From f2a0f271429fc0b8977cd9e23773be4291abcf0d Mon Sep 17 00:00:00 2001
From: eti <eti@eti.tf>
Date: Thu, 20 Aug 2026 15:40:51 +0200
Subject: [PATCH] web/storybook: move storybook auth to a single global
 decorator

Signed-off-by: eti <eti@eti.tf>
---
 web/.storybook/MockAuth.svelte                |  93 ++++++++++
 web/.storybook/StoryAuthProvider.svelte       |  22 ---
 web/.storybook/preview.ts                     |   7 +
 web/eslint.config.js                          |   2 +-
 .../comment/CommentBox.stories.svelte         |  10 +-
 .../comment/CommentCard.stories.svelte        |  19 +-
 .../comment/CommentEditor.stories.svelte      |  41 +----
 .../comment/CommentList.stories.svelte        |  10 +-
 .../lib/components/comment/sampleComments.ts  |   2 +-
 .../profile/FollowCard.stories.svelte         |   7 +-
 .../profile/ProfilePopover.stories.svelte     |  92 ++++------
 .../profile/VouchButton.stories.svelte        | 170 ++++++++----------
 .../profile/tabs/RepoListTab.stories.svelte   |  20 +--
 .../components/repo/EmptyRepo.stories.svelte  |  21 +--
 .../components/repo/RepoCard.stories.svelte   |   7 +-
 .../components/repo/RepoHeader.stories.svelte |  47 ++---
 .../repo/RepoIndexView.stories.svelte         |  11 +-
 .../repo/issues/IssueForm.stories.svelte      |  20 +--
 .../pipelines/PipelineList.stories.svelte     |  22 +--
 .../repo/pulls/PullCompose.stories.svelte     |  16 +-
 .../repo/tickets/Ticket.stories.svelte        |  45 ++---
 .../strings/StringForm.stories.svelte         |  15 +-
 .../testing/MockAuthProvider.svelte           |  80 ---------
 .../timeline/Timeline.stories.svelte          |   7 +-
 .../TimelineFollowEvent.stories.svelte        |   7 +-
 .../timeline/TimelineRepoEvent.stories.svelte |  13 +-
 .../timeline/TimelineStarEvent.stories.svelte |   7 +-
 .../timeline/TimelineView.stories.svelte      |  14 +-
 28 files changed, 330 insertions(+), 497 deletions(-)
 create mode 100644 web/.storybook/MockAuth.svelte
 delete mode 100644 web/.storybook/StoryAuthProvider.svelte
 delete mode 100644 web/src/lib/components/testing/MockAuthProvider.svelte

diff --git a/web/.storybook/MockAuth.svelte b/web/.storybook/MockAuth.svelte
new file mode 100644
index 000000000..9cdaac2d9
--- /dev/null
+++ b/web/.storybook/MockAuth.svelte
@@ -0,0 +1,93 @@
+<script module lang="ts">
+	// fixture accounts, in the order `accounts: <count>` hands them out
+	export const mockAccounts = [
+		{ did: "did:plc:alice", handle: "alice.pds.tngl.boltless.dev" },
+		{ did: "did:plc:bob", handle: "bob.pds.tngl.boltless.dev" },
+		{ did: "did:plc:carol", handle: "carol.pds.tngl.boltless.dev" }
+	];
+
+	export interface MockAuthConfig {
+		// how many fixture accounts to sign in, or the exact accounts to use
+		accounts?: number | { did: string; handle: string }[];
+		// dids whose session is expired: agentFor rejects and drops the account
+		expired?: string[];
+	}
+
+	// absent: no auth context at all, like a story with no provider.
+	// false: a signed-out context. true or a config object: signed in.
+	export type MockAuthParam = boolean | MockAuthConfig | null;
+</script>
+
+<script lang="ts">
+	// story-only decorator, applied to every story from .storybook/preview.ts. it injects a fake
+	// auth context so form stories can exercise a real (failing) submission without a live
+	// session. the fake agent's fetch handler always rejects, so putIssue/putComment land in the
+	// form's catch block.
+	import { setContext, type Snippet } from "svelte";
+	import { AUTH_KEY, type Auth } from "$lib/auth.svelte";
+
+	interface Props {
+		auth?: MockAuthParam;
+		children: Snippet;
+	}
+
+	let { auth: param, children }: Props = $props();
+
+	const failWith = "MockAuth: network request failed, this error is intentional.";
+	const bobbinUrl = "https://bobbin.example.test";
+
+	// the parameter is fixed for this story's lifetime, so a one-time snapshot is intended
+	// svelte-ignore state_referenced_locally
+	const config: MockAuthConfig = typeof param === "object" && param !== null ? param : {};
+	// svelte-ignore state_referenced_locally
+	const mode = param == null ? "absent" : param === false ? "signed-out" : "signed-in";
+
+	const requested = config.accounts ?? 1;
+	const seed = typeof requested === "number" ? mockAccounts.slice(0, requested) : requested;
+	const expired = config.expired ?? [];
+
+	let knownAccounts = $state(seed.map((account, index) => ({ ...account, addedAt: index })));
+
+	const agent = {
+		sub: knownAccounts[0]?.did,
+		handle: () => Promise.reject(new Error(failWith))
+	};
+
+	const signedIn = {
+		agent,
+		get currentDid() {
+			return knownAccounts[0]?.did ?? null;
+		},
+		get currentUser() {
+			return knownAccounts[0] ?? null;
+		},
+		get accounts() {
+			return knownAccounts;
+		},
+		hasAccount: (did: string) => knownAccounts.some((account) => account.did === did),
+		agentFor: (did: string) => {
+			if (!expired.includes(did)) return Promise.resolve(agent);
+			const handle = knownAccounts.find((account) => account.did === did)?.handle ?? did;
+			knownAccounts = knownAccounts.filter((account) => account.did !== did);
+			return Promise.reject(
+				new Error(`${handle}'s session expired. Sign in again to act as them.`)
+			);
+		},
+		bobbinUrl
+	};
+
+	const signedOut = {
+		agent: null,
+		currentDid: null,
+		currentUser: null,
+		accounts: [],
+		hasAccount: () => false,
+		bobbinUrl
+	};
+
+	if (mode !== "absent") {
+		setContext(AUTH_KEY, (mode === "signed-in" ? signedIn : signedOut) as unknown as Auth);
+	}
+</script>
+
+{@render children()}
diff --git a/web/.storybook/StoryAuthProvider.svelte b/web/.storybook/StoryAuthProvider.svelte
deleted file mode 100644
index a7e81b246..000000000
--- a/web/.storybook/StoryAuthProvider.svelte
+++ /dev/null
@@ -1,22 +0,0 @@
-<script lang="ts">
-	import { setContext, untrack } from "svelte";
-	import type { Snippet } from "svelte";
-	import { AUTH_KEY, createAuth } from "$lib/auth.svelte";
-
-	interface Props {
-		initial?: { did: string; handle: string } | null;
-		children: Snippet;
-	}
-
-	let { initial = null, children }: Props = $props();
-
-	setContext(
-		AUTH_KEY,
-		createAuth(
-			"https://bobbin.example.test",
-			untrack(() => initial)
-		)
-	);
-</script>
-
-{@render children()}
diff --git a/web/.storybook/preview.ts b/web/.storybook/preview.ts
index 8e3c26b1f..d150f398c 100644
--- a/web/.storybook/preview.ts
+++ b/web/.storybook/preview.ts
@@ -1,10 +1,17 @@
 import type { Preview } from "@storybook/sveltekit";
+import MockAuth, { type MockAuthParam } from "./MockAuth.svelte";
 
 // Load the app's global styles (Tailwind + theme tokens) so components
 // render with real styling inside Storybook.
 import "../src/app.css";
 
 const preview: Preview = {
+	decorators: [
+		(_story, context) => ({
+			Component: MockAuth,
+			props: { auth: context.parameters.auth as MockAuthParam }
+		})
+	],
 	parameters: {
 		controls: {
 			matchers: {
diff --git a/web/eslint.config.js b/web/eslint.config.js
index daa4561a4..905166cd8 100644
--- a/web/eslint.config.js
+++ b/web/eslint.config.js
@@ -34,7 +34,7 @@ export default defineConfig(
 		files: ["**/*.svelte", "**/*.svelte.ts", "**/*.svelte.js"],
 		languageOptions: {
 			parserOptions: {
-				projectService: { allowDefaultProject: [".storybook/StoryAuthProvider.svelte"] },
+				projectService: { allowDefaultProject: [".storybook/MockAuth.svelte"] },
 				extraFileExtensions: [".svelte"],
 				parser: ts.parser
 			}
diff --git a/web/src/lib/components/comment/CommentBox.stories.svelte b/web/src/lib/components/comment/CommentBox.stories.svelte
index 43e07c4e7..234254982 100644
--- a/web/src/lib/components/comment/CommentBox.stories.svelte
+++ b/web/src/lib/components/comment/CommentBox.stories.svelte
@@ -2,7 +2,6 @@
 	import { defineMeta } from "@storybook/addon-svelte-csf";
 	import { expect, userEvent, waitFor, within } from "storybook/test";
 	import CommentBox from "./CommentBox.svelte";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 
 	const { Story } = defineMeta({
 		title: "Comment/CommentBox",
@@ -23,6 +22,7 @@
 <!-- types a comment and submits with ctrl+enter against a fake agent that rejects, showing the error alert -->
 <Story
 	name="Failed submission"
+	parameters={{ auth: true }}
 	play={async ({ canvasElement }) => {
 		const canvas = within(canvasElement);
 		await userEvent.type(
@@ -33,10 +33,4 @@
 			expect(canvas.getByRole("alert")).toHaveTextContent(/network request failed/i)
 		);
 	}}
->
-	{#snippet template(args)}
-		<MockAuthProvider>
-			<CommentBox {...args} />
-		</MockAuthProvider>
-	{/snippet}
-</Story>
+/>
diff --git a/web/src/lib/components/comment/CommentCard.stories.svelte b/web/src/lib/components/comment/CommentCard.stories.svelte
index e735bfdd7..d94a0bb6f 100644
--- a/web/src/lib/components/comment/CommentCard.stories.svelte
+++ b/web/src/lib/components/comment/CommentCard.stories.svelte
@@ -2,7 +2,6 @@
 	import { defineMeta } from "@storybook/addon-svelte-csf";
 	import { expect, userEvent, waitFor, within } from "storybook/test";
 	import CommentCard from "./CommentCard.svelte";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import {
 		sampleComments,
 		sampleMarkup,
@@ -35,6 +34,7 @@
 <!-- logged in: clicking "Leave a reply" opens an inline reply box -->
 <Story
 	name="Replying"
+	parameters={{ auth: true }}
 	play={async ({ canvasElement }) => {
 		const canvas = within(canvasElement);
 		await userEvent.click(canvas.getByRole("button", { name: "Leave a reply..." }));
@@ -44,18 +44,13 @@
 		// the editor should be focused so the user can type immediately
 		await waitFor(() => expect(textarea).toHaveFocus());
 	}}
->
-	{#snippet template(args)}
-		<MockAuthProvider>
-			<CommentCard {...args} />
-		</MockAuthProvider>
-	{/snippet}
-</Story>
+/>
 
 <!-- logged in as the author: the edit icon opens an inline editor prefilled with the body -->
 <Story
 	name="Editing"
 	args={{ thread: myThread }}
+	parameters={{ auth: true }}
 	play={async ({ canvasElement }) => {
 		const canvas = within(canvasElement);
 		await userEvent.click(canvas.getByRole("button", { name: "Edit comment" }));
@@ -64,10 +59,4 @@
 		await expect(canvas.getByRole("button", { name: "Save" })).toBeInTheDocument();
 		await expect(canvas.getByRole("button", { name: "Cancel" })).toBeInTheDocument();
 	}}
->
-	{#snippet template(args)}
-		<MockAuthProvider>
-			<CommentCard {...args} />
-		</MockAuthProvider>
-	{/snippet}
-</Story>
+/>
diff --git a/web/src/lib/components/comment/CommentEditor.stories.svelte b/web/src/lib/components/comment/CommentEditor.stories.svelte
index bb3d8fa2d..1cb518742 100644
--- a/web/src/lib/components/comment/CommentEditor.stories.svelte
+++ b/web/src/lib/components/comment/CommentEditor.stories.svelte
@@ -4,9 +4,6 @@
 	import MessageSquarePlus from "$icon/message-square-plus";
 	import Pencil from "$icon/pencil";
 	import CommentEditor from "./CommentEditor.svelte";
-	import MockAuthProvider, {
-		mockAccounts
-	} from "$lib/components/testing/MockAuthProvider.svelte";
 	import {
 		sampleComments,
 		sampleMarkup,
@@ -27,8 +24,6 @@
 		oncancel: () => undefined
 	};
 
-	const storyAccounts = mockAccounts.slice(0, 2);
-
 	const { Story } = defineMeta({
 		title: "Comment/CommentEditor",
 		component: CommentEditor,
@@ -57,6 +52,7 @@
 <Story
 	name="Failed edit"
 	args={editArgs}
+	parameters={{ auth: true }}
 	play={async ({ canvasElement }) => {
 		const canvas = within(canvasElement);
 		await userEvent.click(canvas.getByRole("button", { name: "Save" }));
@@ -64,16 +60,11 @@
 			expect(canvas.getByRole("alert")).toHaveTextContent(/network request failed/i)
 		);
 	}}
->
-	{#snippet template(args)}
-		<MockAuthProvider>
-			<CommentEditor {...args} />
-		</MockAuthProvider>
-	{/snippet}
-</Story>
+/>
 
 <Story
 	name="Composing with several accounts"
+	parameters={{ auth: { accounts: 2 } }}
 	play={async ({ canvasElement }) => {
 		const canvas = within(canvasElement);
 		await userEvent.click(canvas.getByRole("button", { name: /comment as alice/i }));
@@ -82,32 +73,22 @@
 			expect(canvas.getByRole("button", { name: /comment as bob/i })).toBeVisible()
 		);
 	}}
->
-	{#snippet template(args)}
-		<MockAuthProvider accounts={storyAccounts}>
-			<CommentEditor {...args} />
-		</MockAuthProvider>
-	{/snippet}
-</Story>
+/>
 
 <Story
 	name="Editing with several accounts"
 	args={editArgs}
+	parameters={{ auth: { accounts: 2 } }}
 	play={async ({ canvasElement }) => {
 		const canvas = within(canvasElement);
 		expect(canvas.queryByRole("button", { name: /comment as/i })).toBeNull();
 		await waitFor(() => expect(canvas.getByRole("button", { name: "Save" })).toBeVisible());
 	}}
->
-	{#snippet template(args)}
-		<MockAuthProvider accounts={storyAccounts}>
-			<CommentEditor {...args} />
-		</MockAuthProvider>
-	{/snippet}
-</Story>
+/>
 
 <Story
 	name="Expired session for the picked account"
+	parameters={{ auth: { accounts: 3, expired: ["did:plc:bob"] } }}
 	play={async ({ canvasElement }) => {
 		const canvas = within(canvasElement);
 		await userEvent.click(canvas.getByRole("button", { name: /comment as alice/i }));
@@ -124,10 +105,4 @@
 		await waitFor(() => expect(canvas.getByRole("menuitem", { name: /carol/i })).toBeVisible());
 		expect(canvas.queryByRole("menuitem", { name: /bob/i })).toBeNull();
 	}}
->
-	{#snippet template(args)}
-		<MockAuthProvider accounts={mockAccounts} expired={["did:plc:bob"]}>
-			<CommentEditor {...args} />
-		</MockAuthProvider>
-	{/snippet}
-</Story>
+/>
diff --git a/web/src/lib/components/comment/CommentList.stories.svelte b/web/src/lib/components/comment/CommentList.stories.svelte
index 0b9e9961a..28b47c89e 100644
--- a/web/src/lib/components/comment/CommentList.stories.svelte
+++ b/web/src/lib/components/comment/CommentList.stories.svelte
@@ -2,7 +2,6 @@
 	import { defineMeta } from "@storybook/addon-svelte-csf";
 	import { expect, userEvent, waitFor, within } from "storybook/test";
 	import CommentList from "./CommentList.svelte";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import {
 		longThread,
 		multiReplyThread,
@@ -34,6 +33,7 @@
 <Story
 	name="Editing a mid-thread reply"
 	args={{ threads: [longThread] }}
+	parameters={{ auth: true }}
 	play={async ({ canvasElement }) => {
 		const canvas = within(canvasElement);
 		// only alice's (middle) reply exposes an edit control
@@ -43,10 +43,4 @@
 		await expect(canvas.getByRole("button", { name: "Save" })).toBeInTheDocument();
 		await expect(canvas.getByRole("button", { name: "Cancel" })).toBeInTheDocument();
 	}}
->
-	{#snippet template(args)}
-		<MockAuthProvider>
-			<CommentList {...args} />
-		</MockAuthProvider>
-	{/snippet}
-</Story>
+/>
diff --git a/web/src/lib/components/comment/sampleComments.ts b/web/src/lib/components/comment/sampleComments.ts
index a810a83aa..c1a07be38 100644
--- a/web/src/lib/components/comment/sampleComments.ts
+++ b/web/src/lib/components/comment/sampleComments.ts
@@ -107,7 +107,7 @@ And just personally, it's a URL eyesore for me.`,
 		"This has tripped me up quite a few times on the SSH URLs with extraneous @s, so thank you for making this change!",
 		"<p>This has tripped me up quite a few times on the SSH URLs with extraneous @s, so thank you for making this change!</p>"
 	),
-	// authored by the story's logged-in user (MockAuthProvider = did:plc:alice), for edit cases
+	// authored by the story's logged-in user (MockAuth = did:plc:alice), for edit cases
 	mine: c(
 		"mine",
 		"did:plc:alice",
diff --git a/web/src/lib/components/profile/FollowCard.stories.svelte b/web/src/lib/components/profile/FollowCard.stories.svelte
index 367718859..142352baf 100644
--- a/web/src/lib/components/profile/FollowCard.stories.svelte
+++ b/web/src/lib/components/profile/FollowCard.stories.svelte
@@ -1,6 +1,5 @@
 <script module lang="ts">
 	import { defineMeta } from "@storybook/addon-svelte-csf";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import FollowCard from "./FollowCard.svelte";
 	import type { PersonData } from "./types";
 
@@ -36,11 +35,9 @@
 <Story name="Plain (timeline)" />
 <Story name="Bordered" args={{ border: true, background: true }} />
 
-<Story name="With follow button">
+<Story name="With follow button" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<FollowCard {...args} person={{ ...person, isSelf: false }} border background />
-		</MockAuthProvider>
+		<FollowCard {...args} person={{ ...person, isSelf: false }} border background />
 	{/snippet}
 </Story>
 
diff --git a/web/src/lib/components/profile/ProfilePopover.stories.svelte b/web/src/lib/components/profile/ProfilePopover.stories.svelte
index 4533e273f..8c925d9df 100644
--- a/web/src/lib/components/profile/ProfilePopover.stories.svelte
+++ b/web/src/lib/components/profile/ProfilePopover.stories.svelte
@@ -1,6 +1,5 @@
 <script module lang="ts">
 	import { defineMeta } from "@storybook/addon-svelte-csf";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import ProfilePopover from "./ProfilePopover.svelte";
 	import Avatar from "$lib/components/ui/Avatar.svelte";
 	import type { ProfileCardData, NetworkVouch } from "./types";
@@ -61,86 +60,67 @@
 </script>
 
 <!-- populated card behind an avatar trigger -->
-<Story name="Avatar trigger">
+<Story name="Avatar trigger" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<div class="flex justify-center p-24">
-				<ProfilePopover did={args.did} preview={{ card: fullCard, networkVouches }}>
-					<Avatar did={args.did} handle={HANDLE} size="large" />
-				</ProfilePopover>
-			</div>
-		</MockAuthProvider>
+		<div class="flex justify-center p-24">
+			<ProfilePopover did={args.did} preview={{ card: fullCard, networkVouches }}>
+				<Avatar did={args.did} handle={HANDLE} size="large" />
+			</ProfilePopover>
+		</div>
 	{/snippet}
 </Story>
 
 <!-- the same populated card behind an inline handle -->
-<Story name="Name trigger">
+<Story name="Name trigger" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<div class="flex justify-center p-24">
-				<ProfilePopover did={args.did} preview={{ card: fullCard, networkVouches }}>
-					<span class="font-bold hover:underline">{HANDLE}</span>
-				</ProfilePopover>
-			</div>
-		</MockAuthProvider>
+		<div class="flex justify-center p-24">
+			<ProfilePopover did={args.did} preview={{ card: fullCard, networkVouches }}>
+				<span class="font-bold hover:underline">{HANDLE}</span>
+			</ProfilePopover>
+		</div>
 	{/snippet}
 </Story>
 
 <!-- sparse profile: no bio or pronouns, no network vouches -->
-<Story name="Minimal card">
+<Story name="Minimal card" parameters={{ auth: true }}>
 	{#snippet template()}
-		<MockAuthProvider>
-			<div class="flex justify-center p-24">
-				<ProfilePopover did={minimalCard.did} preview={{ card: minimalCard }}>
-					<Avatar
-						did={minimalCard.did}
-						handle={minimalCard.handle}
-						size="large"
-					/>
-				</ProfilePopover>
-			</div>
-		</MockAuthProvider>
+		<div class="flex justify-center p-24">
+			<ProfilePopover did={minimalCard.did} preview={{ card: minimalCard }}>
+				<Avatar did={minimalCard.did} handle={minimalCard.handle} size="large" />
+			</ProfilePopover>
+		</div>
 	{/snippet}
 </Story>
 
 <!-- signed-out viewer: follow becomes a login CTA, vouch button hidden -->
-<Story name="Signed out">
+<Story name="Signed out" parameters={{ auth: false }}>
 	{#snippet template(args)}
-		<MockAuthProvider signedIn={false}>
-			<div class="flex justify-center p-24">
-				<ProfilePopover did={args.did} preview={{ card: fullCard }}>
-					<Avatar did={args.did} handle={HANDLE} size="large" />
-				</ProfilePopover>
-			</div>
-		</MockAuthProvider>
+		<div class="flex justify-center p-24">
+			<ProfilePopover did={args.did} preview={{ card: fullCard }}>
+				<Avatar did={args.did} handle={HANDLE} size="large" />
+			</ProfilePopover>
+		</div>
 	{/snippet}
 </Story>
 
 <!-- disabled skips the card without changing the markup around the trigger -->
-<Story name="Disabled">
+<Story name="Disabled" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<div class="flex justify-center p-24">
-				<ProfilePopover did={args.did} disabled preview={{ card: fullCard }}>
-					<Avatar did={args.did} handle={HANDLE} size="large" />
-				</ProfilePopover>
-			</div>
-		</MockAuthProvider>
+		<div class="flex justify-center p-24">
+			<ProfilePopover did={args.did} disabled preview={{ card: fullCard }}>
+				<Avatar did={args.did} handle={HANDLE} size="large" />
+			</ProfilePopover>
+		</div>
 	{/snippet}
 </Story>
 
 <!-- large follow counts abbreviate instead of overflowing the card -->
-<Story name="Large counts">
+<Story name="Large counts" parameters={{ auth: true }}>
 	{#snippet template()}
-		<MockAuthProvider>
-			<div class="flex justify-center p-24">
-				<ProfilePopover
-					did={popularCard.did}
-					preview={{ card: popularCard, networkVouches }}
-				>
-					<Avatar did={popularCard.did} handle={popularCard.handle} size="large" />
-				</ProfilePopover>
-			</div>
-		</MockAuthProvider>
+		<div class="flex justify-center p-24">
+			<ProfilePopover did={popularCard.did} preview={{ card: popularCard, networkVouches }}>
+				<Avatar did={popularCard.did} handle={popularCard.handle} size="large" />
+			</ProfilePopover>
+		</div>
 	{/snippet}
 </Story>
diff --git a/web/src/lib/components/profile/VouchButton.stories.svelte b/web/src/lib/components/profile/VouchButton.stories.svelte
index fc5316f30..00ab522a9 100644
--- a/web/src/lib/components/profile/VouchButton.stories.svelte
+++ b/web/src/lib/components/profile/VouchButton.stories.svelte
@@ -1,6 +1,5 @@
 <script module lang="ts">
 	import { defineMeta } from "@storybook/addon-svelte-csf";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import VouchButton from "./VouchButton.svelte";
 
 	// distinct dids per story keep the derived popover ids unique on the autodocs
@@ -25,138 +24,127 @@
 </script>
 
 <!-- signed in, no existing vouch: neutral trigger, popover opens on "None" -->
-<Story name="Undecided">
+<Story name="Undecided" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<div class="w-64">
-				<VouchButton {...args} initialVouch={null} />
-			</div>
-		</MockAuthProvider>
+		<div class="w-64">
+			<VouchButton {...args} initialVouch={null} />
+		</div>
 	{/snippet}
 </Story>
 
 <!-- viewer has vouched: success trigger, popover preselects "Vouch" + reason -->
-<Story name="Vouched">
+<Story name="Vouched" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<div class="w-64">
-				<VouchButton
-					{...args}
-					profileDid="did:plc:vouched000000000000000"
-					initialVouch={{ kind: "vouch", reason: "Reviewed a tricky PR with care and patience." }}
-				/>
-			</div>
-		</MockAuthProvider>
+		<div class="w-64">
+			<VouchButton
+				{...args}
+				profileDid="did:plc:vouched000000000000000"
+				initialVouch={{
+					kind: "vouch",
+					reason: "Reviewed a tricky PR with care and patience."
+				}}
+			/>
+		</div>
 	{/snippet}
 </Story>
 
 <!-- viewer has denounced: danger trigger, popover preselects "Denounce" -->
-<Story name="Denounced">
+<Story name="Denounced" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<div class="w-64">
-				<VouchButton
-					{...args}
-					profileDid="did:plc:denounced0000000000000"
-					initialVouch={{ kind: "denounce" }}
-				/>
-			</div>
-		</MockAuthProvider>
+		<div class="w-64">
+			<VouchButton
+				{...args}
+				profileDid="did:plc:denounced0000000000000"
+				initialVouch={{ kind: "denounce" }}
+			/>
+		</div>
 	{/snippet}
 </Story>
 
 <!-- the appearance matrix: bordered vs borderless (both raised), across all three
 	 vouch states. tweak the `bordered`/`insetShadow` controls to compare. -->
-<Story name="Appearance variants">
+<Story name="Appearance variants" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<div class="grid grid-cols-2 gap-4">
-				{#each [{ label: "Bordered", bordered: true, insetShadow: true }, { label: "Borderless", bordered: false, insetShadow: true }] as look (look.label)}
-					<div class="space-y-3">
-						<p class="typography-paragraph-small text-foreground-subtle">{look.label}</p>
-						<VouchButton
-							{...args}
-							profileDid={`did:plc:variant-none-${look.label}`}
-							bordered={look.bordered}
-							insetShadow={look.insetShadow}
-							initialVouch={null}
-						/>
-						<VouchButton
-							{...args}
-							profileDid={`did:plc:variant-vouch-${look.label}`}
-							bordered={look.bordered}
-							insetShadow={look.insetShadow}
-							initialVouch={{ kind: "vouch" }}
-						/>
-						<VouchButton
-							{...args}
-							profileDid={`did:plc:variant-denounce-${look.label}`}
-							bordered={look.bordered}
-							insetShadow={look.insetShadow}
-							initialVouch={{ kind: "denounce" }}
-						/>
-					</div>
-				{/each}
-			</div>
-		</MockAuthProvider>
+		<div class="grid grid-cols-2 gap-4">
+			{#each [{ label: "Bordered", bordered: true, insetShadow: true }, { label: "Borderless", bordered: false, insetShadow: true }] as look (look.label)}
+				<div class="space-y-3">
+					<p class="typography-paragraph-small text-foreground-subtle">{look.label}</p>
+					<VouchButton
+						{...args}
+						profileDid={`did:plc:variant-none-${look.label}`}
+						bordered={look.bordered}
+						insetShadow={look.insetShadow}
+						initialVouch={null}
+					/>
+					<VouchButton
+						{...args}
+						profileDid={`did:plc:variant-vouch-${look.label}`}
+						bordered={look.bordered}
+						insetShadow={look.insetShadow}
+						initialVouch={{ kind: "vouch" }}
+					/>
+					<VouchButton
+						{...args}
+						profileDid={`did:plc:variant-denounce-${look.label}`}
+						bordered={look.bordered}
+						insetShadow={look.insetShadow}
+						initialVouch={{ kind: "denounce" }}
+					/>
+				</div>
+			{/each}
+		</div>
 	{/snippet}
 </Story>
 
 <!-- borderless ghost trigger: no outline, state carried by icon + label color -->
-<Story name="Borderless" args={{ bordered: false }}>
+<Story name="Borderless" args={{ bordered: false }} parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<div class="w-64">
-				<VouchButton {...args} profileDid="did:plc:borderless00000000000" initialVouch={null} />
-			</div>
-		</MockAuthProvider>
+		<div class="w-64">
+			<VouchButton {...args} profileDid="did:plc:borderless00000000000" initialVouch={null} />
+		</div>
 	{/snippet}
 </Story>
 
 <!-- flat trigger, opting out of the default inset shadow -->
-<Story name="Without shadow" args={{ insetShadow: false }}>
+<Story name="Without shadow" args={{ insetShadow: false }} parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<div class="w-64">
-				<VouchButton {...args} profileDid="did:plc:shadow0000000000000000" initialVouch={null} />
-			</div>
-		</MockAuthProvider>
+		<div class="w-64">
+			<VouchButton
+				{...args}
+				profileDid="did:plc:shadow0000000000000000"
+				initialVouch={null}
+			/>
+		</div>
 	{/snippet}
 </Story>
 
 <!-- submitting hits the mock agent's rejecting fetch, so the popover shows the
 	 error state after pressing Save -->
-<Story name="Submission fails">
+<Story name="Submission fails" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<div class="w-64">
-				<VouchButton {...args} profileDid="did:plc:failure00000000000000" initialVouch={null} />
-			</div>
-		</MockAuthProvider>
+		<div class="w-64">
+			<VouchButton {...args} profileDid="did:plc:failure00000000000000" initialVouch={null} />
+		</div>
 	{/snippet}
 </Story>
 
 <!-- signed out: falls back to a login call-to-action -->
-<Story name="Signed out">
+<Story name="Signed out" parameters={{ auth: false }}>
 	{#snippet template(args)}
-		<MockAuthProvider signedIn={false}>
-			<div class="w-64">
-				<VouchButton {...args} initialVouch={null} />
-			</div>
-		</MockAuthProvider>
+		<div class="w-64">
+			<VouchButton {...args} initialVouch={null} />
+		</div>
 	{/snippet}
 </Story>
 
 <!-- viewing your own profile: the button is hidden entirely (renders nothing) -->
-<Story name="Self (hidden)">
+<Story name="Self (hidden)" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<div class="w-64">
-				<VouchButton {...args} profileDid="did:plc:alice" initialVouch={null} />
-				<p class="typography-paragraph-small text-foreground-subtle">
-					Nothing renders above — you can't vouch for yourself.
-				</p>
-			</div>
-		</MockAuthProvider>
+		<div class="w-64">
+			<VouchButton {...args} profileDid="did:plc:alice" initialVouch={null} />
+			<p class="typography-paragraph-small text-foreground-subtle">
+				Nothing renders above — you can't vouch for yourself.
+			</p>
+		</div>
 	{/snippet}
 </Story>
diff --git a/web/src/lib/components/profile/tabs/RepoListTab.stories.svelte b/web/src/lib/components/profile/tabs/RepoListTab.stories.svelte
index 472611f93..fdafa7f29 100644
--- a/web/src/lib/components/profile/tabs/RepoListTab.stories.svelte
+++ b/web/src/lib/components/profile/tabs/RepoListTab.stories.svelte
@@ -1,7 +1,6 @@
 <script module lang="ts">
 	import { defineMeta, type StoryContext } from "@storybook/addon-svelte-csf";
 	import { expect, userEvent, waitFor } from "storybook/test";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import type { RepoCardData } from "../types";
 	import RepoListTab from "./RepoListTab.svelte";
 
@@ -37,7 +36,9 @@
 			seen.push(String(init?.body ?? input));
 			return Response.json({
 				output: {
-					items: [{ uri: "at://did:plc:dawn/sh.tangled.repo/straggler", value: straggler }],
+					items: [
+						{ uri: "at://did:plc:dawn/sh.tangled.repo/straggler", value: straggler }
+					],
 					total: 31
 				},
 				data: {}
@@ -45,7 +46,9 @@
 		}) as typeof fetch;
 		try {
 			await userEvent.click(canvas.getByRole("button", { name: "Page 2" }));
-			await waitFor(() => expect(canvas.getByRole("link", { name: "straggler" })).toBeVisible());
+			await waitFor(() =>
+				expect(canvas.getByRole("link", { name: "straggler" })).toBeVisible()
+			);
 			await expect(canvas.queryByRole("link", { name: "repo-0" })).toBeNull();
 			expect(seen.join(" ")).toContain('"offset":30');
 			expect(seen.join(" ")).not.toContain("cursor");
@@ -67,22 +70,19 @@
 	});
 </script>
 
-<Story name="Four repositories fit on one page" play={onePage}>
+<Story name="Four repositories fit on one page" play={onePage} parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<RepoListTab {...args} />
-		</MockAuthProvider>
+		<RepoListTab {...args} />
 	{/snippet}
 </Story>
 
 <Story
+	parameters={{ auth: true }}
 	name="Page two loads in one offset fetch"
 	play={pageTwo}
 	args={{ initial: manyRepos, total: 31 }}
 >
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<RepoListTab {...args} />
-		</MockAuthProvider>
+		<RepoListTab {...args} />
 	{/snippet}
 </Story>
diff --git a/web/src/lib/components/repo/EmptyRepo.stories.svelte b/web/src/lib/components/repo/EmptyRepo.stories.svelte
index 275f4c551..8721213fe 100644
--- a/web/src/lib/components/repo/EmptyRepo.stories.svelte
+++ b/web/src/lib/components/repo/EmptyRepo.stories.svelte
@@ -1,6 +1,5 @@
 <script module lang="ts">
 	import { defineMeta } from "@storybook/addon-svelte-csf";
-	import StoryAuthProvider from "../../../../.storybook/StoryAuthProvider.svelte";
 	import EmptyRepo from "./EmptyRepo.svelte";
 	import type { RepoInfo } from "./types";
 
@@ -17,6 +16,8 @@
 	};
 	const otherRepo = { ...ownerRepo, ownerDid: "did:plc:other", ownerHandle: "other" };
 
+	const owner = { auth: { accounts: [{ did: ownerDid, handle: "dawn" }] } };
+
 	const { Story } = defineMeta({
 		title: "Repo/EmptyRepo",
 		component: EmptyRepo,
@@ -24,18 +25,12 @@
 	});
 </script>
 
-<Story name="Owner instructions" asChild>
-	<StoryAuthProvider initial={{ did: ownerDid, handle: "dawn" }}>
-		<EmptyRepo repo={ownerRepo} hasSshKey={false} />
-	</StoryAuthProvider>
+<Story name="Owner instructions" asChild parameters={owner}>
+	<EmptyRepo repo={ownerRepo} hasSshKey={false} />
 </Story>
-<Story name="Owner with SSH key" asChild>
-	<StoryAuthProvider initial={{ did: ownerDid, handle: "dawn" }}>
-		<EmptyRepo repo={ownerRepo} hasSshKey={true} />
-	</StoryAuthProvider>
+<Story name="Owner with SSH key" asChild parameters={owner}>
+	<EmptyRepo repo={ownerRepo} hasSshKey={true} />
 </Story>
-<Story name="Visitor" asChild>
-	<StoryAuthProvider>
-		<EmptyRepo repo={otherRepo} />
-	</StoryAuthProvider>
+<Story name="Visitor" asChild parameters={{ auth: false }}>
+	<EmptyRepo repo={otherRepo} />
 </Story>
diff --git a/web/src/lib/components/repo/RepoCard.stories.svelte b/web/src/lib/components/repo/RepoCard.stories.svelte
index 9840f0783..5baece1c0 100644
--- a/web/src/lib/components/repo/RepoCard.stories.svelte
+++ b/web/src/lib/components/repo/RepoCard.stories.svelte
@@ -1,6 +1,5 @@
 <script module lang="ts">
 	import { defineMeta } from "@storybook/addon-svelte-csf";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import RepoCard from "./RepoCard.svelte";
 	import type { RepoCardData } from "$lib/components/profile/types";
 
@@ -45,11 +44,9 @@
 <Story name="Elevated" args={{ shadow: true }} />
 <Story name="Plain (timeline)" args={{ border: false, shadow: false, background: false }} />
 
-<Story name="With star button">
+<Story name="With star button" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<RepoCard {...args} starButton />
-		</MockAuthProvider>
+		<RepoCard {...args} starButton />
 	{/snippet}
 </Story>
 
diff --git a/web/src/lib/components/repo/RepoHeader.stories.svelte b/web/src/lib/components/repo/RepoHeader.stories.svelte
index a0dddea15..0765e7afe 100644
--- a/web/src/lib/components/repo/RepoHeader.stories.svelte
+++ b/web/src/lib/components/repo/RepoHeader.stories.svelte
@@ -1,7 +1,5 @@
 <script module lang="ts">
 	import { defineMeta, type StoryContext } from "@storybook/addon-svelte-csf";
-	import StoryAuthProvider from "../../../../.storybook/StoryAuthProvider.svelte";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import RepoHeader from "./RepoHeader.svelte";
 	import { expect } from "storybook/test";
 	import type { RepoInfo } from "./types";
@@ -35,47 +33,36 @@
 	const { Story } = defineMeta({
 		title: "Repo/RepoHeader",
 		component: RepoHeader,
-		tags: ["autodocs"]
+		tags: ["autodocs"],
+		parameters: { auth: false }
 	});
 </script>
 
 <Story name="Full metadata" asChild play={groupsShareAHeight}>
-	<StoryAuthProvider>
-		<RepoHeader {repo} {counts} />
-	</StoryAuthProvider>
+	<RepoHeader {repo} {counts} />
 </Story>
 <Story name="No description or website" asChild>
-	<StoryAuthProvider>
-		<RepoHeader
-			repo={{ ...repo, description: undefined, website: undefined, topics: [] }}
-			{counts}
-		/>
-	</StoryAuthProvider>
+	<RepoHeader
+		repo={{ ...repo, description: undefined, website: undefined, topics: [] }}
+		{counts}
+	/>
 </Story>
 <Story name="Not a fork" asChild>
-	<StoryAuthProvider>
-		<RepoHeader repo={{ ...repo, source: undefined }} {counts} />
-	</StoryAuthProvider>
+	<RepoHeader repo={{ ...repo, source: undefined }} {counts} />
 </Story>
 
 <Story name="Large counts" asChild>
-	<StoryAuthProvider>
-		<RepoHeader {repo} counts={{ stars: 128_400, issues: 1_020, pulls: 3_400, forks: 9_870 }} />
-	</StoryAuthProvider>
+	<RepoHeader {repo} counts={{ stars: 128_400, issues: 1_020, pulls: 3_400, forks: 9_870 }} />
 </Story>
 
 <!-- signed in the star segment toggles instead of linking to log in -->
-<Story name="Signed in" asChild play={groupsShareAHeight}>
-	<MockAuthProvider>
-		<RepoHeader {repo} {counts} viewerStarRkey={null} />
-	</MockAuthProvider>
+<Story name="Signed in" asChild play={groupsShareAHeight} parameters={{ auth: true }}>
+	<RepoHeader {repo} {counts} viewerStarRkey={null} />
 </Story>
-<Story name="Signed in, starred" asChild>
-	<MockAuthProvider>
-		<RepoHeader
-			{repo}
-			counts={{ stars: 128_400, issues: 1_020, pulls: 3_400, forks: 9_870 }}
-			viewerStarRkey="3jzstar"
-		/>
-	</MockAuthProvider>
+<Story name="Signed in, starred" asChild parameters={{ auth: true }}>
+	<RepoHeader
+		{repo}
+		counts={{ stars: 128_400, issues: 1_020, pulls: 3_400, forks: 9_870 }}
+		viewerStarRkey="3jzstar"
+	/>
 </Story>
diff --git a/web/src/lib/components/repo/RepoIndexView.stories.svelte b/web/src/lib/components/repo/RepoIndexView.stories.svelte
index ab68140b2..bdc649432 100644
--- a/web/src/lib/components/repo/RepoIndexView.stories.svelte
+++ b/web/src/lib/components/repo/RepoIndexView.stories.svelte
@@ -2,7 +2,6 @@
 	import { defineMeta } from "@storybook/addon-svelte-csf";
 	import type { loadRepoIndex } from "$lib/api/repoIndex";
 	import { pipelinesByCommitHash } from "./pipelines/mock";
-	import StoryAuthProvider from "../../../../.storybook/StoryAuthProvider.svelte";
 	import RepoIndexView from "./RepoIndexView.svelte";
 	import type { RepoInfo } from "./types";
 
@@ -108,7 +107,9 @@
 			data,
 			bobbinUrl: "https://bobbin.example.test",
 			// every third commit is left without a run, so all three cases show
-			pipelineStatuses: Promise.resolve(pipelinesByCommitHash(commits.map((commit) => commit.hash)))
+			pipelineStatuses: Promise.resolve(
+				pipelinesByCommitHash(commits.map((commit) => commit.hash))
+			)
 		}
 	});
 </script>
@@ -117,8 +118,6 @@
 <Story name="Reference counts are lower bounds" args={{ data: cappedData }} />
 <Story name="Knot needs upgrade" args={{ data: { ...data, availability: "needs-upgrade" } }} />
 <Story name="Knot is unreachable" args={{ data: { ...data, availability: "unreachable" } }} />
-<Story name="Empty repository" asChild>
-	<StoryAuthProvider>
-		<RepoIndexView {repo} data={emptyData} bobbinUrl="https://bobbin.example.test" />
-	</StoryAuthProvider>
+<Story name="Empty repository" asChild parameters={{ auth: false }}>
+	<RepoIndexView {repo} data={emptyData} bobbinUrl="https://bobbin.example.test" />
 </Story>
diff --git a/web/src/lib/components/repo/issues/IssueForm.stories.svelte b/web/src/lib/components/repo/issues/IssueForm.stories.svelte
index 5d9cd8901..ea5d2cca6 100644
--- a/web/src/lib/components/repo/issues/IssueForm.stories.svelte
+++ b/web/src/lib/components/repo/issues/IssueForm.stories.svelte
@@ -2,15 +2,10 @@
 	import { defineMeta } from "@storybook/addon-svelte-csf";
 	import { expect, userEvent, waitFor, within } from "storybook/test";
 	import IssueForm from "./IssueForm.svelte";
-	import MockAuthProvider, {
-		mockAccounts
-	} from "$lib/components/testing/MockAuthProvider.svelte";
 
 	// no-ops; submitting is inert here (needs an authed agent context)
 	const noop = () => undefined;
 
-	const storyAccounts = mockAccounts.slice(0, 2);
-
 	const { Story } = defineMeta({
 		title: "Repo/Issues/IssueForm",
 		component: IssueForm,
@@ -43,6 +38,7 @@
 
 <!-- fills the form and submits with ctrl+enter against a fake agent that rejects, showing the error alert -->
 <Story
+	parameters={{ auth: true }}
 	name="Failed submission"
 	play={async ({ canvasElement }) => {
 		const canvas = within(canvasElement);
@@ -57,13 +53,12 @@
 	}}
 >
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<IssueForm {...args} />
-		</MockAuthProvider>
+		<IssueForm {...args} />
 	{/snippet}
 </Story>
 
 <Story
+	parameters={{ auth: { accounts: 2 } }}
 	name="Opening as another account"
 	play={async ({ canvasElement }) => {
 		const canvas = within(canvasElement);
@@ -75,13 +70,12 @@
 	}}
 >
 	{#snippet template(args)}
-		<MockAuthProvider accounts={storyAccounts}>
-			<IssueForm {...args} />
-		</MockAuthProvider>
+		<IssueForm {...args} />
 	{/snippet}
 </Story>
 
 <Story
+	parameters={{ auth: { accounts: 2 } }}
 	name="Editing has no picker"
 	args={{
 		mode: "edit",
@@ -96,8 +90,6 @@
 	}}
 >
 	{#snippet template(args)}
-		<MockAuthProvider accounts={storyAccounts}>
-			<IssueForm {...args} />
-		</MockAuthProvider>
+		<IssueForm {...args} />
 	{/snippet}
 </Story>
diff --git a/web/src/lib/components/repo/pipelines/PipelineList.stories.svelte b/web/src/lib/components/repo/pipelines/PipelineList.stories.svelte
index a9a7b0d54..09071da56 100644
--- a/web/src/lib/components/repo/pipelines/PipelineList.stories.svelte
+++ b/web/src/lib/components/repo/pipelines/PipelineList.stories.svelte
@@ -1,15 +1,17 @@
 <script module lang="ts">
 	import { defineMeta } from "@storybook/addon-svelte-csf";
-	import StoryAuthProvider from "../../../../../.storybook/StoryAuthProvider.svelte";
 	import PipelineList from "./PipelineList.svelte";
 	import { pipelines } from "./mock";
 
 	const ownerDid = "did:plc:owner";
 
+	const owner = { auth: { accounts: [{ did: ownerDid, handle: "tangled.org" }] } };
+
 	const { Story } = defineMeta({
 		title: "Repo/Pipelines/PipelineList",
 		component: PipelineList,
 		tags: ["autodocs"],
+		parameters: { auth: false },
 		args: {
 			ownerHandle: "tangled.org",
 			ownerDid,
@@ -20,24 +22,16 @@
 </script>
 
 <Story name="Default" asChild>
-	<StoryAuthProvider>
-		<PipelineList ownerHandle="tangled.org" {ownerDid} repoName="core" {pipelines} />
-	</StoryAuthProvider>
+	<PipelineList ownerHandle="tangled.org" {ownerDid} repoName="core" {pipelines} />
 </Story>
 <!-- no runs at all: the setup steps -->
-<Story name="Empty" asChild>
-	<StoryAuthProvider initial={{ did: ownerDid, handle: "tangled.org" }}>
-		<PipelineList ownerHandle="tangled.org" {ownerDid} repoName="core" pipelines={[]} />
-	</StoryAuthProvider>
+<Story name="Empty" asChild parameters={owner}>
+	<PipelineList ownerHandle="tangled.org" {ownerDid} repoName="core" pipelines={[]} />
 </Story>
 <Story name="Empty visitor" asChild>
-	<StoryAuthProvider>
-		<PipelineList ownerHandle="tangled.org" {ownerDid} repoName="core" pipelines={[]} />
-	</StoryAuthProvider>
+	<PipelineList ownerHandle="tangled.org" {ownerDid} repoName="core" pipelines={[]} />
 </Story>
 <!-- runs exist, none match the trigger filter -->
 <Story name="Filtered out" asChild>
-	<StoryAuthProvider>
-		<PipelineList ownerHandle="tangled.org" {ownerDid} repoName="core" pipelines={[]} filtered />
-	</StoryAuthProvider>
+	<PipelineList ownerHandle="tangled.org" {ownerDid} repoName="core" pipelines={[]} filtered />
 </Story>
diff --git a/web/src/lib/components/repo/pulls/PullCompose.stories.svelte b/web/src/lib/components/repo/pulls/PullCompose.stories.svelte
index 6234afc39..388aead23 100644
--- a/web/src/lib/components/repo/pulls/PullCompose.stories.svelte
+++ b/web/src/lib/components/repo/pulls/PullCompose.stories.svelte
@@ -2,13 +2,8 @@
 	import { defineMeta } from "@storybook/addon-svelte-csf";
 	import { expect, userEvent, within } from "storybook/test";
 	import PullCompose from "./PullCompose.svelte";
-	import MockAuthProvider, {
-		mockAccounts
-	} from "$lib/components/testing/MockAuthProvider.svelte";
 	import type { ComposeData } from "$lib/api/pullCompose";
 
-	const storyAccounts = mockAccounts.slice(0, 2);
-
 	const branch = (name: string, isDefault = false) => ({
 		reference: { name, hash: "d34db33fd34db33fd34db33fd34db33fd34db33f" },
 		is_default: isDefault,
@@ -79,15 +74,14 @@
 	});
 </script>
 
-<Story name="Default">
+<Story name="Default" parameters={{ auth: { accounts: 2 } }}>
 	{#snippet template(args)}
-		<MockAuthProvider accounts={storyAccounts}>
-			<PullCompose {...args} />
-		</MockAuthProvider>
+		<PullCompose {...args} />
 	{/snippet}
 </Story>
 
 <Story
+	parameters={{ auth: { accounts: 2 } }}
 	name="Multiaccount"
 	play={async ({ canvasElement }) => {
 		const canvas = within(canvasElement);
@@ -102,8 +96,6 @@
 	}}
 >
 	{#snippet template(args)}
-		<MockAuthProvider accounts={storyAccounts}>
-			<PullCompose {...args} />
-		</MockAuthProvider>
+		<PullCompose {...args} />
 	{/snippet}
 </Story>
diff --git a/web/src/lib/components/repo/tickets/Ticket.stories.svelte b/web/src/lib/components/repo/tickets/Ticket.stories.svelte
index 0a8662152..1099aab7e 100644
--- a/web/src/lib/components/repo/tickets/Ticket.stories.svelte
+++ b/web/src/lib/components/repo/tickets/Ticket.stories.svelte
@@ -2,7 +2,6 @@
 	import { defineMeta } from "@storybook/addon-svelte-csf";
 	import Bell from "$icon/bell";
 	import Button from "$lib/components/ui/Button.svelte";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import Ticket from "./Ticket.svelte";
 
 	const body = `Instead of gating users by repo collaborators, we can use git repo DID as delegated account.
@@ -43,39 +42,33 @@ Knot will mint service-auth to access spindle as gitrepo's authority. This way,
 </script>
 
 <!-- no edit/delete handlers, so neither button is offered -->
-<Story name="Issue Open">
+<Story name="Issue Open" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<Ticket {...args} />
-		</MockAuthProvider>
+		<Ticket {...args} />
 	{/snippet}
 </Story>
 
-<Story name="Issue with Actions">
+<Story name="Issue with Actions" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<Ticket
-				{...args}
-				ticket={{ ...args.ticket, ...patch }}
-				onedit={async (input) => {
-					patch = input;
-				}}
-				ondelete={async () => {
-					throw new Error("no-op");
-				}}
-			>
-				{#snippet extraActions()}
-					<Button icon={Bell}>Subscribe</Button>
-				{/snippet}
-			</Ticket>
-		</MockAuthProvider>
+		<Ticket
+			{...args}
+			ticket={{ ...args.ticket, ...patch }}
+			onedit={async (input) => {
+				patch = input;
+			}}
+			ondelete={async () => {
+				throw new Error("no-op");
+			}}
+		>
+			{#snippet extraActions()}
+				<Button icon={Bell}>Subscribe</Button>
+			{/snippet}
+		</Ticket>
 	{/snippet}
 </Story>
 
-<Story name="Issue as Non-Author">
+<Story name="Issue as Non-Author" parameters={{ auth: false }}>
 	{#snippet template(args)}
-		<MockAuthProvider signedIn={false}>
-			<Ticket {...args} onedit={async () => undefined} ondelete={async () => undefined} />
-		</MockAuthProvider>
+		<Ticket {...args} onedit={async () => undefined} ondelete={async () => undefined} />
 	{/snippet}
 </Story>
diff --git a/web/src/lib/components/strings/StringForm.stories.svelte b/web/src/lib/components/strings/StringForm.stories.svelte
index 35d9958e5..c9ef36459 100644
--- a/web/src/lib/components/strings/StringForm.stories.svelte
+++ b/web/src/lib/components/strings/StringForm.stories.svelte
@@ -1,15 +1,10 @@
 <script module lang="ts">
 	import { defineMeta } from "@storybook/addon-svelte-csf";
 	import { expect, userEvent, waitFor, within } from "storybook/test";
-	import MockAuthProvider, {
-		mockAccounts
-	} from "$lib/components/testing/MockAuthProvider.svelte";
 	import StringForm from "./StringForm.svelte";
 
 	const noop = () => undefined;
 
-	const storyAccounts = mockAccounts.slice(0, 2);
-
 	const { Story } = defineMeta({
 		title: "Strings/StringForm",
 		component: StringForm,
@@ -28,6 +23,7 @@
 <Story name="Create" />
 
 <Story
+	parameters={{ auth: { accounts: 2 } }}
 	name="Publishing as another account"
 	play={async ({ canvasElement }) => {
 		const canvas = within(canvasElement);
@@ -39,13 +35,12 @@
 	}}
 >
 	{#snippet template(args)}
-		<MockAuthProvider accounts={storyAccounts}>
-			<StringForm {...args} />
-		</MockAuthProvider>
+		<StringForm {...args} />
 	{/snippet}
 </Story>
 
 <Story
+	parameters={{ auth: { accounts: 2 } }}
 	name="Editing has no picker"
 	args={{ mode: "edit", rkey: "3l7abc" }}
 	play={async ({ canvasElement }) => {
@@ -55,8 +50,6 @@
 	}}
 >
 	{#snippet template(args)}
-		<MockAuthProvider accounts={storyAccounts}>
-			<StringForm {...args} />
-		</MockAuthProvider>
+		<StringForm {...args} />
 	{/snippet}
 </Story>
diff --git a/web/src/lib/components/testing/MockAuthProvider.svelte b/web/src/lib/components/testing/MockAuthProvider.svelte
deleted file mode 100644
index f762ecfdc..000000000
--- a/web/src/lib/components/testing/MockAuthProvider.svelte
+++ /dev/null
@@ -1,80 +0,0 @@
-<script module lang="ts">
-	export const mockAccounts = [
-		{ did: "did:plc:alice", handle: "alice.pds.tngl.boltless.dev" },
-		{ did: "did:plc:bob", handle: "bob.pds.tngl.boltless.dev" },
-		{ did: "did:plc:carol", handle: "carol.pds.tngl.boltless.dev" }
-	];
-</script>
-
-<script lang="ts">
-	// story-only helper: injects a fake auth context so form stories can exercise
-	// a real (failing) submission without a live session. the fake agent's fetch
-	// handler always rejects, so putIssue/putComment land in the form's catch block.
-	import { setContext, type Snippet } from "svelte";
-	import { AUTH_KEY, type Auth } from "$lib/auth.svelte";
-
-	interface Props {
-		// message the fake agent rejects submissions with
-		failWith?: string;
-		// when false, injects a signed-out context (no agent / null did) so stories
-		// can exercise the logged-out affordance
-		signedIn?: boolean;
-		accounts?: { did: string; handle: string }[];
-		// dids whose session is expired
-		expired?: string[];
-		children: Snippet;
-	}
-
-	let {
-		failWith = "MockAuthProvider: network request failed, this error is intentional.",
-		signedIn = true,
-		accounts = [mockAccounts[0]],
-		expired = [],
-		children
-	}: Props = $props();
-
-	// props are fixed for this provider's lifetime, so a one-time snapshot is intended
-	// svelte-ignore state_referenced_locally
-	const agent = signedIn
-		? {
-				sub: "did:plc:alice",
-				handle: () => Promise.reject(new Error(failWith))
-			}
-		: null;
-
-	// svelte-ignore state_referenced_locally
-	let knownAccounts = $state(accounts.map((account, index) => ({ ...account, addedAt: index })));
-
-	// svelte-ignore state_referenced_locally
-	const auth = (signedIn
-		? {
-				agent,
-				currentDid: knownAccounts[0]?.did ?? null,
-				currentUser: knownAccounts[0] ?? null,
-				get accounts() {
-					return knownAccounts;
-				},
-				hasAccount: (did: string) => knownAccounts.some((account) => account.did === did),
-				agentFor: (did: string) => {
-					if (!expired.includes(did)) return Promise.resolve(agent);
-					const handle =
-						knownAccounts.find((account) => account.did === did)?.handle ?? did;
-					knownAccounts = knownAccounts.filter((account) => account.did !== did);
-					return Promise.reject(
-						new Error(`${handle}'s session expired. Sign in again to act as them.`)
-					);
-				},
-				bobbinUrl: "https://bobbin.story"
-			}
-		: {
-				agent: null,
-				currentDid: null,
-				currentUser: null,
-				accounts: [],
-				hasAccount: () => false
-			}) as unknown as Auth;
-
-	setContext(AUTH_KEY, auth);
-</script>
-
-{@render children()}
diff --git a/web/src/lib/components/timeline/Timeline.stories.svelte b/web/src/lib/components/timeline/Timeline.stories.svelte
index a71c2180d..ab4305615 100644
--- a/web/src/lib/components/timeline/Timeline.stories.svelte
+++ b/web/src/lib/components/timeline/Timeline.stories.svelte
@@ -1,6 +1,5 @@
 <script module lang="ts">
 	import { defineMeta } from "@storybook/addon-svelte-csf";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import { feed } from "./mock";
 	import Timeline from "./Timeline.svelte";
 
@@ -12,11 +11,9 @@
 	});
 </script>
 
-<Story name="Default">
+<Story name="Default" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<Timeline {...args} />
-		</MockAuthProvider>
+		<Timeline {...args} />
 	{/snippet}
 </Story>
 
diff --git a/web/src/lib/components/timeline/TimelineFollowEvent.stories.svelte b/web/src/lib/components/timeline/TimelineFollowEvent.stories.svelte
index ffeed5557..52ea3163c 100644
--- a/web/src/lib/components/timeline/TimelineFollowEvent.stories.svelte
+++ b/web/src/lib/components/timeline/TimelineFollowEvent.stories.svelte
@@ -1,6 +1,5 @@
 <script module lang="ts">
 	import { defineMeta } from "@storybook/addon-svelte-csf";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import TimelineFollowEvent from "./TimelineFollowEvent.svelte";
 	import type { FollowEvent } from "$lib/api/lexicons/types/sh/tangled/feed/getTimeline";
 
@@ -29,10 +28,8 @@
 	});
 </script>
 
-<Story name="Default">
+<Story name="Default" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<TimelineFollowEvent {...args} />
-		</MockAuthProvider>
+		<TimelineFollowEvent {...args} />
 	{/snippet}
 </Story>
diff --git a/web/src/lib/components/timeline/TimelineRepoEvent.stories.svelte b/web/src/lib/components/timeline/TimelineRepoEvent.stories.svelte
index 2f81839e1..bf6a1ffc1 100644
--- a/web/src/lib/components/timeline/TimelineRepoEvent.stories.svelte
+++ b/web/src/lib/components/timeline/TimelineRepoEvent.stories.svelte
@@ -1,6 +1,5 @@
 <script module lang="ts">
 	import { defineMeta } from "@storybook/addon-svelte-csf";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import TimelineRepoEvent from "./TimelineRepoEvent.svelte";
 	import type { RepoEvent } from "$lib/api/lexicons/types/sh/tangled/feed/getTimeline";
 
@@ -39,18 +38,14 @@
 	});
 </script>
 
-<Story name="Created">
+<Story name="Created" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<TimelineRepoEvent {...args} />
-		</MockAuthProvider>
+		<TimelineRepoEvent {...args} />
 	{/snippet}
 </Story>
 
-<Story name="Forked">
+<Story name="Forked" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<TimelineRepoEvent {...args} event={forked} />
-		</MockAuthProvider>
+		<TimelineRepoEvent {...args} event={forked} />
 	{/snippet}
 </Story>
diff --git a/web/src/lib/components/timeline/TimelineStarEvent.stories.svelte b/web/src/lib/components/timeline/TimelineStarEvent.stories.svelte
index 8264c5286..248adc085 100644
--- a/web/src/lib/components/timeline/TimelineStarEvent.stories.svelte
+++ b/web/src/lib/components/timeline/TimelineStarEvent.stories.svelte
@@ -1,6 +1,5 @@
 <script module lang="ts">
 	import { defineMeta } from "@storybook/addon-svelte-csf";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import TimelineStarEvent from "./TimelineStarEvent.svelte";
 	import type { StarEvent } from "$lib/api/lexicons/types/sh/tangled/feed/getTimeline";
 
@@ -32,10 +31,8 @@
 	});
 </script>
 
-<Story name="Default">
+<Story name="Default" parameters={{ auth: true }}>
 	{#snippet template(args)}
-		<MockAuthProvider>
-			<TimelineStarEvent {...args} />
-		</MockAuthProvider>
+		<TimelineStarEvent {...args} />
 	{/snippet}
 </Story>
diff --git a/web/src/lib/components/timeline/TimelineView.stories.svelte b/web/src/lib/components/timeline/TimelineView.stories.svelte
index 50c29791d..32b55253e 100644
--- a/web/src/lib/components/timeline/TimelineView.stories.svelte
+++ b/web/src/lib/components/timeline/TimelineView.stories.svelte
@@ -1,7 +1,5 @@
 <script module lang="ts">
-	import type { ComponentProps } from "svelte";
 	import { defineMeta } from "@storybook/addon-svelte-csf";
-	import MockAuthProvider from "$lib/components/testing/MockAuthProvider.svelte";
 	import { feed, trending } from "./mock";
 	import TimelineView from "./TimelineView.svelte";
 
@@ -9,9 +7,8 @@
 		title: "Timeline/TimelineView",
 		component: TimelineView,
 		tags: ["autodocs"],
-		render: template,
 		// the rails are full-height and sticky, so the view wants the whole canvas
-		parameters: { layout: "fullscreen" },
+		parameters: { layout: "fullscreen", auth: true },
 		args: {
 			feed,
 			trending,
@@ -22,20 +19,13 @@
 	});
 </script>
 
-<!-- the cards reach for auth context, and the rail follows the story's signed-in state -->
-{#snippet template(args: ComponentProps<typeof TimelineView>)}
-	<MockAuthProvider signedIn={args.signedIn ?? true}>
-		<TimelineView {...args} />
-	</MockAuthProvider>
-{/snippet}
-
 <!-- the /timeline route: global feed, both rails, toggle on show -->
 <Story name="Global" />
 
 <Story name="Following" args={{ followingOnly: true }} />
 
 <!-- signed out drops the toggle, and the inbox rail asks you to log in -->
-<Story name="Signed out" args={{ signedIn: false }} />
+<Story name="Signed out" args={{ signedIn: false }} parameters={{ auth: false }} />
 
 <!-- the homescreen at /, where the toggle has to stay on the root route -->
 <Story name="Homescreen" args={{ basePath: "/" }} />
-- 
2.51.2