diff --git a/LABEL.md b/LABEL.md
index 7cab296..dd42d0b 100644
--- a/LABEL.md
+++ b/LABEL.md
@@ -31,7 +31,12 @@ is one label per lab plus the parts of the repo outside `labs/`, and there is no
 | `area/agentic` | `#C2E0C6` | `labs/agentic`: ai-jail, OpenCode, `ocr`, `jail-run` and friends |
 | `area/cuda` | `#C2E0C6` | `labs/cuda`: CUDA cache setup and the torch venv |
 | `area/present` | `#C2E0C6` | `labs/present`: annotation, capture, webcam, presenters |
+| `area/ptbr-pdf` | `#C2E0C6` | `labs/ptbr-pdf`: `to-pdf`, Markdown to PDF with Typst |
+| `area/ptbr-tools` | `#C2E0C6` | `labs/ptbr-tools`: the `ptbr` binary that ptbr-writer ships |
+| `area/viz` | `#C2E0C6` | `labs/viz`: the visualisation toolchain |
+| `area/paper` | `#C2E0C6` | `labs/paper`: the paper and report toolchain |
 | `area/labs` | `#C2E0C6` | Every lab at once: `lab.json`, a nixpkgs bump across labs |
+| `area/tools` | `#BFD4F2` | `tools/`: the repo-wide Rust crates (`citation`, `render`, `site-check`, …) |
 | `area/system` | `#F9D0C4` | The root NixOS system, `home.nix`, `just vm`, the move back to NixOS |
 | `area/site` | `#BFDADC` | `site/`: the Gleam page, drawings, history, GitHub Pages |
 | `area/ci` | `#006B75` | `.github/workflows/`, the CI gate, Dependabot, reusable workflows |
@@ -68,6 +73,8 @@ them, never the two.
 
 ## Labels kept from before
 
+Run `just labels` to create or update every label in the tables above (`gh label create --force`, needs `gh` logged in).
+
 `dependencies` and `github_actions` stay: Dependabot adds them to its own PRs. GitHub's defaults
 (`bug`, `enhancement`, `documentation`, …) and the older `bark` and `refactor` are no longer applied;
 they map to `type/fix`, `type/feat`, `type/docs` and `type/refactor`. They are left in place rather
diff --git a/justfile b/justfile
index ebb35a7..c2fddd7 100644
--- a/justfile
+++ b/justfile
@@ -208,3 +208,13 @@ render which:
       *) echo "usage: just render study|paper|ste" >&2; exit 1 ;;
     esac
     nix shell $P#chromium $P#pandoc -c env CHROMIUM=chromium nix run ./tools#render -- "${a[@]}"
+
+
+# create or update the GitHub labels from the tables of LABEL.md (idempotent; needs `gh` logged in)
+labels:
+    #!/usr/bin/env bash
+    set -euo pipefail
+    grep -E '^\| `[^`]+` \| `#[0-9A-Fa-f]{6}` \|' LABEL.md | while IFS='|' read -r _ n c d _; do
+      n=${n//\`/}; c=${c//\`/}; n=${n// /}; c=${c// /}; d=${d# }; d=${d% }
+      gh label create "$n" --color "${c#\#}" --description "$d" --force
+    done