fix(poetry): skip binary verification when env vars bypass invocation

Guard _verifyPoetryAccessible with an env-var bypass check so poetry
does not need to be installed when both TRUSTIFY_DA_POETRY_SHOW_TREE
and TRUSTIFY_DA_POETRY_SHOW_ALL are set.

Implements TC-4660

Assisted-by: Claude Code

Author: ruromero

src/providers/python_poetry.js

@@ -61,7 +61,11 @@ export default class Python_poetry extends Base_pyproject {
 	// eslint-disable-next-line no-unused-vars
 	async _getDependencyData(manifestDir, _workspaceDir, parsed, opts) {
 		let poetryBin = getCustomPath('poetry', opts)
-		this._verifyPoetryAccessible(poetryBin)
+		let envBypass = environmentVariableIsPopulated('TRUSTIFY_DA_POETRY_SHOW_TREE')
+			&& environmentVariableIsPopulated('TRUSTIFY_DA_POETRY_SHOW_ALL')
+		if (!envBypass) {
+			this._verifyPoetryAccessible(poetryBin)
+		}
 		let hasDevGroup = !!(parsed.tool?.poetry?.group?.dev || parsed.tool?.poetry?.['dev-dependencies'])
 		let treeOutput = this._getPoetryShowTreeOutput(manifestDir, hasDevGroup, poetryBin)
 		let showAllOutput = this._getPoetryShowAllOutput(manifestDir, poetryBin)

test/providers/python_pyproject.test.js

@@ -697,4 +697,54 @@ suite('testing python-poetry error handling', () => {
 		expect(() => instance._verifyPoetryAccessible('poetry'))
 			.to.throw('failed to check for poetry binary')
 	}).timeout(TIMEOUT)
+
+	/** Verifies that _getDependencyData skips binary verification when both env vars bypass poetry. */
+	test('verify _getDependencyData skips binary check when both env vars are set', async () => {
+		let provider = await esmock('../../src/providers/python_poetry.js', {
+			'../../src/tools.js': {
+				getCustomPath: () => '/nonexistent/poetry',
+				environmentVariableIsPopulated: (name) => {
+					return name === 'TRUSTIFY_DA_POETRY_SHOW_TREE' || name === 'TRUSTIFY_DA_POETRY_SHOW_ALL'
+				},
+				invokeCommand: () => {
+					let err = new Error('spawn /nonexistent/poetry ENOENT')
+					err.code = 'ENOENT'
+					throw err
+				}
+			}
+		})
+
+		let instance = new provider.default()
+		instance._getPoetryShowTreeOutput = () => ''
+		instance._getPoetryShowAllOutput = () => ''
+		instance._parsePoetryShowAll = () => new Map()
+		instance._findLockFileDir = () => '/tmp'
+		instance._extractMarkerData = () => ({})
+		instance._parsePoetryTree = () => ({ directDeps: [], graph: new Map() })
+
+		await instance._getDependencyData('/tmp', '/tmp', { tool: {} }, {})
+	}).timeout(TIMEOUT)
+
+	/** Verifies that _getDependencyData runs binary verification when env vars are not set. */
+	test('verify _getDependencyData runs binary check when env vars are not set', async () => {
+		let provider = await esmock('../../src/providers/python_poetry.js', {
+			'../../src/tools.js': {
+				getCustomPath: () => '/nonexistent/poetry',
+				environmentVariableIsPopulated: () => false,
+				invokeCommand: () => {
+					let err = new Error('spawn /nonexistent/poetry ENOENT')
+					err.code = 'ENOENT'
+					throw err
+				}
+			}
+		})
+
+		let instance = new provider.default()
+		try {
+			await instance._getDependencyData('/tmp', '/tmp', { tool: {} }, {})
+			expect.fail('Expected error to be thrown')
+		} catch (e) {
+			expect(e.message).to.include('poetry is not accessible')
+		}
+	}).timeout(TIMEOUT)
 })