@@ -89,14 +89,15 @@ function buildFileContextMenuItems(input: {
 export function useFileContextMenu(environmentId: EnvironmentId | null) {
   const openInEditor = useAtomCommand(shellEnvironment.openInEditor, { reportFailure: false });
   const serverConfig = useAtomValue(serverEnvironment.configValueAtom(environmentId));
+  const canOpenInEditor = useAtomValue(shellEnvironment.openInEditor.permissionAtom(environmentId));
 
-  const availableEditors = serverConfig?.availableEditors ?? [];
+  const availableEditors = canOpenInEditor ? (serverConfig?.availableEditors ?? []) : [];
   const capabilities: FileContextMenuCapabilities = {
     // WSL can reveal in Windows Explorer despite reporting Linux; use server wording.
     revealLabel:
       environmentId !== null &&
       serverConfig?.shellRevealInFileManager === true &&
-      serverConfig.availableEditors.includes("file-manager")
+      availableEditors.includes("file-manager")
         ? serverConfig.shellRevealInFileManagerKind === undefined
           ? revealInFileExplorerLabelForOs(serverConfig.environment.platform.os)
           : revealInFileExplorerLabelForKind(serverConfig.shellRevealInFileManagerKind)
@@ -117,7 +118,8 @@ export function useFileContextMenu(environmentId: EnvironmentId | null) {
       action === "open" || reveal
         ? ("file-manager" as const)
         : (action.slice("editor:".length) as EditorId);
-    if (action !== "open" && !reveal && !capabilities.editorIds.includes(editor)) return;
+    if (!capabilities.editorIds.includes(editor)) return;
+    if (reveal && capabilities.revealLabel === undefined) return;
 
     const result = await openInEditor({
       environmentId,
 
@@ -10,6 +10,7 @@ import {
   AuthAccessReadScope,
   AuthAccessWriteScope,
   AuthEnvironmentMaintainScope,
+  AuthFilesystemReadScope,
   AuthOrchestrationOperateScope,
   AuthOrchestrationReadScope,
   AuthPreviewOperateScope,
@@ -33,6 +34,7 @@ import { Atom, AtomRegistry, AsyncResult } from "effect/reactivity";
 import { EnvironmentRegistry } from "../connection/registry.ts";
 import { createCommandPermissions } from "./commandPermissions.ts";
 import { createEnvironmentRpcCommand } from "./runtime.ts";
+import { createShellEnvironmentAtoms } from "./shellCommands.ts";
 import { AVAILABLE_CONNECTION_STATE, BearerConnectionTarget } from "../connection/model.ts";
 import { createPeerLinkEnvironmentAtoms } from "./peerLinks.ts";
 
@@ -592,3 +594,33 @@ it.effect("rejects protected unary and streamed RPCs outside a guarded command",
     expect(writes).toBe(0);
   }),
 );
+
+it.effect("requires the destination operate grant to open or reveal a file on its host", () =>
+  Effect.scoped(
+    Effect.gen(function* () {
+      const registry = yield* setup;
+      const { openInEditor } = createShellEnvironmentAtoms(runtime);
+      const authorization = createCommandPermissions(runtime, WS_METHODS.shellOpenInEditor);
+      registry.set(sessions(other), AsyncResult.success(grant(true)));
+      registry.set(
+        sessions(env),
+        AsyncResult.success({
+          ...grant(false),
+          scopes: [AuthFilesystemReadScope],
+          permissions: [AuthFilesystemReadScope],
+        }),
+      );
+      expect(registry.get(openInEditor.permissionAtom(other))).toBe(true);
+      expect(registry.get(openInEditor.permissionAtom(env))).toBe(false);
+      const denied = yield* authorization.authorize(registry, env).pipe(Effect.flip);
+      expect(denied).toMatchObject({
+        _tag: "EnvironmentAuthorizationError",
+        requiredPermission: AuthOrchestrationOperateScope,
+      });
+
+      registry.set(sessions(env), AsyncResult.success(grant(true)));
+      expect(registry.get(openInEditor.permissionAtom(env))).toBe(true);
+      yield* authorization.authorize(registry, env);
+    }),
+  ),
+);
@@ -63,6 +63,7 @@ export const CLIENT_GUARDED_RPC_SCOPES = {
 
   // Starts an agent session on this environment that can read its logs and database.
   [WS_METHODS.serverPrepareTriage]: AuthOrchestrationOperateScope,
+  [WS_METHODS.shellOpenInEditor]: AuthOrchestrationOperateScope,
   [WS_METHODS.scheduledTasksUpsert]: AuthOrchestrationOperateScope,
   [WS_METHODS.scheduledTasksSetEnabled]: AuthOrchestrationOperateScope,
   [WS_METHODS.scheduledTasksDelete]: AuthOrchestrationOperateScope,