Take agentscore-py 2.7.0, fix the crypto intent parameter, release 2.12.0

[vvillait88]

Summary

Dependency sweep and the reputation cleanup, released as 2.12.0.

• agentscore-py >=2.7.0. The SDK dropped get_reputation() / aget_reputation() because GET /v1/reputation was retired on 2026-09-30. agentscore_commerce.api re-exports the SDK's AgentScore client, so those methods leave this package's surface too.

• The crypto deposit PaymentIntent is restricted with allowed_payment_method_types: ["crypto"] instead of payment_method_types. Stripe's 2026-09-30.preview API rejects payment_method_types on PaymentIntent create ("no longer supported"). I checked both fields in test mode with the same crypto deposit body:

  API version	payment_method_types	allowed_payment_method_types
  2026-03-04.preview (what the storefronts pin)	accepted	accepted
  2026-09-30.preview	rejected	accepted

  The GA 2026-09-30.endive rejects crypto deposit mode itself, so a merchant must keep pinning a preview version either way. A new test pins the field.

• Lock upgrades: stripe 16.0.0 (test and extra only; it pins 2026-09-30.endive, and the helper takes the merchant's own client), x402 2.25.0, cdp-sdk 1.48.2, cryptography 50.0.2, uvloop 0.23.0, ruff 0.16.10, python-dotenv 1.2.4, lefthook 2.1.16. x402 2.25.0 keeps Base USDC's EIP-712 name "USD Coin". Workflows move to uv 0.12.22.

• Docstrings and keywords:

  • The Django and ASGI gate docstrings say what the gate checks (identity and compliance), not "wallet reputation".
  • The api module comment no longer lists reputation.
  • The stale comment pointing at reputation types in agentscore-py is gone.
  • The trust and reputation keywords are dropped, and agent-commerce becomes agentic-commerce.

Type of change

• Bug fix (no breaking change)
• New feature (no breaking change)
• Breaking change (existing callers must update)
• Docs, tests, or internal maintenance only

Public API

AgentScore.get_reputation() and aget_reputation() disappear from the agentscore_commerce.api re-export, by way of agentscore-py 2.7.0. Migration: drop the call. The endpoint has returned 404 since it was retired, so this is versioned as a minor. create_multichain_payment_intent sends a different Stripe parameter with the same effect on the API versions merchants pin; its signature is unchanged.

Test plan

• New: test_create_multichain_payment_intent_restricts_to_crypto_with_allowed_types asserts the parameter sent and that payment_method_types is absent.
• uv run pytest (1887 passed, 4 skipped, 95.4% coverage), ruff check, ruff format --check, ty check and vulture pass locally. The 41 warnings are pre-existing (the sanic and seamless-helper tests) and unchanged. The OSV scan of uv.lock is clean.
• The live settle on Tempo, Solana and Base runs against a storefront once the storefronts and core's store take the matching releases.

Worked with Varun.

Checklist

• Tests cover the new behavior, and the suite passes locally
• Lint, format, and type checks pass
• Docs and README examples updated if the public surface changed
• No secrets, credentials, or personal data in the diff or the tests