fix: licensing environment type, inactive license status, and dead update packages (6.17.1)

[jakejackson1]

Resolves #1726, resolves #1728, resolves #1730.

License and update requests now send the site's environment type from wp_get_environment_type(). The store can use it to leave staging, development and local sites out of activation counts.

An inactive license status now shows its own message ("This license key is not active. Please check your account or contact support.") instead of the generic unknown error. It also counts as unentitled, so a site that goes inactive withdraws any update package it shared across a Multisite network.

When a license key is valid but not activated for the current domain, the store still returns a download URL, but that URL fails with a 401. The URL is now dropped before it is cached. Such a site is no longer offered an update that fails halfway through installing, On a Multisite it borrows the working package another licensed site shared, in both the update row and the plugin details popup.

Try it

wp eval '
$updater = new GFPDF\Helper\Licensing\EDD_SL_Plugin_Updater( "https://example.com", "example/example.php", [] );
var_dump( $updater->get_version_api_params()["environment"] );

$updater->set_license_status( "site_inactive" );
$updater->set_version_info_cache( (object) [ "new_version" => "9.9", "package" => "https://example.com/dead" ] );
var_dump( $updater->get_cached_version_info()->package );
$updater->delete_version_info_cache();
'

The first dump prints your environment type (e.g. "local"), and the second prints an empty string. Without this change the key is missing and the dead URL is kept.

Test plan

• Activating, checking and deactivating an add-on license sends environment in the request body (visible in the debug log)
• A license API response of {"license":"inactive"} shows the new message on the License tab
• An add-on license that is site_inactive shows "Automatic update is unavailable" on a single site instead of an update that fails
• On a per-site-activated Multisite, a site_inactive site installs an update another licensed site shared
• On that same site, "View version details" shows the Update Now button
• The core Gravity PDF update still offers its package
• Licensing tests pass on single-site and multisite

More info

Environment (#1726). environment is added to both Helper_Abstract_Addon::get_default_api_params() (activate, check, deactivate) and EDD_SL_Plugin_Updater::get_version_api_params() (get_version, plus the bulk check_license in Model_Settings). It falls back to production when wp_get_environment_type() is unavailable (WP < 5.5), matching EDD's stock updater. api.gravitypdf.com must forward the parameter to EDD for it to take effect.

Inactive (#1728). Added to Helper_Data::addon_license_responses() and EDD_SL_Plugin_Updater::UNENTITLED_LICENSE_STATUSES. Per the issue comment, the store may auto-activate and never return inactive. If it doesn't, these entries are harmless.

Dead package (#1730). This deliberately departs from the fix proposed in the issue comment (! is_license_active() in get_version_from_remote()), for three reasons:

• The core plugin updater (gravity-pdf-updater.php) never sets a license status, so ! is_license_active() would strip every core update package.
• error and rate_limit are not verdicts on the license, and must not throw away a working URL. Keying on UNENTITLED_LICENSE_STATUSES excludes them, the same reasoning that constant already documents.
• Model_Settings::licensing_bulk_get_version_api_response() writes the other bundled add-ons' caches straight through set_version_info_cache(), bypassing get_version_from_remote(). The strip lives in the cache setter so both writers are covered. It edits the response object in place, so the value returned by get_version_from_remote() is cleaned too.

maybe_apply_network_package() is unchanged: its emptiness test is now correct. A cache written before a status change is already cleared by flush_update_cache().

Details modal. plugins_api_filter() used to read the per-site cache directly, skipping maybe_apply_network_package(). A site with no usable package of its own got no install/update button in the modal (WordPress only shows it when download_link is set), even though its update row borrowed the network package. This affected unlicensed sites before this PR too. The filter now calls get_repo_api_data(), removing its own copy of the cache-else-fetch logic, and a borrowed package also sets download_link. show_changelog() goes through the same filter, so it is covered as well.

Tests. New or extended: providerUnentitledLicenseStatus gains inactive, test_set_version_info_cache_drops_unentitled_package and test_set_version_info_cache_keeps_package_without_a_license_verdict (data providers), the network borrow test is parameterized with a site_inactive dead-URL case and asserts the modal's download_link, test_get_version_api_params_sends_environment_type, test_license_api_requests_send_environment_type, and an inactive block in test_schedule_license_check.

Full suite: single-site 1218 tests OK. Multisite has 1 error in test_is_non_active_multisite, which also fails on the untouched base branch in a full run and passes in isolation (order-dependent, pre-existing). PHPCS is clean.