fix(dispatch): route pull_request_target.labeled to review stage

.github/workflows/reusable-dispatch.yml

@@ -272,6 +272,11 @@ jobs:
                     STAGE="review"
                   fi
                   ;;
+                labeled)
+                  if [[ "${TRIGGERING_LABEL}" == "ready-for-review" ]]; then
+                    STAGE="review"
+                  fi
+                  ;;
                 closed)
                   STAGE="retro"
                   ;;

internal/harnessdispatch/auth_test.go

@@ -99,6 +99,22 @@ func TestIsAuthorized_LabelRemovedRequiresWriteRole(t *testing.T) {
 	assert.False(t, IsAuthorized(ev))
 }
 
+func TestIsAuthorized_BotOpenedPRFallsThrough(t *testing.T) {
+	// Bot-opened PR events have no special bypass in the pre-CEL gate.
+	// Trusted-bot handling lives in bash dispatch (is_trusted_bot) and
+	// CEL trigger expressions, not here.
+	ev := &normevent.Event{
+		Transition: normevent.Transition{Kind: normevent.TransitionOpened},
+		Source:     normevent.Source{System: normevent.SystemGitHub},
+		Actor: normevent.Actor{
+			ID:   "myapp-coder[bot]",
+			Kind: normevent.ActorBot,
+			Role: normevent.RoleNone,
+		},
+	}
+	assert.False(t, IsAuthorized(ev))
+}
+
 func TestIsAuthorized_OpenedRequiresWriteRole(t *testing.T) {
 	ev := &normevent.Event{
 		Transition: normevent.Transition{Kind: normevent.TransitionOpened},

internal/harnessdispatch/input/ghaevent_test.go

@@ -81,6 +81,41 @@ func TestLoadGHAEvent_PROpened(t *testing.T) {
 	assert.NotNil(t, ev.State.ChangeProposal)
 }
 
+func TestLoadGHAEvent_PROpenedByBot(t *testing.T) {
+	raw := map[string]any{
+		"action": "opened",
+		"pull_request": map[string]any{
+			"number":   float64(101),
+			"html_url": "https://github.com/o/r/pull/101",
+			"user":     map[string]any{"login": "myapp-coder[bot]"},
+			"labels":   []any{},
+			"head": map[string]any{
+				"ref":  "agent/fix-thing",
+				"sha":  "cccccccccccccccccccccccccccccccccccccccc",
+				"repo": map[string]any{"full_name": "o/r"},
+			},
+			"base": map[string]any{
+				"ref":  "main",
+				"repo": map[string]any{"full_name": "o/r"},
+			},
+		},
+		"sender": map[string]any{"login": "myapp-coder[bot]", "type": "Bot"},
+	}
+	path := writeEventFile(t, raw)
+
+	client := forge.NewFakeClient()
+
+	ev, err := input.LoadGHAEvent(context.Background(), input.GHAEventOptions{
+		EventPath:  path,
+		EventName:  "pull_request_target",
+		Repository: "o/r",
+		Forge:      client,
+	})
+	require.NoError(t, err)
+	assert.Equal(t, normevent.ActorBot, ev.Actor.Kind)
+	assert.Equal(t, normevent.RoleNone, ev.Actor.Role)
+}
+
 func TestLoadGHAEvent_PRLabeled(t *testing.T) {
 	raw := map[string]any{
 		"action": "labeled",

internal/scaffold/fullsend-repo/.github/workflows/dispatch.yml

@@ -204,6 +204,11 @@ jobs:
                     STAGE="review"
                   fi
                   ;;
+                labeled)
+                  if [[ "${TRIGGERING_LABEL}" == "ready-for-review" ]]; then
+                    STAGE="review"
+                  fi
+                  ;;
                 closed)
                   STAGE="retro"
                   ;;