401
field member: never present
Source: route
Today’s inline {error:'Unauthorized'} 401 across most session-gated routes (getSessionContext()/getOrCreateDbUser() returning no user). Not yet a ServiceError class — every route re-implements the check inline.