Resolve Feishu names by verified open ID and scope VPN member access

frontend/src/locales/en-US.json

@@ -793,6 +793,30 @@
     "setupTitle": "Optional HTTPS public gateway", "setupStepCheck": "Detect system", "setupStepInstall": "Install dependencies", "setupStepConfigure": "Configure gateway and certificate", "detectedSystem": "Server OS", "setupUnsupported": "Automatic setup requires root on Ubuntu or TencentOS Server 4", "setupScope": "Use only if you choose the Nginx gateway. Installs Nginx / Certbot and prepares the validation directory. It does not install VPN protocol dependencies, enable ports, or issue certificates.", "setupButton": "Prepare Nginx / Certbot", "setupComplete": "Dependencies are ready; configure the site and certificate next", "setupFailed": "Initialization failed; inspect the output", "setupInterrupted": "Log connection interrupted; refresh status. Installation may still be running on the server",
     "commonSetupTitle": "First-time shared network setup", "commonSetupHint": "Check permissions, default route and IPv4 forwarding. Enable shared forwarding only when needed; install protocol-specific dependencies separately in Create Tunnel.", "hostRoot": "Privileges", "hostRoute": "Default route", "hostForward": "IPv4 forwarding", "enableForwarding": "Enable IPv4 forwarding", "forwardingEnabled": "IPv4 forwarding enabled"
   },
+  "feishuDirectory": {
+    "title": "Feishu directory lookup",
+    "hint": "After a sign-in, check the directory name. The app needs published user basic info permission and visibility.",
+    "choose": "Select a signed-in member",
+    "check": "Check name",
+    "found": "Directory name: {name}",
+    "basicUnavailable": "The basic name API did not return a result. Check app permissions and publication in Feishu.",
+    "failed": "Lookup failed"
+  },
+  "feishuAdmission": {
+    "title": "Feishu member access",
+    "mode": "Who can connect",
+    "all": "All coworkers in this tenant",
+    "allowlist": "Selected members only",
+    "modeHint": "Members appear here after their first Feishu sign-in. Add them before enabling the allowlist; revocation applies to their next login.",
+    "members": "Authorized members",
+    "choose": "Select a member who has signed in",
+    "add": "Add",
+    "remove": "Revoke",
+    "empty": "No authorized members",
+    "saveFirst": "Save the built-in Feishu tunnel before managing members.",
+    "adminOnly": "Only administrators can manage member access.",
+    "loadFailed": "Could not load Feishu members"
+  },
   "protocols": {
     "wireguard": {
       "name": "WireGuard",

frontend/src/locales/zh-CN.json

@@ -793,6 +793,30 @@
     "setupTitle": "可选 · HTTPS 公网入口", "setupStepCheck": "检测系统", "setupStepInstall": "安装依赖", "setupStepConfigure": "配置入口与证书", "detectedSystem": "服务器系统", "setupUnsupported": "自动初始化仅支持以 root 运行的 Ubuntu 或 TencentOS Server 4", "setupScope": "仅在选择 Nginx 入口时点击：按需安装 Nginx / Certbot 并准备验证目录；不会安装 VPN 协议依赖、启用端口或签发证书。", "setupButton": "准备 Nginx / Certbot", "setupComplete": "依赖已准备，继续配置站点与证书", "setupFailed": "初始化失败，请查看输出", "setupInterrupted": "日志连接中断，请刷新状态；服务器上的安装可能仍在继续",
     "commonSetupTitle": "首次引导 · 通用网络环境", "commonSetupHint": "检查服务权限、默认出口和 IPv4 转发。仅按需开启通用转发；各专线协议的依赖在“创建专线”中分别安装。", "hostRoot": "运行权限", "hostRoute": "默认出口", "hostForward": "IPv4 转发", "enableForwarding": "开启 IPv4 转发", "forwardingEnabled": "IPv4 转发已开启"
   },
+  "feishuDirectory": {
+    "title": "飞书姓名查询",
+    "hint": "完成登录后可检查通讯录姓名。需要飞书应用已发布、获取用户基本信息权限和可见范围。",
+    "choose": "选择已登录成员",
+    "check": "检查姓名",
+    "found": "通讯录姓名：{name}",
+    "basicUnavailable": "基础姓名接口未返回结果；请在飞书开放平台核对接口权限和应用发布状态。",
+    "failed": "检查失败"
+  },
+  "feishuAdmission": {
+    "title": "飞书成员准入",
+    "mode": "允许连接的成员",
+    "all": "同企业所有同事",
+    "allowlist": "仅指定成员",
+    "modeHint": "成员首次通过飞书登录后出现在下方。先添加成员，再切换为仅指定成员；撤销后下次登录生效。",
+    "members": "已授权成员",
+    "choose": "选择已完成飞书登录的成员",
+    "add": "添加",
+    "remove": "撤销",
+    "empty": "暂无授权成员",
+    "saveFirst": "先保存内置飞书专线，再管理授权成员。",
+    "adminOnly": "仅管理员可管理授权成员。",
+    "loadFailed": "无法加载飞书成员"
+  },
   "protocols": {
     "wireguard": {
       "name": "WireGuard",