Sms Available

Runtime feature-flag for the phone-OTP login surface.

The SPA queries this once at login-page mount; when it returns {available: false} the LoginForm hides the Email/Phone tab toggle (and the entire phone path) even if its consumer passed enable-phone-login. This lets us ship the binary with the code in place before Aliyun's carrier 报备 (5-7 working days) completes — the feature flips on when OMICOS_ALIYUN_SMS_* env vars get set on the box, with no redeploy.

Also useful for staging / dev where SMS isn't wired up but the rest of the app still needs to render.

No auth required — this endpoint reveals zero PII, just the server-side configuration state.