
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
@waylaidwanderer/sumika
Advanced tools
A stateful API server for agents compatible with the Agent Client Protocol (ACP), such as the Gemini CLI.
Sumika (住処), from the Japanese word for "dwelling," is a stateful API server that acts as a bridge for agents compatible with the Agent Client Protocol (ACP), such as the Gemini CLI. It provides a persistent, multi-session chat interface with support for tool calls and streaming events.
Sumika is built around two primary concepts:
~/.sumika/workspaces/<workspace-id>) or a custom user-provided path. A Workspace is a persistent entity that holds configuration (like environment variables and MCP servers) and contains multiple Sessions.disconnected but retains its history, allowing it to be re-initialized into a new process without data loss.server directory:
cd server
pnpm install
.env file from the example:
cp .env.example .env
GEMINI_API_KEY to the .env file.You can configure the server using the following environment variables in your .env file:
GEMINI_API_KEY (Required): Your API key for the Gemini service.GEMINI_MODEL (Optional): The specific Gemini model to use (e.g., gemini-2.5-pro). Defaults to the Gemini CLI's default model if not set.SUMIKA_ROOT_DIR (Optional): By default, Sumika stores all workspaces and session data in ~/.sumika. You can specify a different root directory by setting this variable to an absolute path.For advanced use cases, you can configure Sumika to launch a custom ACP-compliant agent or to inject global environment variables into the agent's process. This is managed via the ~/.sumika/settings.json file.
customAcpCommand (string): A shell command used to launch your custom agent. If this is blank or omitted, Sumika defaults to using the built-in @google/gemini-cli.env (object): A key-value map of environment variables to set in the agent's process. These will override any system-level variables with the same name.Example settings.json:
{
"customAcpCommand": "/path/to/my-custom-agent --acp --verbose",
"env": {
"CUSTOM_AGENT_API_KEY": "your-secret-api-key"
},
"mcpServers": {}
}
Note: The Sumika server must be restarted for any changes to settings.json to take effect.
To start the development server, run:
pnpm dev
The API will be available at http://localhost:8787. Interactive OpenAPI documentation is available at http://localhost:8787/docs.
Sumika supports global MCP servers configured at ~/.sumika/settings.json in addition to per-workspace servers. When creating or reinitializing a session, Sumika merges the two sets and sends the merged list to the ACP agent. If both define the same server name, the workspace definition takes precedence.
Example ~/.sumika/settings.json:
{
"mcpServers": {
"serverName": {
"command": "npx",
"args": ["serverName"],
"env": { "ENV_VAR": "1" }
}
}
}
GET /api/settings → Returns the global settings.PUT /api/settings → Replaces the global settings (full-replace semantics). Payload shape matches the example above.Notes:
settings.json.bak and reset.FAQs
A stateful API server for agents compatible with the Agent Client Protocol (ACP), such as the Gemini CLI.
We found that @waylaidwanderer/sumika demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.