From 80d6849f7ad56cf17c6a8b30d6fa801fbcc9d1f1 Mon Sep 17 00:00:00 2001
From: anandgupta42 <93243293+anandgupta42@users.noreply.github.com>
Date: Tue, 7 Jul 2026 20:58:16 -0700
Subject: [PATCH 1/3] ci: add aireceipts pr-check (notice-only cost receipt)

---
 .github/workflows/aireceipts.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 .github/workflows/aireceipts.yml

diff --git a/.github/workflows/aireceipts.yml b/.github/workflows/aireceipts.yml
new file mode 100644
index 0000000..0d0d032
--- /dev/null
+++ b/.github/workflows/aireceipts.yml
@@ -0,0 +1,12 @@
+name: aireceipts
+on: [pull_request]
+permissions:
+  contents: read
+  pull-requests: write
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - run: npx -y aireceipts-cli@latest pr-check
+        env:
+          GH_TOKEN: ${{ github.token }}

From f13c3a2e26f3d7ead5d1469df9d8c832c02afb77 Mon Sep 17 00:00:00 2001
From: anandgupta42 <93243293+anandgupta42@users.noreply.github.com>
Date: Tue, 7 Jul 2026 22:38:12 -0700
Subject: [PATCH 2/3] ci: pin aireceipts-cli@0.5.0 (supply-chain: no mutable
 @latest with write token)

---
 .github/workflows/aireceipts.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/aireceipts.yml b/.github/workflows/aireceipts.yml
index 0d0d032..667b2e0 100644
--- a/.github/workflows/aireceipts.yml
+++ b/.github/workflows/aireceipts.yml
@@ -7,6 +7,6 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - run: npx -y aireceipts-cli@latest pr-check
+      - run: npx -y aireceipts-cli@0.5.0 pr-check
         env:
           GH_TOKEN: ${{ github.token }}

From ed1328e83ed1dfdfc50a3ba299a6665fabbcec70 Mon Sep 17 00:00:00 2001
From: anandgupta42 <93243293+anandgupta42@users.noreply.github.com>
Date: Tue, 7 Jul 2026 22:45:17 -0700
Subject: [PATCH 3/3] ci: revert to aireceipts-cli@latest (internal repos stay
 on @latest)

---
 .github/workflows/aireceipts.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/aireceipts.yml b/.github/workflows/aireceipts.yml
index 667b2e0..0d0d032 100644
--- a/.github/workflows/aireceipts.yml
+++ b/.github/workflows/aireceipts.yml
@@ -7,6 +7,6 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - run: npx -y aireceipts-cli@0.5.0 pr-check
+      - run: npx -y aireceipts-cli@latest pr-check
         env:
           GH_TOKEN: ${{ github.token }}