Close the UI-review follow-ups: names typeahead, fleet form, overflow flip.

Staff pages typeahead customers by name (Ada, not cust_1). Add-machine is
two rows with a wide identity path and filename picker. Overflow menus
flip up near the viewport edge. Customer list no longer leaks password
hashes. UI-REVIEW.pdf remaining list is the three leftover items.

packages/zappier-customer-service/README.md

@@ -14,7 +14,8 @@ curl -X POST http://127.0.0.1:3011/credits -H 'content-type: application/json' \
 
 | Route | Job |
 |-------|-----|
-| `GET /` | Staff review UI |
+| `GET /` | Staff review UI (typeahead names). `STAFF_AUTH=1` redirects to `verae-staff-session`. |
+| `GET /customers` | `{ customers }` from zappier-edge |
 | `GET /health` | `{ ok, role }` |
 | `POST /credits` | Add/subtract prepaid cents (NATS `balance.adjust`) |
 | `GET /credits?customerId=` | Ledger |

packages/zappier-customer-service/public/index.html

@@ -58,8 +58,9 @@
       <div class="card">
         <div class="row">
           <div>
-            <label for="id">Customer id or name</label>
-            <input id="id" value="cust_1" autocomplete="off" />
+            <label for="id">Customer</label>
+            <input id="id" list="cust-list" placeholder="Type a name or id" autocomplete="off" />
+            <datalist id="cust-list"></datalist>
           </div>
           <button type="button" onclick="review()">Review account</button>
         </div>
@@ -112,6 +113,18 @@
           <div class="card"><h3>Usage</h3>${moneyTable(st.usage, [{key:'endpointId',label:'Endpoint'},{key:'cents',label:'Amount'},{key:'at',label:'When'}], 'No usage yet')}</div>
           <div class="card"><h3>Payments</h3>${moneyTable(st.payments, [{key:'cents',label:'Amount'},{key:'kind',label:'Kind'},{key:'reason',label:'Reason'},{key:'at',label:'When'}], 'No payments yet')}</div>`;
       }
+      async function loadCustomers() {
+        try {
+          const { customers } = await (await fetch('/customers')).json();
+          document.getElementById('cust-list').innerHTML = (customers || [])
+            .map((c) => `<option value="${c.name}">${c.id}</option>`)
+            .join('');
+          if (customers && customers[0] && !document.getElementById('id').value) {
+            document.getElementById('id').value = customers[0].name;
+          }
+        } catch { /* edge optional */ }
+      }
+      loadCustomers();
       async function review() {
         const id = document.getElementById('id').value.trim();
         try {

packages/zappier-customer-service/src/names.js

@@ -1,4 +1,16 @@
 /** Join ledger ids to zappier-edge customer display names. */
+export async function listCustomers(edge, key) {
+  try {
+    const r = await fetch(`${edge.replace(/\/$/, '')}/admin/api/customers`, {
+      headers: { 'x-admin-key': key },
+    });
+    const body = await r.json();
+    return (body.customers || []).map(({ passwordHash, apiKey, totpSecret, ...rest }) => rest);
+  } catch {
+    return [];
+  }
+}
+
 export async function withCustomerName(st, idOrName, edge, key) {
   const out = { ...(st || {}) };
   if (out.name && out.customerId) return out;

packages/zappier-customer-service/src/server.js

@@ -7,7 +7,7 @@ import http from 'node:http';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { SUBJECTS, billingRequest } from './nats-billing.js';
-import { withCustomerName } from './names.js';
+import { listCustomers, withCustomerName } from './names.js';
 
 const PUBLIC = path.join(path.dirname(fileURLToPath(import.meta.url)), '..', 'public');
 
@@ -50,6 +50,9 @@ const server = http.createServer(async (req, res) => {
     if (req.method === 'GET' && url.pathname === '/health') {
       return json(200, { ok: true, role: 'zappier-customer-service', nats: Boolean(process.env.NATS_URL) });
     }
+    if (req.method === 'GET' && url.pathname === '/customers') {
+      return json(200, { customers: await listCustomers(EDGE, KEY) });
+    }
     const review = url.pathname.match(/^\/review\/([^/]+)$/);
     if (req.method === 'GET' && review) {
       const id = decodeURIComponent(review[1]);