On an M4 Mac mini (Codex 0.150.1), stdio MCP servers keep the controlling terminal, so a child reading the tty SIGTTIN-stops the CLI. Shell tools got setsid; MCP didn't.
Every Ghostty tab turns into 'Claude Code' when running multiple AI CLI sessions. Fix it with shell-integration-features = no-title, CLAUDE_CODE_DISABLE_TERMINAL_TITLE, and a 30-line zsh preexec/precmd/chpwd hook that tags tabs by repo name.
A vulnerability in iTerm2 3.6.9 and earlier where simply displaying a malicious file with cat triggers local code execution. Caused by conductor impersonation in SSH Integration, fixed in 3.7.0.
