feat(frontend): open the portal UI by default

src/frontend/src/components/portal/portal-layout.tsx

@@ -15,8 +15,8 @@ import { useShellLayout, type ShellLayout } from "@/lib/portal/use-shell-layout"
 import { useViewerIsManager } from "@/lib/portal/use-viewer-is-manager";
 
 /**
- * Portal shell (Phase 1 buildout), behind the `insight.portal` flag so the
- * default app is untouched. Composition (one SidebarProvider, all normal flow):
+ * Portal shell (Phase 1 buildout), rendered unless the reader opts out via
+ * `insight.portal`. Composition (one SidebarProvider, all normal flow):
  *   [ lens rail ] [ zone-contextual pane ] [ content ]
  * Every zone renders through `<ZoneContent/>` (Person / People / Directions /
  * Overview / … all portal-native); the route only carries the active person.

src/frontend/src/components/sidebar-settings.tsx

@@ -41,7 +41,7 @@ export function SidebarSettings() {
         >
           <span className="flex items-center gap-2">
             <PanelsTopLeft className="size-4" />
-            <span>Portal (preview)</span>
+            <span>Portal</span>
           </span>
           <Switch
             checked={portal}

src/frontend/src/lib/portal/portal-store.test.ts

@@ -32,6 +32,17 @@ describe("portal preferences", () => {
     expect(window.localStorage.getItem("insight.portal")).toBe("true");
   });
 
+  it("enabled defaults ON when the key is absent", async () => {
+    const { readPortalEnabled } = await import("./portal-store");
+    expect(readPortalEnabled()).toBe(true);
+  });
+
+  it("an explicit opt-out is what the router reads back", async () => {
+    window.localStorage.setItem("insight.portal", "false");
+    const { readPortalEnabled } = await import("./portal-store");
+    expect(readPortalEnabled()).toBe(false);
+  });
+
   it("show-planned defaults ON when the key is absent", () => {
     window.localStorage.removeItem("insight.portal.showPlanned");
     const { result } = renderHook(() => usePortalShowPlanned());
@@ -72,7 +83,7 @@ describe("blocked storage", () => {
       });
     try {
       const { readPortalEnabled } = await import("./portal-store");
-      expect(readPortalEnabled()).toBe(false);
+      expect(readPortalEnabled()).toBe(true);
     } finally {
       getItem.mockRestore();
     }

src/frontend/src/lib/portal/portal-store.ts

@@ -1,7 +1,7 @@
 import { useSyncExternalStore } from "react";
 
 /**
- * Portal PREFERENCES (feature-flagged behind `insight.portal`).
+ * Portal PREFERENCES (`insight.portal` — ON unless the reader opts out).
  *
  * `enabled` and `showPlanned` persist to localStorage (mirroring the metrics-v2
  * flag pattern in feature-flags.ts). Nothing else lives here: every piece of
@@ -29,17 +29,16 @@ interface PortalState {
   enabled: boolean;
   /**
    * Whether navigation shows entries we have not built yet (`unbuilt` in the
-   * nav model). Default ON while the whole portal is itself a preview: for us
-   * and for demos the dead entries ARE the roadmap. Turn it off — or flip the
-   * default — the day the portal stops being opt-in, so a customer never has
-   * to tell our backlog apart from their own missing data.
+   * nav model). Default ON: for us and for demos the dead entries ARE the
+   * roadmap. Flip it before a reader has to tell our backlog apart from their
+   * own missing data.
    */
   showPlanned: boolean;
 }
 
 /** Router-safe read: `beforeLoad` runs outside React, so it cannot use a hook. */
 export function readPortalEnabled(): boolean {
-  return readEnabled();
+  return readBoolPref(ENABLED_KEY);
 }
 
 /**
@@ -57,18 +56,14 @@ function readKey(key: string): string | null {
   }
 }
 
-function readEnabled(): boolean {
-  return readKey(ENABLED_KEY) === "true";
-}
-
-/** Absent key = default ON (see `showPlanned`); only an explicit "false" hides. */
-function readShowPlanned(): boolean {
-  return readKey(SHOW_PLANNED_KEY) !== "false";
+/** Absent key = ON; both preferences are opt-OUT, so only "false" turns one off. */
+function readBoolPref(key: string): boolean {
+  return readKey(key) !== "false";
 }
 
 let state: PortalState = {
-  enabled: readEnabled(),
-  showPlanned: readShowPlanned(),
+  enabled: readBoolPref(ENABLED_KEY),
+  showPlanned: readBoolPref(SHOW_PLANNED_KEY),
 };
 
 const listeners = new Set<() => void>();
@@ -93,7 +88,7 @@ function persist(key: string, value: string): void {
   }
 }
 
-/** Turn the portal preview on or off for this reader. */
+/** Turn the portal on or off for this reader. */
 export function setPortalEnabled(enabled: boolean): void {
   state = { ...state, enabled };
   persist(ENABLED_KEY, enabled ? "true" : "false");
@@ -107,12 +102,12 @@ export function setPortalShowPlanned(show: boolean): void {
   emit();
 }
 
-/** Whether this reader has the portal preview on. */
+/** Whether this reader has the portal on. */
 export function usePortalEnabled(): boolean {
   return useSyncExternalStore(
     subscribe,
     () => state.enabled,
-    () => false,
+    readPortalEnabled,
   );
 }
 

src/frontend/src/routes/index.tsx

@@ -18,7 +18,7 @@ export const Route = createFileRoute("/")({
 function IndexRoute() {
   const { personId } = useViewer();
   const portal = usePortalEnabled();
-  // `beforeLoad` only runs on navigation, so a reader who turns the preview on
+  // `beforeLoad` only runs on navigation, so a reader who turns the portal on
   // while standing here would sit on the dashboard until a reload.
   if (portal) return <Navigate to="/portal" replace />;
   // An authenticated session always carries the person id (the gateway JWT

src/frontend/src/routes/portal.tsx

@@ -27,10 +27,10 @@ export const Route = createFileRoute("/portal")({
 });
 
 function PortalRoute() {
-  // The root shell swaps in PortalLayout for this route while the preview is
+  // The root shell swaps in PortalLayout for this route while the portal is
   // on, so this component only mounts with it OFF — a pasted /portal URL, or a
-  // viewer who turned the preview off while standing here. Either way the
-  // portal must not render: send them to the app they do have.
+  // viewer who opted out while standing here. Either way the portal must not
+  // render: send them to the app they do have.
   if (!usePortalEnabled()) return <Navigate to="/" replace />;
   return <PortalLayout />;
 }