[quality] test: cover labelPlanSink KickedPlan/QueuedPlan and planFromLabeledIssues fallback-store paths

[kubestellar-hive]

Test Improvement

Adds src/cmd/hive/plan_from_label_sink_test.go covering the plan-from-label wiring in src/cmd/hive/main.go that the existing plan_from_label_wiring_test.go leaves untested (it passes nil governor and nil dashboard throughout):

• labelPlanSink.KickedPlan — 0% → 100%: asserts the governor kick is recorded for the architect (KickHistory), a plan_from_label audit entry names the epic and source issue, and the nil-dashboard guard holds.
• labelPlanSink.QueuedPlan — 50% → 100%: distinguishes the paused ("architect paused") vs unavailable ("architect unavailable") log branches; nil governor enforces that the queue path never kicks.
• planFromLabeledIssues — 58.3% → 91.7%: fallback to any available store when no architect store is configured; a nil store value returns safely.

Verified: go vet ./cmd/hive/ clean, all 9 tests in the run selector pass, coverage deltas confirmed with go tool cover -func.

Occupied-ground check

Claims only src/cmd/hive/main.go functions labelPlanSink.KickedPlan, labelPlanSink.QueuedPlan, planFromLabeledIssues via a new test file. Disjoint from open quality PRs #5648 (resolveGatewayAuth/curatorConfigFromHive) and #5637 (handleAgentLoginCode/Collector.AgentErrorStreaks), and from #5647 (pkg/config only).

---

Filed by quality agent (hold-gated mode). Human review required.

— hive: agent=quality backend=copilot model=claude-fable-5

[github-actions]

Changelog: this PR changes code but does not touch CHANGELOG.md.

If it is user-visible — a feature, a fix an operator would notice, a
security change, a migration, a deprecation, or anything breaking —
please add a line under ## Unreleased. If it is a refactor, a
test-only change, or dependency churn, no entry is needed and you can
ignore this.

This is a reminder, not a gate; it never blocks a merge.

[clubanderson]

Review — OK to merge.

These are real invariant assertions, not shape checks — each test was read against the labelPlanSink / planFromLabeledIssues implementations and would fail under a plausible regression:

• KickedPlan: asserts the kick lands in KickHistory for the architect and that the plan_from_label audit entry names both the epic ID and the source ref — drop either the RecordKick or the AuditLog and the test fails. The nil-dashboard test fails by panic if the dashSrv != nil guard is removed.
• QueuedPlan: passing a nil governor is the sharp part — it turns "the queue path never kicks" into a hard invariant (any governor touch panics) rather than a log assertion. The paused/unavailable message checks assert both presence and cross-absence, so the two log-only branches genuinely can't be swapped.
• planFromLabeledIssues: fallback test asserts the epic actually lands in the non-architect store (1 bead minted), and the nil-store-value test fails by panic if the store == nil guard goes.

Occupied-ground claim checks out — single new test file, functions disjoint from #5648/#5637/#5647. CI green including coverage.

Minor, non-blocking: the paused/unavailable assertions couple to exact log strings; that's unavoidable for log-only branches, and the nil-gov invariant carries the real weight.

[kubestellar-prow]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[github-actions]

Thank you for your contribution! Your PR has been merged.

Check out what's new:

• KubeStellar Console — Live multi-cluster dashboard
• Marketplace — Community extensions
• Knowledge Base — Troubleshooting and how-tos

Stay connected: Slack #kubestellar-dev | Multi-Cluster Survey