v2.3.4

Nomo 2.3.4 is a security update. It hardens how approvals and installs work after a full security review, and it pairs with app 2.3.4, which adds Face ID before Allow. Update both.

Security

• Always allow from your phone now stays in that session. It is never saved to your project's settings.
• Approval cards carry a sealed session ID, so app 2.3.4 can check that the card you answer belongs to the request waiting on your computer.
• Nomo's hooks no longer load your project's bunfig.toml or .env.
• The hook shim no longer scans the current folder for a plugin marketplace.
• OpenCode: /nomo-update only ever updates Nomo's own checkout, and bunx nomo-ai updates only the global install. To update a project install, run /nomo-update inside that project.
• status now warns if your Bun is affected by CVE-2026-111497 (fixed in Bun 1.4.4), and when Node.js 22 is older than 22.23.4. Update the runtime if you see it.

Fixes

• Shell approval cards keep the command. The agent's description is kept short and is the first thing dropped when space runs out, so you always see what will actually run.

Install

/plugin marketplace add KarrixLee/nomo (Claude Code) — Codex users install the native nomo plugin from the same repo, OpenCode users run bunx nomo-ai, and Cursor users run bunx nomo-ai --cursor.

Both desktop apps can also add it from their own UI: Settings → Plugins → Add → Add marketplace in Claude, Plugins → Add → Add plugin marketplace in Codex. See Installation.