Resolve Feishu names by verified open ID and scope VPN member access

frontend/src/locales/en-US.json

@@ -793,6 +793,30 @@
     "setupTitle": "Optional HTTPS public gateway", "setupStepCheck": "Detect system", "setupStepInstall": "Install dependencies", "setupStepConfigure": "Configure gateway and certificate", "detectedSystem": "Server OS", "setupUnsupported": "Automatic setup requires root on Ubuntu or TencentOS Server 4", "setupScope": "Use only if you choose the Nginx gateway. Installs Nginx / Certbot and prepares the validation directory. It does not install VPN protocol dependencies, enable ports, or issue certificates.", "setupButton": "Prepare Nginx / Certbot", "setupComplete": "Dependencies are ready; configure the site and certificate next", "setupFailed": "Initialization failed; inspect the output", "setupInterrupted": "Log connection interrupted; refresh status. Installation may still be running on the server",
     "commonSetupTitle": "First-time shared network setup", "commonSetupHint": "Check permissions, default route and IPv4 forwarding. Enable shared forwarding only when needed; install protocol-specific dependencies separately in Create Tunnel.", "hostRoot": "Privileges", "hostRoute": "Default route", "hostForward": "IPv4 forwarding", "enableForwarding": "Enable IPv4 forwarding", "forwardingEnabled": "IPv4 forwarding enabled"
   },
+  "feishuDirectory": {
+    "title": "Feishu directory lookup",
+    "hint": "After a sign-in, check the directory name. The app needs published user basic info permission and visibility.",
+    "choose": "Select a signed-in member",
+    "check": "Check name",
+    "found": "Directory name: {name}",
+    "basicUnavailable": "The basic name API did not return a result. Check app permissions and publication in Feishu.",
+    "failed": "Lookup failed"
+  },
+  "feishuAdmission": {
+    "title": "Feishu member access",
+    "mode": "Who can connect",
+    "all": "All coworkers in this tenant",
+    "allowlist": "Selected members only",
+    "modeHint": "Members appear here after their first Feishu sign-in. Add them before enabling the allowlist; revocation applies to their next login.",
+    "members": "Authorized members",
+    "choose": "Select a member who has signed in",
+    "add": "Add",
+    "remove": "Revoke",
+    "empty": "No authorized members",
+    "saveFirst": "Save the built-in Feishu tunnel before managing members.",
+    "adminOnly": "Only administrators can manage member access.",
+    "loadFailed": "Could not load Feishu members"
+  },
   "protocols": {
     "wireguard": {
       "name": "WireGuard",