MyPrototypeWhat · MyPrototypeWhat · Jun 24, 2026 · Jun 24, 2026
diff --git a/.changeset/core-pool-depth.md b/.changeset/core-pool-depth.md
diff --git a/.changeset/mcp-cli-and-verdict.md b/.changeset/mcp-cli-and-verdict.md
diff --git a/.changeset/merge-max-no-spread.md b/.changeset/merge-max-no-spread.md
diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -1,5 +1,23 @@
 # @refkit/core
 
+## 0.3.0
+
+### Minor Changes
+
+- 451271b: Add `SearchInput.poolFactor`: overfetch a wider candidate pool per provider (default 4×, capped at 100/source) before merge/rerank/gate, then narrow to `limit`. Fixes pool starvation — dedup and ranking now operate on real candidates instead of a source-truncated slice. Non-finite or `< 1` factors fall back to the default.
+
+  Also: `buildAttribution` now includes the precise `licenseVersion` (e.g. "CC-BY 4.0" instead of "CC-BY") when the source provides it.
+
+### Patch Changes
+
+- fa930f9: Fix a latent stack overflow in `mergeReferences`: the RRF max-normaliser used
+  `Math.max(...score.values())`, which throws `RangeError: Maximum call stack size
+exceeded` once the merged pool gets large (~10^5 unique results) — the same
+  spread-overflow already guarded against in `lexicalReranker`'s quality pass. It
+  now computes the max with a reduce loop, preserving the "top result relevance =
+  exactly 1.0" invariant, and the inaccurate "empty input returns [] earlier"
+  comment is corrected.
+
 ## 0.2.0
 
 ### Minor Changes

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,10 +1,20 @@
 {
   "name": "@refkit/core",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "refkit core — neutral reference-retrieval brain: Reference/RightsRecord contract, license normalization, strict-deny use-gate, RRF merge/dedup, ReferenceProvider interfaces. Zero-network, zero-provider, only zod.",
   "type": "module",
   "license": "Apache-2.0",
-  "keywords": ["refkit", "reference-retrieval", "license", "license-compliance", "attribution", "creative-commons", "image-search", "rerank", "agent"],
+  "keywords": [
+    "refkit",
+    "reference-retrieval",
+    "license",
+    "license-compliance",
+    "attribution",
+    "creative-commons",
+    "image-search",
+    "rerank",
+    "agent"
+  ],
   "main": "./src/index.ts",
   "types": "./src/index.ts",
   "exports": {

diff --git a/packages/mcp/CHANGELOG.md b/packages/mcp/CHANGELOG.md
@@ -1,5 +1,31 @@
 # @refkit/mcp
 
+## 0.2.0
+
+### Minor Changes
+
+- 451271b: - Zero-config `npx @refkit/mcp` server: a `bin` that boots with the keyless providers plus any BYOK provider whose key is in the environment — no host code.
+  - Expose the use-verdict + attribution at the agent boundary: a new `intent` param annotates each result with `{ decision, reason, confidence }` (+ a ready-to-use attribution credit line) without filtering; `gateFor` still filters.
+  - Report the real package version in the MCP `initialize` handshake (was hardcoded `0.0.0`).
+
+### Patch Changes
+
+- Updated dependencies [451271b]
+- Updated dependencies [fa930f9]
+  - @refkit/core@0.3.0
+  - @refkit/provider-artic@0.1.2
+  - @refkit/provider-brave@0.1.2
+  - @refkit/provider-flickr@0.1.2
+  - @refkit/provider-gutendex@0.1.2
+  - @refkit/provider-met@0.1.2
+  - @refkit/provider-openverse@0.1.2
+  - @refkit/provider-pexels@0.1.2
+  - @refkit/provider-pixabay@0.1.2
+  - @refkit/provider-poetrydb@0.1.2
+  - @refkit/provider-smithsonian@0.1.2
+  - @refkit/provider-unsplash@0.1.2
+  - @refkit/provider-wikimedia-commons@0.1.2
+
 ## 0.1.1
 
 ### Patch Changes

diff --git a/packages/mcp/package.json b/packages/mcp/package.json
@@ -1,10 +1,18 @@
 {
   "name": "@refkit/mcp",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "MCP server for refkit — exposes license-normalized reference search as an agent tool.",
   "type": "module",
   "license": "Apache-2.0",
-  "keywords": ["refkit", "mcp", "model-context-protocol", "agent", "reference-retrieval", "license", "tool"],
+  "keywords": [
+    "refkit",
+    "mcp",
+    "model-context-protocol",
+    "agent",
+    "reference-retrieval",
+    "license",
+    "tool"
+  ],
   "main": "./src/index.ts",
   "types": "./src/index.ts",
   "bin": {

diff --git a/packages/provider-artic/CHANGELOG.md b/packages/provider-artic/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @refkit/provider-artic
 
+## 0.1.2
+
+### Patch Changes
+
+- Updated dependencies [451271b]
+- Updated dependencies [fa930f9]
+  - @refkit/core@0.3.0
+
 ## 0.1.1
 
 ### Patch Changes

diff --git a/packages/provider-artic/package.json b/packages/provider-artic/package.json
@@ -1,10 +1,21 @@
 {
   "name": "@refkit/provider-artic",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Art Institute of Chicago provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
-  "keywords": ["refkit", "reference-retrieval", "license", "attribution", "refkit-provider", "art-institute-of-chicago", "museum", "cc0", "public-domain", "images"],
+  "keywords": [
+    "refkit",
+    "reference-retrieval",
+    "license",
+    "attribution",
+    "refkit-provider",
+    "art-institute-of-chicago",
+    "museum",
+    "cc0",
+    "public-domain",
+    "images"
+  ],
   "main": "./src/index.ts",
   "types": "./src/index.ts",
   "exports": {

diff --git a/packages/provider-brave/CHANGELOG.md b/packages/provider-brave/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @refkit/provider-brave
 
+## 0.1.2
+
+### Patch Changes
+
+- Updated dependencies [451271b]
+- Updated dependencies [fa930f9]
+  - @refkit/core@0.3.0
+
 ## 0.1.1
 
 ### Patch Changes

diff --git a/packages/provider-brave/package.json b/packages/provider-brave/package.json
@@ -1,10 +1,20 @@
 {
   "name": "@refkit/provider-brave",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Brave Search web-discovery provider satellite for refkit — open-web image breadth, license:unknown (use-gated to needs-review).",
   "type": "module",
   "license": "Apache-2.0",
-  "keywords": ["refkit", "reference-retrieval", "license", "attribution", "refkit-provider", "brave", "web-search", "image-search", "discovery"],
+  "keywords": [
+    "refkit",
+    "reference-retrieval",
+    "license",
+    "attribution",
+    "refkit-provider",
+    "brave",
+    "web-search",
+    "image-search",
+    "discovery"
+  ],
   "main": "./src/index.ts",
   "types": "./src/index.ts",
   "exports": {

diff --git a/packages/provider-flickr/CHANGELOG.md b/packages/provider-flickr/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @refkit/provider-flickr
 
+## 0.1.2
+
+### Patch Changes
+
+- Updated dependencies [451271b]
+- Updated dependencies [fa930f9]
+  - @refkit/core@0.3.0
+
 ## 0.1.1
 
 ### Patch Changes

diff --git a/packages/provider-flickr/package.json b/packages/provider-flickr/package.json
@@ -1,10 +1,20 @@
 {
   "name": "@refkit/provider-flickr",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Flickr provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
-  "keywords": ["refkit", "reference-retrieval", "license", "attribution", "refkit-provider", "flickr", "creative-commons", "public-domain", "images"],
+  "keywords": [
+    "refkit",
+    "reference-retrieval",
+    "license",
+    "attribution",
+    "refkit-provider",
+    "flickr",
+    "creative-commons",
+    "public-domain",
+    "images"
+  ],
   "main": "./src/index.ts",
   "types": "./src/index.ts",
   "exports": {

diff --git a/packages/provider-gutendex/CHANGELOG.md b/packages/provider-gutendex/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @refkit/provider-gutendex
 
+## 0.1.2
+
+### Patch Changes
+
+- Updated dependencies [451271b]
+- Updated dependencies [fa930f9]
+  - @refkit/core@0.3.0
+
 ## 0.1.1
 
 ### Patch Changes

diff --git a/packages/provider-gutendex/package.json b/packages/provider-gutendex/package.json
@@ -1,10 +1,21 @@
 {
   "name": "@refkit/provider-gutendex",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Gutendex (Project Gutenberg) provider satellite for refkit — public-domain book references, per-item copyright→license.",
   "type": "module",
   "license": "Apache-2.0",
-  "keywords": ["refkit", "reference-retrieval", "license", "attribution", "refkit-provider", "project-gutenberg", "gutendex", "public-domain", "text", "books"],
+  "keywords": [
+    "refkit",
+    "reference-retrieval",
+    "license",
+    "attribution",
+    "refkit-provider",
+    "project-gutenberg",
+    "gutendex",
+    "public-domain",
+    "text",
+    "books"
+  ],
   "main": "./src/index.ts",
   "types": "./src/index.ts",
   "exports": {

diff --git a/packages/provider-met/CHANGELOG.md b/packages/provider-met/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @refkit/provider-met
 
+## 0.1.2
+
+### Patch Changes
+
+- Updated dependencies [451271b]
+- Updated dependencies [fa930f9]
+  - @refkit/core@0.3.0
+
 ## 0.1.1
 
 ### Patch Changes

diff --git a/packages/provider-met/package.json b/packages/provider-met/package.json
@@ -1,10 +1,22 @@
 {
   "name": "@refkit/provider-met",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "The Metropolitan Museum of Art provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
-  "keywords": ["refkit", "reference-retrieval", "license", "attribution", "refkit-provider", "met-museum", "metropolitan-museum", "museum", "cc0", "public-domain", "images"],
+  "keywords": [
+    "refkit",
+    "reference-retrieval",
+    "license",
+    "attribution",
+    "refkit-provider",
+    "met-museum",
+    "metropolitan-museum",
+    "museum",
+    "cc0",
+    "public-domain",
+    "images"
+  ],
   "main": "./src/index.ts",
   "types": "./src/index.ts",
   "exports": {

diff --git a/packages/provider-openverse/CHANGELOG.md b/packages/provider-openverse/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @refkit/provider-openverse
 
+## 0.1.2
+
+### Patch Changes
+
+- Updated dependencies [451271b]
+- Updated dependencies [fa930f9]
+  - @refkit/core@0.3.0
+
 ## 0.1.1
 
 ### Patch Changes

diff --git a/packages/provider-openverse/package.json b/packages/provider-openverse/package.json
@@ -1,10 +1,21 @@
 {
   "name": "@refkit/provider-openverse",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Openverse provider satellite for refkit — CC/PD licensed image search, license-normalized.",
   "type": "module",
   "license": "Apache-2.0",
-  "keywords": ["refkit", "reference-retrieval", "license", "attribution", "refkit-provider", "openverse", "creative-commons", "public-domain", "images", "audio"],
+  "keywords": [
+    "refkit",
+    "reference-retrieval",
+    "license",
+    "attribution",
+    "refkit-provider",
+    "openverse",
+    "creative-commons",
+    "public-domain",
+    "images",
+    "audio"
+  ],
   "main": "./src/index.ts",
   "types": "./src/index.ts",
   "exports": {

diff --git a/packages/provider-pexels/CHANGELOG.md b/packages/provider-pexels/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @refkit/provider-pexels
 
+## 0.1.2
+
+### Patch Changes
+
+- Updated dependencies [451271b]
+- Updated dependencies [fa930f9]
+  - @refkit/core@0.3.0
+
 ## 0.1.1
 
 ### Patch Changes

diff --git a/packages/provider-pexels/package.json b/packages/provider-pexels/package.json
@@ -1,10 +1,21 @@
 {
   "name": "@refkit/provider-pexels",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Pexels provider satellite for refkit — image search, hotlink-required.",
   "type": "module",
   "license": "Apache-2.0",
-  "keywords": ["refkit", "reference-retrieval", "license", "attribution", "refkit-provider", "pexels", "stock-photos", "stock-video", "images", "video"],
+  "keywords": [
+    "refkit",
+    "reference-retrieval",
+    "license",
+    "attribution",
+    "refkit-provider",
+    "pexels",
+    "stock-photos",
+    "stock-video",
+    "images",
+    "video"
+  ],
   "main": "./src/index.ts",
   "types": "./src/index.ts",
   "exports": {