@@ -0,0 +1,14 @@
+---
+'@object-ui/console': patch
+---
+
+fix(console): a missing or unavailable public `/f/:slug` form tells the guest so in their language, not as a raw English error (#27756)
+
+Clause-②: no
+Metadata-protocol: none
+
+The public form route threw `Failed to load form (STATUS): BODY` for any failed `GET /forms/:slug`, and the page rendered that English text verbatim to the anonymous visitor, server body included, whatever the session language.
+
+- **A 404 is "no such form".** The resolver answers 404 for a slug that is unknown, unpublished or no longer anonymous. The page now draws the console's shared not-found state (`console.notFound.title`, `console.notFound.description`), as the internal `/forms/NAME` route does. There is no Go back button on this route: the visitor is a guest from a shared link, with no console page to return to.
+- **Every other failure keeps a banner, localized.** It reads the existing `form.errorLoading` key ("Error loading form"). The server's body is never read, so it cannot reach the page.
+- No i18n key is added or changed.
@@ -0,0 +1,97 @@
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+
+/**
+ * objectstack-ai/objectstack#27756 — the public `/f/:slug` route printed the
+ * loader's English throw, `Failed to load form (STATUS): BODY`, to an
+ * anonymous visitor in every session language, server body included.
+ *
+ * A 404 from the public resolver now draws the console's shared not-found
+ * state (`console.notFound.*`), as the internal route does since #27446, with
+ * no "Go back": a guest from a shared link has no console page behind it.
+ * Every other failure keeps a banner, in the session language
+ * (`form.errorLoading`), and the server body never reaches the page.
+ *
+ * No `I18nProvider` is wrapped around the route, for the reason
+ * `FormPage.chromeI18n-11039.test.tsx` gives: `createI18n` registers the
+ * process-global instance every unwrapped consumer reads.
+ */
+
+import { describe, expect, it, vi, afterEach } from 'vitest';
+import { render, screen } from '@testing-library/react';
+import { MemoryRouter, Route, Routes } from 'react-router-dom';
+import { createI18n } from '@object-ui/i18n';
+import { FormPage } from './FormPage';
+
+vi.mock('sonner', () => ({ toast: { success: vi.fn(), error: vi.fn() } }));
+
+/** A server body no visitor may see; the cases assert it never renders. */
+const SERVER_DETAIL = 'No public form configured at /forms/no_such_slug';
+
+/** Answers the public resolver with `status`; nothing else is reachable. */
+function stubResolver(status: number) {
+  return vi.fn(async (url: string) => {
+    if (!String(url).includes('/forms/no_such_slug')) throw new Error(`unstubbed fetch: ${url}`);
+    const body = { code: status === 404 ? 'FORM_NOT_FOUND' : 'INTERNAL_ERROR', error: SERVER_DETAIL };
+    return {
+      ok: status >= 200 && status < 300,
+      status,
+      statusText: 'Error',
+      json: async () => body,
+      text: async () => JSON.stringify(body),
+    } as unknown as Response;
+  });
+}
+
+function renderMissingPublicForm() {
+  return render(
+    <MemoryRouter initialEntries={['/f/no_such_slug']}>
+      <Routes>
+        <Route path="/f/:slug" element={<FormPage mode="public" />} />
+      </Routes>
+    </MemoryRouter>,
+  );
+}
+
+function inLanguage(language: string) {
+  createI18n({ defaultLanguage: language, detectBrowserLanguage: false });
+}
+
+afterEach(() => {
+  vi.unstubAllGlobals();
+});
+
+describe('FormPage: a missing public form renders the shared localized not-found state (#27756)', () => {
+  it('zh: the not-found state is the zh pack\'s, and no English reaches the page', async () => {
+    inLanguage('zh');
+    vi.stubGlobal('fetch', stubResolver(404));
+    renderMissingPublicForm();
+
+    const state = await screen.findByTestId('form-not-found');
+    expect(state).toHaveTextContent('页面不存在');
+    expect(state).toHaveTextContent('你访问的链接与该应用中的任何视图都不匹配。');
+    expect(document.body.textContent).not.toMatch(/[A-Za-z]{3,}/);
+  });
+
+  it('en: the same state in English, with no "Go back" for the guest', async () => {
+    inLanguage('en');
+    vi.stubGlobal('fetch', stubResolver(404));
+    renderMissingPublicForm();
+
+    const state = await screen.findByTestId('form-not-found');
+    expect(state).toHaveTextContent('Page not found');
+    expect(screen.queryByRole('button')).not.toBeInTheDocument();
+    expect(document.body.textContent).not.toContain('Failed to load form');
+    expect(document.body.textContent).not.toContain(SERVER_DETAIL);
+  });
+
+  it('CONTROL: a failure that is not a 404 keeps a banner, in zh, without the server body', async () => {
+    inLanguage('zh');
+    vi.stubGlobal('fetch', stubResolver(500));
+    renderMissingPublicForm();
+
+    const banner = await screen.findByTestId('form-load-failed');
+    expect(banner).toHaveTextContent('表单加载失败');
+    expect(screen.queryByTestId('form-not-found')).not.toBeInTheDocument();
+    expect(document.body.textContent).not.toMatch(/[A-Za-z]{3,}/);
+  });
+});
@@ -1595,10 +1595,12 @@ interface LoadedForm {
 /** Public mode: hit the anonymous `/forms/:slug` resolver. */
 async function loadPublicForm(slug: string): Promise<LoadedForm> {
   const res = await apiFetch(`/forms/${encodeURIComponent(slug)}`);
-  if (!res.ok) {
-    const body = await res.text().catch(() => '');
-    throw new Error(`Failed to load form (${res.status}): ${body || res.statusText}`);
-  }
+  // The resolver answers 404 for a slug that is unknown, unpublished or no
+  // longer anonymous — to a guest, all three mean "no form here".
+  if (res.status === 404) throw new FormNotFoundError(`No public form at /forms/${slug}`);
+  // Any other failure is told to the guest in their language; the server's
+  // body is never read, so it can never reach the page.
+  if (!res.ok) throw new PublicFormUnavailableError(res.status);
   const payload = (await res.json()) as PublicFormPayload;
   return {
     // objectui#8408 — `payload.form?.title` sits AHEAD of the API-name arm.
@@ -1720,23 +1722,39 @@ export function resolveInternalForm(
 }
 
 /**
- * The internal route's "no such form" (objectstack-ai/objectstack#27446): the
- * `/meta/view` read answered 404. The metadata route answers 404 both for a
- * view that does not exist and for one the caller may not read, on purpose, so
- * the page says the one thing both mean — nothing here by that name.
+ * "No such form" on either route (objectstack-ai/objectstack#27446, #27756):
+ * the internal `/meta/view` read or the public `/forms/:slug` resolver
+ * answered 404. Both answer 404 for a form that does not exist and for one the
+ * caller may not read, on purpose, so the page says the one thing both mean —
+ * nothing here by that name.
  *
  * A type of its own, not a message to match, so {@link FormPage} can tell it
  * from every other load failure and draw the console's shared localized
- * not-found state for it instead of this English text. The message is kept
- * for anyone who logs the error; the page never renders it.
+ * not-found state for it instead of English text. The message is kept for
+ * anyone who logs the error; the page never renders it.
  */
 class FormNotFoundError extends Error {
-  constructor(name: string) {
-    super(`Form metadata not found: view/${name}`);
+  constructor(message: string) {
+    super(message);
     this.name = 'FormNotFoundError';
   }
 }
 
+/**
+ * The public resolver failed for a reason other than "no such form"
+ * (objectstack-ai/objectstack#27756). The visitor is anonymous, so the page
+ * shows the localized `form.errorLoading` line and never this message or the
+ * server's body; the status is kept for anyone who logs the error.
+ */
+class PublicFormUnavailableError extends Error {
+  readonly status: number;
+  constructor(status: number) {
+    super(`Failed to load form (${status})`);
+    this.name = 'PublicFormUnavailableError';
+    this.status = status;
+  }
+}
+
 /**
  * Internal mode: pull the FormView metadata directly + the target object's
  * schema, and — when the URL names a record (objectui#4278) — that record.
@@ -1761,7 +1779,7 @@ async function loadInternalForm(
   channel?: ApiFetch,
 ): Promise<LoadedForm> {
   const viewRes = await apiFetch(`/meta/view/${encodeURIComponent(name)}`, undefined, channel);
-  if (viewRes.status === 404) throw new FormNotFoundError(name);
+  if (viewRes.status === 404) throw new FormNotFoundError(`Form metadata not found: view/${name}`);
   if (!viewRes.ok) {
     throw new Error(`Could not load form metadata (${viewRes.status}): view/${name}`);
   }
@@ -2371,6 +2389,13 @@ export function FormPage({ mode, recordPath, cancelPath }: FormPageProps) {
    * for it and never shows the thrown text (objectstack-ai/objectstack#27446).
    */
   const [notFound, setNotFound] = useState(false);
+  /**
+   * The public resolver failed for another reason
+   * ({@link PublicFormUnavailableError}). A flag, not a string in `error`, so
+   * the banner's copy follows the session language at render and the thrown
+   * text never reaches the anonymous visitor (objectstack-ai/objectstack#27756).
+   */
+  const [publicUnavailable, setPublicUnavailable] = useState(false);
   /**
    * The rows the last submit refused, by field name (objectstack-ai/objectstack#27417).
    * The `error` banner and the outcome toast still say the whole refusal; this
@@ -2457,6 +2482,7 @@ export function FormPage({ mode, recordPath, cancelPath }: FormPageProps) {
     setLoading(true);
     setError(null);
     setNotFound(false);
+    setPublicUnavailable(false);
     setFieldErrors({});
     // A `?recordId=` we cannot make sense of never reaches a loader: it is an
     // edit intent this route cannot honour, and #4278 ruling point 2 says
@@ -2483,6 +2509,7 @@ export function FormPage({ mode, recordPath, cancelPath }: FormPageProps) {
           // editable form on screen behind the error.
           setLoaded(null);
           if (e instanceof FormNotFoundError) setNotFound(true);
+          else if (e instanceof PublicFormUnavailableError) setPublicUnavailable(true);
           else setError(e?.message ?? String(e));
         }
       })
@@ -2859,20 +2886,37 @@ export function FormPage({ mode, recordPath, cancelPath }: FormPageProps) {
     // The console's shared not-found state, the one its catch-all route
     // (`RouteNotFound` in app-shell's `AppContent`) draws, with the same pack
     // keys: a form is a view, and a missing one is a URL that matches none.
+    // The public route draws no "Go back": its visitor is an anonymous guest
+    // who arrived from a shared link, with no console page behind it to
+    // return to (objectstack-ai/objectstack#27756).
     return (
       <div className="flex min-h-[60vh] w-full items-center justify-center p-8" data-testid="form-not-found">
         <Empty>
           <EmptyTitle>{t('console.notFound.title')}</EmptyTitle>
           <EmptyDescription>{t('console.notFound.description')}</EmptyDescription>
-          <div className="mt-4">
-            <Button variant="outline" onClick={() => navigate(-1)}>
-              {t('console.notFound.back')}
-            </Button>
-          </div>
+          {mode !== 'public' && (
+            <div className="mt-4">
+              <Button variant="outline" onClick={() => navigate(-1)}>
+                {t('console.notFound.back')}
+              </Button>
+            </div>
+          )}
         </Empty>
       </div>
     );
   }
+  if (publicUnavailable && !loaded) {
+    return (
+      <div className="mx-auto max-w-2xl p-6">
+        <div
+          className="rounded-md border border-destructive/40 bg-destructive/10 p-4 text-sm text-destructive"
+          data-testid="form-load-failed"
+        >
+          {t('form.errorLoading')}
+        </div>
+      </div>
+    );
+  }
   if (error && !loaded) {
     return (
       <div className="mx-auto max-w-2xl p-6">