VS Code 1.127 shipped on July 1, 2026, and the single most important change is that browser tools for coding agents are now generally available and enabled by default. Your agent no longer just writes the code and guesses; it can open the running page, take a screenshot, click through the flow, and feed what it sees back into the next edit. Microsoft's recap of the June cycle — versions 1.123 through 1.127 — went out as the GitHub Copilot changelog on July 8. If you build with an AI agent in the editor, this is the release that closes the loop between "wrote it" and "checked it."

Here are the changes that actually move a one-person or small-team workflow, and what each one means for you.

Browser tools are GA and on by default#

This is the marquee change. Per the 1.127 release notes and a dedicated GitHub changelog, agents can now open pages, capture screenshots, and click through to validate their own work — no longer a preview, and on by default for paid Copilot users.

What it means: The most expensive part of AI-assisted coding for a solo founder was the manual round-trip — the agent edits, you alt-tab to the browser, you see the button is misaligned, you paste feedback back in. That loop now runs inside the agent. It also narrows the gap with the standalone CLI agents we compared here — the editor is now a first-class agent surface, not just a place to paste their output. Ask for a landing-page fix and the agent can verify the fix rendered before it declares victory. Fewer "it looks done but isn't" handoffs, which is exactly where a founder without a QA person bleeds time.

Per-site browser permissions#

The integrated browser now supports per-site permissions for sensitive web APIs — camera, location, clipboard, and connected devices — so a page the agent opens can't silently reach for hardware.

What it means: Giving an agent a browser is giving it a logged-in session. Per-site permissions are the seatbelt: you decide which sites can touch the clipboard or the camera instead of trusting every page the agent wanders onto. If your agent tests third-party checkout flows or embeds, this is the control that keeps "validate the page" from becoming "grant a random page your clipboard."

Terminal sandboxing (experimental)#

New in 1.127 is terminal sandboxing, flagged experimental. On macOS and Linux, agent-run terminal commands execute with network access blocked and filesystem access restricted; the agent only stops to ask for approval when a command needs to elevate and run outside the sandbox (InfoWorld).

What it means: The nightmare of autonomous coding is a command that deletes the wrong directory or exfiltrates a secret. Sandboxing shrinks the blast radius by default, so you can let the agent run tests and scripts with fewer interruptions and less dread. It is experimental and macOS/Linux only — treat it as a strong guardrail, not a guarantee, and keep it far from production credentials.

A /autoApprove switch in the chat input#

You can now toggle global auto-approve straight from the chat input with a slash command. /autoApprove skips every tool and terminal confirmation, letting the agent run without waiting on you.

What it means: This is the throttle for the tradeoff above. For a throwaway prototype or a repetitive refactor, flip it on and stop clicking "Allow" fifty times. For anything touching money, customer data, or deploys, leave it off — auto-approve removes your window to cancel a destructive action. The win for a small team is that the choice is now one command, not a settings dig.

Browser tools plus sandboxing is the real story: the agent can now both check its own work and be prevented from wrecking yours. That combination is what makes hands-off runs defensible for a team of one.

Parallel agent sessions and a manageable Agents window#

The June batch brings parallel agent sessions — several related chats running at once — plus the ability to group sessions and drag-and-drop to arrange a busy Agents window. Hover over a subagent to see the cost of the work it handled.

What it means: You can run two approaches to the same problem side by side and compare, or fan out unrelated tasks — fix the bug, draft the migration, update the docs — without them stepping on each other. For a founder wearing every hat, parallel sessions turn the agent from a single assistant into a small bench you actually manage from one window.

1M-token context and session sync#

The batch adds 1-million-token context windows with Anthropic and OpenAI models, plus session sync across machines.

What it means: A million tokens means the agent can hold a genuinely large slice of your codebase — or a long spec plus the files it touches — in one conversation, so you stop babysitting what it "remembers." Session sync means you start a task on the laptop and pick it up on the desktop without re-explaining. Both quietly reduce the tax of context-rebuilding that eats solo builders' afternoons.

Cost visibility per session and per subagent#

You can now see total session cost across a full chat, not just a single request, and inspect credit usage for individual subagents when work is delegated.

What it means: Agent spend is the new cloud bill — easy to run up, hard to see until it lands. Per-session and per-subagent visibility lets you catch the run that burned credits before the invoice does, and decide which tasks are worth the autonomous mode. For a bootstrapped founder, that's the difference between "agents are magic" and "agents are a line item I can defend."

Enterprise and team controls: managed settings without MDM#

Admins can now push managed Copilot settings via MDM, and — new — apply them from a plain JSON file on machines that aren't enrolled in device management.

What it means: If you're a two- or five-person team, you probably don't run a device-management stack. File-based managed settings let you pin the same agent behavior — which tools are allowed, what's auto-approved, telemetry choices — across everyone's machines with a checked-in config, not a policy server. It's enterprise governance sized down to a startup.

What to do this week#