Render and upload every pushed commit's stories in CI

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: nedtwigg

.github/workflows/selfie.yml

@@ -0,0 +1,24 @@
+# Renders every story of every pushed commit, and uploads the batch to hackathon.selfie.dev,
+# which gives the commit a `selfie` status. See specs/ui/storybook.md -> Selfie.
+name: Selfie
+on:
+  push:
+    branches: ["**"]
+jobs:
+  selfie:
+    # arm64, so the images match Selfie's pinned environment.
+    runs-on: ubuntu-24.04-arm
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          # What a commit reaches is what its approvals come from, so this needs all of its history.
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 26
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install --frozen-lockfile
+      # Pinned to the commit the server at hackathon.selfie.dev was deployed from.
+      - uses: diffplug/selfie-hackathon/.github/actions/selfie@33fdf999b97004773b800054eae5ba8213f3a08b
+        with:
+          upload-token: ${{ secrets.SELFIE_UPLOAD_TOKEN }}

specs/ui/storybook.md

@@ -30,6 +30,8 @@ An agent's loop, after changing a component:
 2. Look at the diff images. A change nobody asked for is a bug to fix, not to approve.
 3. Leave approving to a person, in `bun run selfie ui`, unless they've said to approve.
 
+In CI, `.github/workflows/selfie.yml` renders every pushed commit and uploads its batch to [hackathon.selfie.dev](https://hackathon.selfie.dev/diffplug/pridm), which gives the commit a `selfie` status: green if every story matches what's approved, yellow if a change is waiting for approval, and red if a story failed or a change was rejected. Approve there, then `SELFIE_REMOTE=https://hackathon.selfie.dev bun run selfie pull` to bring the approvals here.
+
 A person's loop is the same in `bun run selfie ui`, which renders when asked. Notes written there on an image reach an agent through `bun run selfie agent-await-feedback`.
 
 Every story must render the same image every time. If a review shows a change with no change to the code, or `bun run selfie flakes --build --times 5` lists anything, follow `bun run selfie skill fix-flakes`. Anything Monaco draws is marked `data-diff-pending` until it's done, and each story file's `play: waitForDiffs` waits for that, since Selfie screenshots once a story's play function finishes.