Context7's SDK 2.0 migration leaked SSE streams, and the fix came with real latency data.

4.0.1 and 4.0.2 both landed August 11 cleaning up 4.0.0 fallout: 4.0.1 stopped forcing responseMode: "sse" on the HTTP handler because every response was riding an unreleased SSE stream, and 4.0.2 added a 60s AbortSignal.timeout() after stalled backend calls were inheriting undici's ~300s default (GitHub). They justified 60s with production data, these are vector queries with p99.9 around 3.2s. Companion [redacted] fixed silent anonymous fallback when stored OAuth tokens expired, which is the worst class of auth bug, the kind that degrades instead of failing.