fix(wallet): use -p flag so npx resolves the correct binary

cmd/wallet/add.go

@@ -13,7 +13,7 @@ func NewAddCmd(f *cmdutil.Factory) *cobra.Command {
 		Short: "Provision a new agentic wallet (no KeeperHub account required)",
 		Long: `Provision a new agentic wallet by calling POST /api/agentic-wallet/provision.
 
-This is a thin wrapper around ` + "`npx @keeperhub/wallet add`" + ` -- the npm package is the
+This is a thin wrapper around ` + "`npx -p @keeperhub/wallet keeperhub-wallet add`" + ` -- the npm package is the
 canonical tool. Writes {subOrgId, walletAddress, hmacSecret} to ~/.keeperhub/wallet.json
 (chmod 0o600) and prints subOrgId + walletAddress (hmacSecret is NEVER printed).`,
 		Args: cobra.NoArgs,

cmd/wallet/agentic_wrapper.go

@@ -40,7 +40,12 @@ func runNpxWallet(f *cmdutil.Factory, cmd *cobra.Command, subcmd string, args []
 	host := cmdutil.ResolveHost(cmd, cfg)
 	baseURL := khhttp.BuildBaseURL(host)
 
-	childArgs := append([]string{"@keeperhub/wallet", subcmd}, args...)
+	// Use -p to name the package explicitly and keeperhub-wallet to name the
+	// binary. Without -p, npx tries to infer the binary from the package name;
+	// @keeperhub/wallet exposes keeperhub-wallet / keeperhub-wallet-hook /
+	// keeperhub-wallet-mcp, so npx cannot pick one and exits "could not
+	// determine executable to run" regardless of whether Node is installed.
+	childArgs := append([]string{"-p", "@keeperhub/wallet", "keeperhub-wallet", subcmd}, args...)
 	child := execCommand("npx", childArgs...)
 	child.Stdin = f.IOStreams.In
 	child.Stdout = f.IOStreams.Out

cmd/wallet/agentic_wrapper_internal_test.go

@@ -0,0 +1,55 @@
+package wallet
+
+import (
+	"os/exec"
+	"testing"
+
+	"github.com/keeperhub/cli/internal/config"
+	khhttp "github.com/keeperhub/cli/internal/http"
+	"github.com/keeperhub/cli/pkg/cmdutil"
+	"github.com/keeperhub/cli/pkg/iostreams"
+	"github.com/spf13/cobra"
+)
+
+func TestAgenticWrapperInvokesExplicitBinary(t *testing.T) {
+	origExec := execCommand
+	origLook := lookPath
+	t.Cleanup(func() {
+		execCommand = origExec
+		lookPath = origLook
+	})
+
+	lookPath = func(string) (string, error) { return "/usr/bin/npx", nil }
+
+	var gotArgs []string
+	execCommand = func(name string, args ...string) *exec.Cmd {
+		gotArgs = args
+		return exec.Command("true")
+	}
+
+	ios, _, _, _ := iostreams.Test()
+	f := &cmdutil.Factory{
+		AppVersion: "1.0.0",
+		IOStreams:  ios,
+		HTTPClient: func() (*khhttp.Client, error) {
+			return khhttp.NewClient(khhttp.ClientOptions{Host: "https://app.keeperhub.com", AppVersion: "1.0.0"}), nil
+		},
+		Config: func() (config.Config, error) {
+			return config.Config{DefaultHost: "app.keeperhub.com"}, nil
+		},
+	}
+
+	_ = runNpxWallet(f, &cobra.Command{}, "info", nil)
+
+	want := []string{"-p", "@keeperhub/wallet", "keeperhub-wallet"}
+	for i, w := range want {
+		if len(gotArgs) <= i || gotArgs[i] != w {
+			t.Fatalf("argv[%d] = %q, want %q (full argv: %v)", i, func() string {
+				if len(gotArgs) > i {
+					return gotArgs[i]
+				}
+				return "<missing>"
+			}(), w, gotArgs)
+		}
+	}
+}

cmd/wallet/agentic_wrapper_test.go

@@ -39,7 +39,8 @@ func TestNewAddCmd_Help(t *testing.T) {
 	require.NoError(t, err)
 	out := outBuf.String()
 	assert.Contains(t, out, "agentic wallet", "help should describe agentic wallet, not creator wallet")
-	assert.Contains(t, out, "npx @keeperhub/wallet", "help should reference the underlying npm package")
+	assert.Contains(t, out, "@keeperhub/wallet", "help should reference the underlying npm package")
+	assert.Contains(t, out, "keeperhub-wallet", "help should reference the explicit binary name")
 }
 
 func TestNewInfoCmd_Help(t *testing.T) {

cmd/wallet/feedback.go

@@ -29,7 +29,7 @@ wallet paid for. Signs giveFeedback() via Turnkey and broadcasts on Ethereum
 mainnet via the KeeperHub server proxy. Caller wallet pays gas natively
 (~$0.05-2 per call at typical mainnet gas).
 
-Thin wrapper around ` + "`npx @keeperhub/wallet feedback`" + `. Defaults to rating
+Thin wrapper around ` + "`npx -p @keeperhub/wallet keeperhub-wallet feedback`" + `. Defaults to rating
 KeeperHub's own ERC-8004 agent (id 31875 on Ethereum); use --agent-id to rate
 any other agent.`,
 		Example: `  # 5-star rating for an execution this wallet paid for

cmd/wallet/fund.go

@@ -13,7 +13,7 @@ func NewFundCmd(f *cmdutil.Factory) *cobra.Command {
 		Short: "Print Coinbase Onramp URL (Base USDC) and Tempo deposit address for the agentic wallet",
 		Long: `Print a Coinbase Onramp URL for Base USDC funding plus the Tempo deposit address.
 
-Thin wrapper around ` + "`npx @keeperhub/wallet fund`" + `. No HTTP calls, no browser launch --
+Thin wrapper around ` + "`npx -p @keeperhub/wallet keeperhub-wallet fund`" + `. No HTTP calls, no browser launch --
 prints copy-paste instructions only.`,
 		Args: cobra.NoArgs,
 		RunE: func(cmd *cobra.Command, _ []string) error {

cmd/wallet/info.go

@@ -13,7 +13,7 @@ func NewInfoCmd(f *cmdutil.Factory) *cobra.Command {
 		Short: "Print subOrgId and walletAddress from local agentic wallet config",
 		Long: `Print subOrgId and walletAddress from ~/.keeperhub/wallet.json.
 
-Thin wrapper around ` + "`npx @keeperhub/wallet info`" + `. Exits non-zero if the config is missing.`,
+Thin wrapper around ` + "`npx -p @keeperhub/wallet keeperhub-wallet info`" + `. Exits non-zero if the config is missing.`,
 		Args: cobra.NoArgs,
 		RunE: func(cmd *cobra.Command, _ []string) error {
 			return runNpxWallet(f, cmd, "info", nil)

cmd/wallet/link.go

@@ -18,7 +18,7 @@ func NewLinkCmd(f *cmdutil.Factory) *cobra.Command {
 		Short: "Link the agentic wallet to a KeeperHub account (requires KH_SESSION_COOKIE)",
 		Long: `Link the current agentic wallet to your KeeperHub account by calling POST /api/agentic-wallet/link.
 
-Thin wrapper around ` + "`npx @keeperhub/wallet link`" + `. Requires the KH_SESSION_COOKIE env var
+Thin wrapper around ` + "`npx -p @keeperhub/wallet keeperhub-wallet link`" + `. Requires the KH_SESSION_COOKIE env var
 set to a valid kh session cookie (sign in at app.keeperhub.com, copy the session cookie, export it).
 
 This command does not launch a browser session handshake; the env-var contract matches the npm CLI.`,

cmd/wallet/wallet.go

@@ -16,7 +16,7 @@ Creator wallet (REST):
   kh w balance    show creator-wallet on-chain balances via KeeperHub REST API
   kh w tokens     list supported tokens
 
-Agentic wallet (thin wrappers around npx @keeperhub/wallet):
+Agentic wallet (thin wrappers around npx -p @keeperhub/wallet keeperhub-wallet):
   kh w add        provision a new agentic wallet (no account required)
   kh w info       print agentic subOrgId + walletAddress
   kh w fund       print Coinbase Onramp URL + Tempo deposit address
@@ -28,8 +28,8 @@ Agentic wallet (thin wrappers around npx @keeperhub/wallet):
   # Provision an agentic wallet (npx wrapper):
   kh w add
 
-  # Check balance on the agentic wallet:
-  npx @keeperhub/wallet balance`,
+  # Check balance on the agentic wallet directly:
+  npx -p @keeperhub/wallet keeperhub-wallet balance`,
 	}
 
 	cmd.PersistentFlags().Bool("json", false, "Output as JSON")

docs/kh_wallet.md

@@ -10,7 +10,7 @@ Creator wallet (REST):
   kh w balance    show creator-wallet on-chain balances via KeeperHub REST API
   kh w tokens     list supported tokens
 
-Agentic wallet (thin wrappers around npx @keeperhub/wallet):
+Agentic wallet (thin wrappers around npx -p @keeperhub/wallet keeperhub-wallet):
   kh w add        provision a new agentic wallet (no account required)
   kh w info       print agentic subOrgId + walletAddress
   kh w fund       print Coinbase Onramp URL + Tempo deposit address
@@ -26,8 +26,8 @@ Agentic wallet (thin wrappers around npx @keeperhub/wallet):
   # Provision an agentic wallet (npx wrapper):
   kh w add
 
-  # Check balance on the agentic wallet:
-  npx @keeperhub/wallet balance
+  # Check balance on the agentic wallet directly:
+  npx -p @keeperhub/wallet keeperhub-wallet balance
 ```
 
 ### Options

docs/kh_wallet_add.md

@@ -6,7 +6,7 @@ Provision a new agentic wallet (no KeeperHub account required)
 
 Provision a new agentic wallet by calling POST /api/agentic-wallet/provision.
 
-This is a thin wrapper around `npx @keeperhub/wallet add` -- the npm package is the
+This is a thin wrapper around `npx -p @keeperhub/wallet keeperhub-wallet add` -- the npm package is the
 canonical tool. Writes {subOrgId, walletAddress, hmacSecret} to ~/.keeperhub/wallet.json
 (chmod 0o600) and prints subOrgId + walletAddress (hmacSecret is NEVER printed).
 

docs/kh_wallet_feedback.md

@@ -9,7 +9,7 @@ wallet paid for. Signs giveFeedback() via Turnkey and broadcasts on Ethereum
 mainnet via the KeeperHub server proxy. Caller wallet pays gas natively
 (~$0.05-2 per call at typical mainnet gas).
 
-Thin wrapper around `npx @keeperhub/wallet feedback`. Defaults to rating
+Thin wrapper around `npx -p @keeperhub/wallet keeperhub-wallet feedback`. Defaults to rating
 KeeperHub's own ERC-8004 agent (id 31875 on Ethereum); use --agent-id to rate
 any other agent.
 

docs/kh_wallet_fund.md

@@ -6,7 +6,7 @@ Print Coinbase Onramp URL (Base USDC) and Tempo deposit address for the agentic
 
 Print a Coinbase Onramp URL for Base USDC funding plus the Tempo deposit address.
 
-Thin wrapper around `npx @keeperhub/wallet fund`. No HTTP calls, no browser launch --
+Thin wrapper around `npx -p @keeperhub/wallet keeperhub-wallet fund`. No HTTP calls, no browser launch --
 prints copy-paste instructions only.
 
 ```

docs/kh_wallet_info.md

@@ -6,7 +6,7 @@ Print subOrgId and walletAddress from local agentic wallet config
 
 Print subOrgId and walletAddress from ~/.keeperhub/wallet.json.
 
-Thin wrapper around `npx @keeperhub/wallet info`. Exits non-zero if the config is missing.
+Thin wrapper around `npx -p @keeperhub/wallet keeperhub-wallet info`. Exits non-zero if the config is missing.
 
 ```
 kh wallet info [flags]

docs/kh_wallet_link.md

@@ -6,7 +6,7 @@ Link the agentic wallet to a KeeperHub account (requires KH_SESSION_COOKIE)
 
 Link the current agentic wallet to your KeeperHub account by calling POST /api/agentic-wallet/link.
 
-Thin wrapper around `npx @keeperhub/wallet link`. Requires the KH_SESSION_COOKIE env var
+Thin wrapper around `npx -p @keeperhub/wallet keeperhub-wallet link`. Requires the KH_SESSION_COOKIE env var
 set to a valid kh session cookie (sign in at app.keeperhub.com, copy the session cookie, export it).
 
 This command does not launch a browser session handshake; the env-var contract matches the npm CLI.