fix(billing): expand Stripe charge object to fix dispute counting bug

- Add expand: [data.charge] to disputes.list() to get full charge object
- Without this, dispute.charge.customer is undefined and no disputes match
- Use NEXT_PUBLIC_SUPPORT_EMAIL env var instead of hardcoded email
- Add regression test to prevent this bug from recurring
- Simplify dispute email CTA

Author: brandonkachen

packages/internal/src/loops/client.ts

@@ -225,7 +225,7 @@ If there was a problem with your experience or a charge you didn't recognize, pl
 
 Working with us directly is often faster than going through your bank, and it helps us improve our service for everyone.
 
-Please reply to this email or contact our support team - we're here to help!
+Just reply to this email - we're here to help!
 
 Best regards,
 The Codebuff Team`

web/src/app/api/v1/chat/completions/__tests__/completions.test.ts

@@ -382,11 +382,9 @@ describe('/api/v1/chat/completions POST endpoint', () => {
 
       expect(response.status).toBe(403)
       const body = await response.json()
-      expect(body).toEqual({
-        error: 'account_suspended',
-        message:
-          'Your account has been suspended due to billing issues. Please contact support@codebuff.com to resolve this.',
-      })
+      expect(body.error).toBe('account_suspended')
+      expect(body.message).toContain('Your account has been suspended due to billing issues')
+      expect(body.message).toContain('to resolve this')
     })
   })
 

web/src/app/api/v1/chat/completions/_post.ts

@@ -159,8 +159,7 @@ export async function postChatCompletions(params: {
       return NextResponse.json(
         {
           error: 'account_suspended',
-          message:
-            'Your account has been suspended due to billing issues. Please contact support@codebuff.com to resolve this.',
+          message: `Your account has been suspended due to billing issues. Please contact ${env.NEXT_PUBLIC_SUPPORT_EMAIL} to resolve this.`,
         },
         { status: 403 },
       )

web/src/lib/__tests__/ban-conditions.test.ts

@@ -42,7 +42,7 @@ mock.module('@codebuff/internal/db/schema', () => ({
 }))
 
 // Mock Stripe server
-const mockDisputesList = mock(() =>
+const mockDisputesList = mock((): Promise<{ data: any[] }> =>
   Promise.resolve({
     data: [],
   }),
@@ -244,7 +244,7 @@ describe('ban-conditions', () => {
       expect(result.shouldBan).toBe(true)
     })
 
-    it('calls Stripe API with correct time window', async () => {
+    it('calls Stripe API with correct time window and expand parameter', async () => {
       mockDisputesList.mockResolvedValueOnce({ data: [] })
 
       const logger = createMockLogger()
@@ -259,8 +259,10 @@ describe('ban-conditions', () => {
       const afterCall = Math.floor(Date.now() / 1000)
 
       expect(mockDisputesList).toHaveBeenCalledTimes(1)
-      const callArgs = mockDisputesList.mock.calls[0][0]
+      const callArgs = (mockDisputesList.mock.calls as any)[0]?.[0]
       expect(callArgs.limit).toBe(100)
+      // Verify expand parameter is set to get full charge object
+      expect(callArgs.expand).toEqual(['data.charge'])
 
       // Verify the created.gte is within the expected window
       const expectedWindowStart = beforeCall - DISPUTE_WINDOW_DAYS * 24 * 60 * 60
@@ -269,6 +271,30 @@ describe('ban-conditions', () => {
       expect(callArgs.created.gte).toBeLessThanOrEqual(expectedWindowStart + windowTolerance)
     })
 
+    // REGRESSION TEST: Without expand: ['data.charge'], dispute.charge is a string ID,
+    // not an object, so dispute.charge.customer is undefined and no disputes match.
+    // This test ensures we always expand the charge object.
+    it('REGRESSION: must expand data.charge to access customer field', async () => {
+      mockDisputesList.mockResolvedValueOnce({ data: [] })
+
+      const logger = createMockLogger()
+      const context: BanConditionContext = {
+        userId: 'user-123',
+        stripeCustomerId: 'cus_123',
+        logger,
+      }
+
+      await evaluateBanConditions(context)
+
+      const callArgs = (mockDisputesList.mock.calls as any)[0]?.[0]
+      
+      // This is critical: without expand, dispute.charge is just a string ID like "ch_xxx"
+      // and we cannot access dispute.charge.customer to filter by customer.
+      // If this test fails, the ban condition will NEVER match any disputes.
+      expect(callArgs.expand).toBeDefined()
+      expect(callArgs.expand).toContain('data.charge')
+    })
+
     it('logs debug message after checking condition', async () => {
       mockDisputesList.mockResolvedValueOnce({ data: [] })
 

web/src/lib/ban-conditions.ts

@@ -54,6 +54,7 @@ async function disputeThresholdCondition(
   const disputes = await stripeServer.disputes.list({
     limit: 100,
     created: { gte: windowStart },
+    expand: ['data.charge'],
   })
 
   // Filter to only this customer's disputes