diff --git a/lib/plugin-sandbox/consent.ts b/lib/plugin-sandbox/consent.ts
index 2a1f9871..d8941732 100644
--- a/lib/plugin-sandbox/consent.ts
+++ b/lib/plugin-sandbox/consent.ts
@@ -86,6 +86,7 @@ const PERMISSION_LABELS: Record<string, { title: string; body: string }> = {
   'http:post':        { title: 'Call same-origin APIs',          body: 'Make authenticated requests to the webmail backend on your behalf.' },
   'http:fetch':       { title: 'Talk to external services',      body: 'Make uncredentialled requests to the third-party origins listed in the manifest.' },
   'admin:config':     { title: 'Read/write admin config',        body: 'Access this plugin\'s admin-supplied configuration values.' },
+  'ui:download-file': { title: 'Download files',                 body: 'Download custom files generated by the plugin.' },
 };
 
 export function describePermission(perm: string): { title: string; body: string } {