0 bg-slate-900/40 backdrop-blur-sm" />
+
+            {/* Palette */}
+            <div
+                className="relative w-full max-w-xl rounded-xl border border-slate-200 bg-white shadow-2xl overflow-hidden"
+                onClick={(e) => e.stopPropagation()}
+            >
+                {/* Input */}
+                <div className="flex items-center gap-3 px-4 py-3 border-b border-slate-200">
+                    <svg className="h-5 w-5 text-slate-400 shrink-0" fill="none" stroke="currentColor" strokeWidth={1.75} viewBox="0 0 24 24">
+                        <path strokeLinecap="round" strokeLinejoin="round" d="M21 21l-5.197-5.197m0 0A7.5 7.5 0 105.196 5.196a7.5 7.5 0 0010.607 10.607z" />
+                    </svg>
+                    <input
+                        ref={inputRef}
+                        type="text"
+                        value={query}
+                        onChange={(e) => setQuery(e.target.value)}
+                        onKeyDown={handleKeyDown}
+                        placeholder="Search invoices, employees, products…"
+                        className="flex-1 text-sm text-slate-900 placeholder:text-slate-400 focus:outline-none"
+                    />
+                    <kbd className="hidden sm:flex items-center gap-0.5 rounded border border-slate-200 bg-slate-50 px-1.5 py-0.5 text-[10px] text-slate-400">
+                        ESC
+                    </kbd>
+                </div>
+
+                {/* Results */}
+                {loading && (
+                    <div className="px-4 py-3 text-sm text-slate-400">Searching…</div>
+                )}
+
+                {!loading && query.length >= 2 && results.length === 0 && (
+                    <div className="px-4 py-6 text-center text-sm text-slate-400">No results for "{query}"</div>
+                )}
+
+                {!loading && results.length > 0 && (
+                    <ul className="max-h-80 overflow-y-auto py-1">
+                        {results.map((r, i) => (
+                            <li key={`${r.type}-${r.href}-${i}`}>
+                                <button
+                                    className={[
+                                        'w-full flex items-center gap-3 px-4 py-2.5 text-left transition-colors',
+                                        i === selected ? 'bg-indigo-50' : 'hover:bg-slate-50',
+                                    ].join(' ')}
+                                    onClick={() => navigate(r.href)}
+                                    onMouseEnter={() => setSelected(i)}
+                                >
+                                    <span className={`shrink-0 inline-flex items-center rounded-full px-2 py-0.5 text-[10px] font-medium ${TYPE_COLORS[r.type] ?? 'bg-slate-100 text-slate-600'}`}>
+                                        {r.type}
+                                    </span>
+                                    <span className="flex-1 min-w-0">
+                                        <span className="block text-sm font-medium text-slate-900 truncate">{r.label}</span>
+                                        {r.sub && <span className="block text-xs text-slate-500 truncate">{r.sub}</span>}
+                                    </span>
+                                    <svg className="h-4 w-4 text-slate-300 shrink-0" fill="none" stroke="currentColor" strokeWidth={1.75} viewBox="0 0 24 24">
+                                        <path strokeLinecap="round" strokeLinejoin="round" d="M13.5 4.5L21 12m0 0l-7.5 7.5M21 12H3" />
+                                    </svg>
+                                </button>
+                            </li>
+                        ))}
+                    </ul>
+                )}
+
+                {!query && (
+                    <div className="px-4 py-4 text-xs text-slate-400">
+                        Type at least 2 characters to search across invoices, employees, products, and more.
+                    </div>
+                )}
+            </div>
+        </div>
+    );
+}