Errors

• 401 — missing/invalid Authorization
• 400 — validation
• Provider unavailable messages for Pro without keys (not silent local fallback)