• Claude Code /insights
• Post-quantum crypto lands in Python
• MCP goes stateless — and FastMCP gets renamed
• inshellisense - IDE style command line auto complete
• Extras
• Joke

About the show

Sponsored by Xweather Xweather combines enterprise-grade weather intelligence with agent-ready APIs, natural language capabilities, and an MCP server so your agents can adapt workflows, automate responses, and make better decisions based on real-world conditions. Michael will tell you more about them later in the show. Get started for free at pythonbytes.fm/xweather Connect with the hosts

• Michael: Mastodon / BlueSky / X / LinkedIn
• Calvin: Mastodon / BlueSky / X / LinkedIn
• Show: Mastodon / BlueSky / X Join us on YouTube at pythonbytes.fm/live to be part of the audience. Usually Tuesday at 7am PT. Older video versions available there too. Finally, if you want an artisanal digest of every week of the show notes in email form? Add your name and email to our friends of the show list, we'll never share it.

Michael #1: Claude Code /insights

• Michael’s Insights: michael-kennedy-claude-code-insights-2026-08-09.html
• Be careful sharing these outputs, they include details references to your projects, errors, security findings, etc. ;)
• /insights reads your last 30 days of local session transcripts and hands back an interactive HTML report on how you actually work.
  • One command, zero setup: type /insights in a session, or run claude -p "/insights" from the shell for a non-interactive version that just prints the path
  • Reads what's already on disk: pulls session logs from ~/.claude/projects/, skipping agent sub-sessions and anything under 2 messages or 1 minute
  • Project areas: clusters your sessions into themes like "CLI Tooling" or "Documentation" with session counts
  • Friction analysis: categorizes where things went wrong by root cause - and quotes your own prompts back at you
  • Interaction style: tells you whether you're a delegator or a micromanager, plus which workflows are worth doubling down on
  • Actually actionable: suggests concrete CLAUDE.md additions and Claude Code features you're not using
  • The catch: Haiku does the per-session classification, so the first run takes several minutes; results cache to ~/.claude/usage-data/facets/ and the report lands at ~/.claude/usage-data/report.html

Calvin #2: Post-quantum crypto lands in Python

• pyca/cryptography 48 ships ML-KEM (key establishment) and ML-DSA (signatures) — NIST's post-quantum standards, now one pip install away.
• Big deal because it's the 11th most-downloaded package on PyPI (~1.2B downloads/month) and sits under Ansible, Certbot, Airflow, and paramiko. No PQ there, no PQ anywhere in Python.
• Trail of Bits did the work (Rust bindings, cross-backend API, tests, AWS-LC backend support), funded by the Sovereign Tech Agency.
• Timing tracks a June 22 White House order setting federal deadlines: PQ key establishment by end of 2030, PQ signatures by end of 2031.
• Not a drop-in swap — the wire sizes explode. ML-DSA-65 signatures are 3,309 bytes vs Ed25519's 64; ML-KEM-768 public keys are 1,184 bytes vs X25519's 32. Hardcoded field sizes and length prefixes will bite.
• API looks like the existing asymmetric primitives, except ML-KEM is encapsulate/decapsulate rather than a Diffie-Hellman exchange. SLH-DSA (the hash-based conservative backstop) is still in progress. The primitives are here, but protocols haven't caught up — so you won't be running post-quantum Certbot this week.

Sponsor: Xweather

You're using agents that can write code, summarize documents, and automate workflows. But they're missing one thing: awareness of the world around them. This is where today's sponsor, Xweather comes in. Xweather combines enterprise-grade weather intelligence with agent-ready APIs, natural language capabilities, and an MCP server built for tools like Claude, Codex, Copilot, and modern IDEs – so your agents can adapt workflows, automate responses, and make better decisions based on real-world conditions. Backed by Vaisala, whose instruments fly on NASA missions to Mars, Xweather delivers trusted data and unique insights that go beyond conditions to actual impact – from real-time lightning strikes to road surface forecasts. Start with 15,000 free API calls each month and pay only for what you use as you grow. Xweather is your full weather stack, for developers by developers. Start building for free today at pythonbytes.fm/xweather. The link is in your podcast player's show notes and on the episode page. Thanks so much to Xweather for supporting Python Bytes.

Calvin #3: MCP goes stateless — and FastMCP gets renamed

• From Philipp Acsany over at Real Python
• The 2026-07-28 spec landed July 28 and the Python SDK shipped 2.0.0 the same day. Biggest rewrite since MCP launched, and it's breaking on purpose. Context for scale: the Tier 1 SDKs are pulling close to half a billion downloads a month, with TypeScript and Python each past a billion total.
• The headline is the stateless core. The initialize/initialized handshake and the Mcp-Session-Id header are both retired — protocol version, client identity, and capabilities now ride in _meta on every request, with an optional server/discover RPC if a client wants capabilities up front. Any request can land on any instance behind plain round-robin, no shared storage.
• Server-initiated calls are the hard part of the migration. Sampling, elicitation, and roots/list no longer call back to the client; instead the server returns resultType: "input_required" and the client retries with inputResponses attached. Multi Round-Trip Requests, MRTR. Also: Mcp-Method and Mcp-Name are now required headers so gateways route on headers instead of cracking JSON bodies, and missing-resource errors move to standard 32602.
• Deprecation sweep with an actual policy behind it — Roots, Sampling, Logging, and the legacy HTTP+SSE transport all deprecated with a twelve-month minimum offramp. Tasks graduated out of the experimental core into a real extension, which is what the formalized extensions framework was for. MCP Apps is now an official extension too, so a tool call can return sandboxed interactive HTML. Auth picked up RFC 9207 issuer validation, issuer-bound credentials, and a shift from DCR toward CIMD.
• Python SDK 2.0 is where it gets personal: FastMCP is now MCPServer, no alias, no shim. McpError → MCPError. Wire types went snake_case (is_error, input_schema) and moved to a standalone mcp_types package, with mcp.types kept as a permanent alias. One Client object replaces the old transport + ClientSession + initialize() stack. httpx became httpx2. Sync handlers run on worker threads now, so asyncio.get_running_loop() raises inside them.
• The good news: one MCPServer serves both protocol eras, so 2025-era clients keep working with nothing to configure, and a Resolve(fn) parameter lets one tool body cover MRTR and the old path. 1.x is maintenance-and-security-fixes only — pin mcp>=1.28,<2 if this week is already full. The Tasks extension isn't in 2.0.0 yet, so Tasks has left the core spec but hasn't landed in the SDK. If you only call MCP servers, you mostly just get the benefits for free. If you ship one, you already know what your week looks like. And if you use the standalone fastmcp package instead of the official SDK — different project, 3.x line, none of this touches you. The rename is partly to stop the two from being confused.

Michael #4: inshellisense - IDE style command line auto complete

• via Doug Nichols
• inshellisense provides IDE style autocomplete for shells.
• It's a terminal native runtime for autocomplete which has support for 600+ command line tools.
• inshellisense supports Windows, Linux, & macOS.
• If you are using a NerdFont patched font, you can enable the NerdFonts support in your config file

Extras

Calvin:

• Django 6.1 Released — https://www.djangoproject.com/weblog/2026/aug/05/django-61-released/
• DjangoCon US is quickly arriving, grab your tickets now! — https://2026.djangocon.us/ Michael:
• AI integration: Python Bytes for AI
• Up and Running with Rust Course is out!

Joke: But they already know

Apple's lawsuit against OpenAI is escalating. A Chinese RAM supplier rejects Apple's discount demands for RAM. And could Apple shake up its smartwatch lineup?

• OpenAI asks for Apple's trade secrets lawsuit to be dismissed, says it was filed without 'adequate investigation'.
• Apple lawsuit against OpenAI says iCloud mess didn't play a role.
• OpenAI's vision of the future is reportedly a donut-shaped smart speaker.
• Telegram's takedown caused by planted porn & weaponized App Store policies.
• Following Epic loss, Google has started hosting rival app stores in the Play Store.
• iOS 26 gets first jailbreak thanks to Dopamine.
• Chinese RAM supplier denies Apple's bid for cheaper RAM.
• RAM production worldwide is sold out through 2027.
• Apple RAM supplier makes $38B bet on AI boom lasting until 2029.
• Apple explores shaking up its smartwatch for a new era.
• Apple releases security updates to macOS Tahoe, Sequoia, and Sonoma.
• Apple's Private Relay may not be as private as thought.
• Apple and Major League Baseball announce September "Friday Night Baseball" schedule and first‑ever broadcast in Apple Immersive.
• Klepton - Running Android ARM64 VR APKs on Apple Vision Pro, no JIT required!

Picks of the Week

• Jason's Pick: Letterboxx
• Andy's Pick: Sony NW-A306 Walkman
• Christina's Picks: Maxell Wireless Bluetooth Cassette Player & I Have ADHD Skill
• Leo's Picks: Kokogol Maclock & NVIDIA DGX Spark

Hosts: Leo Laporte, Andy Ihnatko, Jason Snell, and Christina Warren

Download or subscribe to MacBreak Weekly at https://twit.tv/shows/macbreak-weekly.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:

• horizon3.ai/macbreak
• cirasync.com/MacBreak

What is the state of content management systems today? Richard chats with Matthew Garrepy of CMS Critic about his views on how the CMS market continues to evolve. Matt digs into the build-vs-buy conversation that has been going on since the web first emerged - now made more complex with the power of the large language model to generate code. The evolution toward headless CMS brings up the idea of the explosion of different places that a CMS needs to touch now - not just web pages. The landscape for CMS is only getting more complex, and the tooling reflects that!

Links

• CMSCritic
• Sanity CMS
• Sitecore
• EmDash

Recorded July 6, 2026