[builder-25]

Summary

Operator-reported bug → triage → root cause → fix → polish, all on the public-reader surface (/p/[nanoid]).

The trigger: published a wiki on a two-host deployment (Wiki at gatsby.up.railway.app, Core at robincore-production-xxx.up.railway.app). The Settings tab toggle flipped fine, but the Open button sent users to https://robincore-production-xxx.up.railway.app/p/<slug> — Core's hostname, which doesn't serve the public page. Investigating uncovered more issues on the reader surface (logo, GitHub star, duplicate title, dead cross-refs, citation markers leaking) so I rolled the polish into the same PR. Each commit is independently squashable.

1. wikis.publishedOrigin captures the wrong URL on multi-host setups

Root cause — core/src/routes/wikis.ts:686 derives origin from new URL(c.req.url).origin. When the frontend POSTs /api/wikis/<id>/publish via Next.js's rewrites() (or any reverse proxy), Core receives the rewritten request and c.req.url resolves to Core's hostname. The stored value then leaks into MCP responses, the Settings modal's Open/Copy buttons, and any consumer that builds /p/<slug> URLs from the field.

Fix — two commits:

• core/src/routes/wikis.ts — prefer X-Forwarded-Host / X-Forwarded-Proto when present (proxies pass these through). Fall back to existing c.req.url derivation so same-origin setups keep working.
• wiki/src/components/layout/AddWikiModal.tsx — Open/Copy buttons construct the URL from window.location.origin, ignoring the stored field. The browser always knows its own host, so trust that.

DB rows published before this PR keep the stale value but no longer affect the UI. Republishing rewrites the field correctly.

2. Public-page polish

The published /p/[nanoid] page is the read-only reader surface anyone-with-the-link can open. A few items felt off:

• Robin logo replaces the abstract infinity glyph that was top-left (matches onboarding + brand surface).
• Star on GitHub removed — /p/<slug> is a reader page, not a developer landing page.
• "Powered by Robin Wiki" in the footer is now a link to withrobin.ai/knowledge so the footer line itself routes back to the marketing page.
• Infobox hidden — the side-panel infobox is an editor affordance, visually loud on the read-only surface.
• Duplicate title stripped — regen emits a {Type}: {Name} heading at the top of the wiki body. The public page already renders {wiki.name} as the H1, so the body's title appeared twice. Strip rule: first heading- or bold-only line whose plaintext contains the wiki name. Narrow enough that arbitrary prose mentioning the title isn't clipped.
• ES2017-safe regex — the strip-rule originally used the /s (dotAll) flag for spanning newlines; the wiki workspace's tsconfig targets ES2017, which predates dotAll, so next build rejected it. Swapped .*? for [\s\S]*? and dropped the flag. Same behaviour.

3. Cross-refs and citations on the public reader

The wiki body contains [[wiki:slug]], [[fragment:slug]], [[entry:slug]], [[person:slug]] cross-refs that the authenticated app resolves into clickable anchors to /wiki/<id>, /fragments/<id>, etc. The public page has no such routes — the links 404, and the inline citation markers [1], [2] point to source fragments that the reader can't open either.

Fix — core/src/lib/published-content.ts + core/src/routes/published.ts:

• For each [[wiki:slug]] token, look up whether the target is itself published. If yes, emit a native markdown link [Label](/p/<their-slug>). If no, drop the link and keep the label as plain text.
• For [[fragment:slug]], [[entry:slug]], [[person:slug]] — always drop to plain label (no public route exists for these).
• Strip [N] citation markers entirely.

Content returned to the client is now self-contained markdown — every surviving cross-ref is a real anchor, the refs field is empty, and MarkdownContent renders natively. No client-side change needed beyond the existing renderer.

Test plan

• On a two-host deploy (Wiki ≠ Core hostname), publish any wiki via Settings tab → click Open → URL points at the Wiki host, not Core.
• Public /p/<slug> page: logo is Robin (not infinity), no GitHub button, footer line is a link, no infobox.
• If the wiki body starts with ## Belief: <name> or similar, the published page renders the H1 once (chrome) without a duplicate underneath.
• Body has no [1], [2] markers.
• [[wiki:public-target]] renders as a clickable link to /p/<their-slug>.
• [[wiki:private-target]] renders as plain text (the label, no link).
• [[fragment:foo]], [[entry:foo]], [[person:foo]] all render as plain text.

🤖 Generated with Claude Code