@@ -0,0 +1,12 @@
+---
+'@object-ui/console': patch
+'@object-ui/i18n': patch
+---
+
+fix(console): the shared-record page shows a user field as "Linked user", never its sys_user id
+
+Clause-②: yes (widening)
+Metadata-protocol: none
+
+- **`@object-ui/console`**: on a share link (`/s/TOKEN`), a user field with a value now reads "Linked user" instead of the stored `sys_user` id, which an anonymous visitor could not use. An empty one still reads as empty. It follows the lookup rule from the same page: the field is recognized by the `type: 'user'` the resolve answer's `fields` projection already serves, the page sends no extra request, and nothing reads the user record.
+- **`@object-ui/i18n`**: every pack gains `sharedRecord.linkedUser` (en "Linked user", zh-Hans 「已关联用户」).
@@ -25,11 +25,13 @@
  *   string through the console's one date-display path, a number through its
  *   one number-display path, a boolean as Yes / No (the detail view's
  *   read-only word), and an array or object as short text — never raw JSON.
- * - A lookup or master-detail value is the stored id of ANOTHER record, and
- *   neither that id nor the target's name is anything the visitor should read:
- *   a filled one shows a neutral, localized "Linked record" and an empty one
- *   the empty face. Which field is one is read from the type the projection
- *   serves, never guessed from the value's shape; nothing reads the target.
+ * - A lookup, master-detail or user value is the stored id of ANOTHER record
+ *   (a user field's is a `sys_user` id), and neither that id nor the target's
+ *   name is anything the visitor should read: a filled one shows a neutral,
+ *   localized "Linked record" ("Linked user" for a user field) and an empty
+ *   one the empty face. Which field is one is read from the type the
+ *   projection serves, never guessed from the value's shape; nothing reads the
+ *   target.
  *
  * System fields are shown, not hidden: the record detail view's notion of a
  * framework-managed column (`isSystemManagedField`, `@object-ui/types`) only
@@ -117,14 +119,22 @@ const NO_FETCH_CELL_RENDERERS: ReadonlySet<React.FC<CellRendererProps>> = new Se
 
 /**
  * The field types whose value is the stored id of another record, as the
- * projection serves `type`. The value never reaches the page as text.
+ * projection serves `type`; a `user` field's is a `sys_user` id. The value
+ * never reaches the page as text.
  */
-const RECORD_REFERENCE_TYPES: ReadonlySet<string> = new Set(['lookup', 'master_detail']);
+const RECORD_REFERENCE_TYPES: ReadonlySet<string> = new Set(['lookup', 'master_detail', 'user']);
 
 function isRecordReference(field: SharedFieldDisplay | undefined): boolean {
   return !!field?.type && RECORD_REFERENCE_TYPES.has(field.type);
 }
 
+/** The neutral face of a filled reference: a person for a user field, a record otherwise. */
+function referencePlaceholder(field: SharedFieldDisplay | undefined, t: Translate): string {
+  return field?.type === 'user'
+    ? t('sharedRecord.linkedUser', { defaultValue: 'Linked user' })
+    : t('sharedRecord.linkedRecord', { defaultValue: 'Linked record' });
+}
+
 /** A value with nothing in it: no id was stored, so there is no link to name. */
 function isEmptyValue(value: unknown): boolean {
   return value === null || value === undefined || value === '' || (Array.isArray(value) && value.length === 0);
@@ -168,9 +178,7 @@ export function SharedRecordFields({ record, fields }: SharedRecordFieldsProps)
               isEmptyValue(record[key]) ? (
                 EMPTY
               ) : (
-                <span className="text-muted-foreground">
-                  {t('sharedRecord.linkedRecord', { defaultValue: 'Linked record' })}
-                </span>
+                <span className="text-muted-foreground">{referencePlaceholder(field, t)}</span>
               )
             ) : Renderer ? (
               <Renderer
 
@@ -5,7 +5,9 @@
  * `fields` projection (objectstack#26991): each row carries the field's
  * authored label, a picklist value its authored option label, a currency
  * value its currency through `resolveFieldCurrency`, and a filled lookup a
- * neutral "Linked record" in place of its stored id (objectstack#31326). A key
+ * neutral "Linked record" in place of its stored id (objectstack#31326), a
+ * filled user field "Linked user" in place of its sys_user id
+ * (objectstack#31350). A key
  * with no `fields` entry, and an answer from a server that predates the
  * projection, keep the humanized label and the JSON-shape value.
  *
@@ -344,3 +346,84 @@ describe('SharedRecordPage — a lookup shows a neutral placeholder, never its s
     expect(cellOf('Record ID').textContent).toBe('opp_7');
   });
 });
+
+/**
+ * objectstack#31350 — a user field stores a `sys_user` id, the same way a
+ * lookup stores its target's. The projection serves it as `type: 'user'`, and
+ * the page shows a neutral, localized "Linked user" for a filled one and the
+ * empty face for an empty one; the id never reaches the DOM, and nothing reads
+ * the user record.
+ */
+describe('SharedRecordPage — a user field shows a neutral placeholder, never its sys_user id (objectstack#31350)', () => {
+  /** A `ticket` as resolve hands it over: a filled and an empty user field, a multiple one, a lookup beside them. */
+  const TICKET = {
+    id: 'tkt_3',
+    subject: 'Printer on fire',
+    assignee: 'usr_7d41a0',
+    reviewer: null,
+    watchers: ['usr_w_alpha', 'usr_w_beta'],
+    backup: [],
+    account_id: 'acc_t_55',
+  };
+  const TICKET_FIELDS = {
+    id: { label: 'Record ID', type: 'text' },
+    subject: { label: 'Subject', type: 'text' },
+    assignee: { label: 'Assigned To', type: 'user', reference: 'sys_user' },
+    reviewer: { label: 'Reviewer', type: 'user', reference: 'sys_user' },
+    watchers: { label: 'Watchers', type: 'user', reference: 'sys_user', multiple: true },
+    backup: { label: 'Backup', type: 'user', reference: 'sys_user', multiple: true },
+    account_id: { label: 'Account', type: 'lookup', reference: 'account', displayField: 'name' },
+  };
+  const USER_IDS = ['usr_7d41a0', 'usr_w_alpha', 'usr_w_beta'];
+
+  it('a filled user field shows the placeholder, its id appears nowhere in the DOM, and only resolve is fetched', async () => {
+    const requested = shareServer(TICKET, TICKET_FIELDS, 'ticket');
+    renderLink();
+
+    await screen.findByText('Shared ticket');
+    expect(cellOf('Assigned To').textContent).toBe('Linked user');
+    expect(document.body.innerHTML).not.toContain('usr_7d41a0');
+    // No read of sys_user, the data source or /meta: one request, to resolve.
+    expect(requested).toEqual([RESOLVE_PATH]);
+  });
+
+  it('a multiple user field shows the placeholder, and none of its ids', async () => {
+    shareServer(TICKET, TICKET_FIELDS, 'ticket');
+    renderLink();
+
+    await screen.findByText('Shared ticket');
+    expect(cellOf('Watchers').textContent).toBe('Linked user');
+    for (const id of USER_IDS) expect(document.body.innerHTML).not.toContain(id);
+  });
+
+  it('an empty user field renders empty, as before', async () => {
+    shareServer(TICKET, TICKET_FIELDS, 'ticket');
+    renderLink();
+
+    await screen.findByText('Shared ticket');
+    expect(cellOf('Reviewer').textContent).toBe('—');
+    expect(cellOf('Backup').textContent).toBe('—');
+  });
+
+  it('the placeholder speaks the session language', async () => {
+    const zh = builtInLocales['zh-Hans'].sharedRecord.linkedUser;
+    // Guard: a real zh row, not an English copy.
+    expect(zh).not.toBe(builtInLocales.en.sharedRecord.linkedUser);
+    shareServer(TICKET, TICKET_FIELDS, 'ticket');
+    renderLink(undefined, 'zh');
+
+    await screen.findByText(builtInLocales['zh-Hans'].sharedRecord.sharedObject.replace('{{object}}', 'ticket'));
+    expect(cellOf('Assigned To').textContent).toBe(zh);
+    expect(document.body.innerHTML).not.toContain('usr_7d41a0');
+  });
+
+  it('a text field renders its value and a lookup keeps "Linked record" (control)', async () => {
+    shareServer(TICKET, TICKET_FIELDS, 'ticket');
+    renderLink();
+
+    await screen.findByText('Shared ticket');
+    expect(cellOf('Subject').textContent).toBe('Printer on fire');
+    expect(cellOf('Record ID').textContent).toBe('tkt_3');
+    expect(cellOf('Account').textContent).toBe('Linked record');
+  });
+});
@@ -4093,6 +4093,7 @@ const ar = {
     sharedObject: '{{object}} مشترك',
     redactedFields: 'أخفى المالك بعض الحقول: {{fields}}',
     linkedRecord: 'سجل مرتبط',
+    linkedUser: 'مستخدم مرتبط',
   },
   publicForm: {
     submit: "إرسال",
 
@@ -3788,6 +3788,7 @@ const de = {
     sharedObject: 'Geteilt: {{object}}',
     redactedFields: 'Einige Felder hat der Eigentümer ausgeblendet: {{fields}}',
     linkedRecord: 'Verknüpfter Datensatz',
+    linkedUser: 'Verknüpfter Benutzer',
   },
   publicForm: {
     submit: "Absenden",
 
@@ -4593,6 +4593,7 @@ const en = {
     sharedObject: 'Shared {{object}}',
     redactedFields: 'Some fields are hidden by the owner: {{fields}}',
     linkedRecord: 'Linked record',
+    linkedUser: 'Linked user',
   },
   publicForm: {
     submit: 'Submit',
 
@@ -3865,6 +3865,7 @@ const es = {
     sharedObject: '{{object}} compartido',
     redactedFields: 'El propietario ocultó algunos campos: {{fields}}',
     linkedRecord: 'Registro vinculado',
+    linkedUser: 'Usuario vinculado',
   },
   publicForm: {
     submit: "Enviar",
 
@@ -3861,6 +3861,7 @@ const fr = {
     sharedObject: '{{object}} partagé',
     redactedFields: 'Certains champs sont masqués par le propriétaire : {{fields}}',
     linkedRecord: 'Enregistrement lié',
+    linkedUser: 'Utilisateur lié',
   },
   publicForm: {
     submit: "Envoyer",
 
@@ -3790,6 +3790,7 @@ const ja = {
     sharedObject: '共有された {{object}}',
     redactedFields: '一部の項目は所有者によって非表示にされています: {{fields}}',
     linkedRecord: '関連レコード',
+    linkedUser: '関連ユーザー',
   },
   publicForm: {
     submit: "送信",
 
@@ -3787,6 +3787,7 @@ const ko = {
     sharedObject: '공유된 {{object}}',
     redactedFields: '일부 필드는 소유자가 숨겼습니다: {{fields}}',
     linkedRecord: '연결된 레코드',
+    linkedUser: '연결된 사용자',
   },
   publicForm: {
     submit: "제출",