@@ -44,6 +44,7 @@ import {
   getSystemLocale,
   getWindowFullscreenState,
   openExternal,
+  downloadUrl,
   openSystemSettings,
   checkSystemPermission,
   pasteAsText,
@@ -145,6 +146,7 @@ export const installDesktopIpcHandlers = Effect.fn("desktop.ipc.installHandlers"
   yield* ipc.handle(setTheme);
   yield* ipc.handle(showContextMenu);
   yield* ipc.handle(openExternal);
+  yield* ipc.handle(downloadUrl);
   yield* ipc.handle(receiveProviderAuthCallback);
   yield* ipc.handle(cancelProviderAuthCallback);
   yield* ipc.handle(openSystemSettings);
 
@@ -5,6 +5,7 @@ export const PICK_THEME_FILES_CHANNEL = "desktop:pick-theme-files";
 export const SET_THEME_CHANNEL = "desktop:set-theme";
 export const CONTEXT_MENU_CHANNEL = "desktop:context-menu";
 export const OPEN_EXTERNAL_CHANNEL = "desktop:open-external";
+export const DOWNLOAD_URL_CHANNEL = "desktop:download-url";
 export const OPEN_SYSTEM_SETTINGS_CHANNEL = "desktop:open-system-settings";
 export const PROBE_REMOTE_EDITORS_CHANNEL = "desktop:probe-remote-editors";
 export const MENU_ACTION_CHANNEL = "desktop:menu-action";
 
@@ -290,6 +290,25 @@ export const openExternal = DesktopIpc.makeIpcMethod({
   }),
 });
 
+/** The main process downloads outside the renderer's CORS and CSP limits. */
+export const downloadUrl = DesktopIpc.makeIpcMethod({
+  channel: IpcChannels.DOWNLOAD_URL_CHANNEL,
+  payload: Schema.Struct({ url: Schema.String, fileName: Schema.String }),
+  result: Schema.Void,
+  handler: ({ url, fileName }, event) =>
+    Effect.sync(() => {
+      const contents = event && Electron.webContents.fromId(event.sender.id);
+      if (!contents || !/^(https?|data):/i.test(url)) return;
+      // downloadURL cannot suggest a name, and asset URLs end in an opaque id.
+      if (/\.\w+$/.test(fileName)) {
+        contents.session.once("will-download", (_event, item) => {
+          item.setSaveDialogOptions({ defaultPath: fileName });
+        });
+      }
+      contents.downloadURL(url);
+    }),
+});
+
 export const openSystemSettings = DesktopIpc.makeIpcMethod({
   channel: IpcChannels.OPEN_SYSTEM_SETTINGS_CHANNEL,
   payload: SystemSettingsPaneSchema,
 
@@ -199,6 +199,8 @@ contextBridge.exposeInMainWorld("desktopBridge", {
   cancelProviderAuthCallback: (url: string) =>
     ipcRenderer.invoke(IpcChannels.CANCEL_PROVIDER_AUTH_CALLBACK_CHANNEL, url),
   openExternal: (url: string) => ipcRenderer.invoke(IpcChannels.OPEN_EXTERNAL_CHANNEL, url),
+  downloadUrl: (url: string, fileName: string) =>
+    ipcRenderer.invoke(IpcChannels.DOWNLOAD_URL_CHANNEL, { url, fileName }),
   checkSystemPermission: (pane: string) =>
     ipcRenderer.invoke(IpcChannels.CHECK_SYSTEM_PERMISSION_CHANNEL, pane),
   openSystemSettings: (pane: string) =>
 
@@ -25,6 +25,9 @@ async function readMediaBlob(src: string): Promise<Blob> {
 }
 
 export async function downloadMedia(src: string, name: string): Promise<void> {
+  // The renderer's fetch is bound by CORS and CSP; desktop downloads from the main process.
+  const downloadUrl = typeof window === "undefined" ? undefined : window.desktopBridge?.downloadUrl;
+  if (downloadUrl && /^(https?|data):/i.test(src)) return downloadUrl(src, name);
   const url = URL.createObjectURL(await readMediaBlob(src));
   try {
     const anchor = document.createElement("a");
 
@@ -1108,6 +1108,8 @@ export interface DesktopBridge {
   receiveProviderAuthCallback?: (authorizationUrl: string) => Promise<string>;
   cancelProviderAuthCallback?: (authorizationUrl: string) => Promise<void>;
   openExternal: (url: string) => Promise<boolean>;
+  /** Starts a native download of an http(s) or data: URL. Missing in older desktop builds. */
+  downloadUrl?: (url: string, fileName: string) => Promise<void>;
   openSystemSettings?: (pane: SystemSettingsPane) => Promise<boolean>;
   checkSystemPermission?: (pane: SystemSettingsPane) => Promise<boolean>;
   /**
Original file line number	Diff line number	Diff line change
`@@ -25,6 +25,9 @@ async function readMediaBlob(src: string): Promise<Blob> {`
`25`	`25`	`}`
`26`	`26`
`27`	`27`	`export async function downloadMedia(src: string, name: string): Promise<void> {`
	`28`	`+ // The renderer's fetch is bound by CORS and CSP; desktop downloads from the main process.`
	`29`	`+ const downloadUrl = typeof window === "undefined" ? undefined : window.desktopBridge?.downloadUrl;`
	`30`	`+ if (downloadUrl && /^(https?\|data):/i.test(src)) return downloadUrl(src, name);`
`28`	`31`	`const url = URL.createObjectURL(await readMediaBlob(src));`
`29`	`32`	`try {`
`30`	`33`	`const anchor = document.createElement("a");`