
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
heystax-cli
Advanced tools
Workspace for momentum. Spin up projects with collaborators — people and agents — in 10 seconds.
Workspace for momentum. Spin up projects with collaborators — people and agents — in 10 seconds.
Don't just act on the next action — build towards something. Manage incidents in real time, remove the blocker of big project apps in the AI era, and build meaningfully together.
npm install heystax-cli
Requires Node.js 18+ and a HeyStax account.
Project tools weren't built for the way work happens now. You're in the terminal, Claude Code is running, three people are shipping in parallel, and nobody wants to open a Jira board. You need a workspace that keeps up — something you spin up in seconds, not something you configure for hours.
hey is one command. Create a project, add collaborators by @handle, start logging what you're building. Every action syncs in real time to the web app, the browser extension, and AI assistants via MCP. The team sees who's doing what without a standup.
Works wherever you work:
| Where | How |
|---|---|
| Terminal | hey "message" — one command, no context switch |
| Claude Code / AI | Agents read and write to your stax via MCP |
| Web app | dash.heystax.ai — attention board with real-time collaboration |
| Browser extension | Start Here page per project, actions synced live |
| CI / scripts | Pipe failures, deploys, or events directly into a shared stax |
hey login
hey use "my-project"
hey "Fix the token refresh race condition"
hey ls
hey done 1
| Command | Description |
|---|---|
hey "message" | Add a next action to your current project |
hey -x "message" | Log a breadcrumb — something you already did |
hey done [n] | Mark action #n as done (default: first action) |
hey rm <n> | Remove action #n |
hey edit <n> "text" | Edit action #n |
hey mv <from> <to> | Reorder: move action to a different position |
| Command | Description |
|---|---|
hey ls | List actions for the current project |
hey ls stax | All your projects with priorities |
hey ls --all | Expanded: top 3 actions per project |
hey ls --done | Breadcrumbs — what's been completed |
hey ls -c 20 | Show up to 20 items |
| Command | Description |
|---|---|
hey use <project> | Switch default project (fuzzy matched) |
hey which | Show current project and logged-in user |
hey pri <project> <level> | Set priority: must should good meh |
| Command | Description |
|---|---|
hey login | Log in (interactive, password masked) |
hey logout | Log out |
hey whoami | Show current user and handle |
hey status | Session and config summary |
# Morning: pick up exactly where you left off
hey use "backend-api"
hey ls
# Log as you go — one line, stay in the terminal
hey "Investigate N+1 query in /dashboard endpoint"
hey "Write test for edge case in token refresh"
hey -x "Fixed auth middleware — sessions now persist across restarts"
# End of day
hey ls --done
The -x flag is for breadcrumbs: things you already did, decisions made, or context you want to preserve. They appear in the Start Here page on the extension so future-you (or a teammate) can see why the project is in its current state.
hey -x "Decided against Redis for session cache — latency was fine without it"
hey -x "Upgraded to Postgres 16 — no breaking changes, pooler config updated"
hey -x "Deprioritised dark mode until v2 — product call on 2026-03-03"
Add collaborators to a stax and now all work is visible in one place. No Jira board, no Notion page, no standup doc — just a shared list of what's next, updated in real time from wherever each person works.
@handle — they get access instantlyhey use <stax-name> once# Join a team stax
hey use "sprint-47"
# Add your actions — they'll show up under your @handle
hey "Implement OAuth handshake"
hey "Write migration for invites table"
# Log what you shipped
hey -x "Deployed API gateway — load balanced across 3 nodes"
# See the full team board
hey ls
# Check all projects
hey ls stax
Every action is visible in real time on dash.heystax.ai — no standup needed.
When something breaks, hey gives every responder a shared log. Spin up a stax, point everyone at it, and the timeline builds itself.
# Everyone joins the incident stax
hey use "incident-2026-03-03"
# Log what you're trying in real time
hey "Check database connection pool — seeing timeouts"
hey "Rolling restart of API pods"
hey -x "Confirmed: root cause was stale connection pool config"
hey done 1
# Hand off cleanly — full timeline is in the web app
hey ls --done -c 50
When multiple AI agents are running in parallel — Claude Code subagents, CI bots, automated pipelines — hey gives you a shared log of what each agent did. Point each agent at a shared stax and every action is recorded with attribution.
# Each agent logs to the shared stax
hey -x "Agent:researcher — analysed 47 files, found 3 auth patterns"
hey -x "Agent:coder — implemented OAuth flow, 312 lines changed"
hey "Agent:tester — run contract tests before merge"
The web app shows the full timeline, colour-coded by agent, so a human reviewer can see exactly what happened and what still needs sign-off.
Track weekly hours from the terminal. Timesheets with evidence — actions logged per day appear alongside reported hours, so approvers see what was done, not just what was claimed.
| Command | Description |
|---|---|
hey ts | View current week's timesheet |
hey ts 8 | Set Mon-Fri to 8h each |
hey ts wed 7.5 | Set single day hours |
hey ts mon=8 tue=7 fri=6 | Matrix input — multiple days at once |
hey ts submit | Submit current week for approval |
hey ts reopen | Reopen a submitted timesheet |
hey ts ls | List past 8 weeks |
# Friday afternoon: log your week
hey ts 8 # 8h Mon-Fri
hey ts fri 6 # actually left early Friday
hey ts submit # done
hey + Claude Code turns your stax into a programmable task queue. Claude reads your stax, reasons about priorities, and acts on them.
Read my current stax using `hey ls --all` and write a short standup update
I can paste into Slack. Group by project, highlight the top action per project,
and flag anything that's been sitting for more than 3 days.
Run `hey ls stax` to see all my projects. For any project at 6+ actions,
suggest which actions could be combined, deferred, or done first.
# Auto-log CI failures into a shared stax
hey "CI failed: $(git log -1 --pretty='%s') — $(git rev-parse --short HEAD)"
--force to bypass)hey use tab matches "TabStax Backend"-x) — log decisions and completed work, not just what's nextMIT
FAQs
Workspace for momentum. Spin up projects with collaborators — people and agents — in 10 seconds.
We found that heystax-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.