[Bug] 403 Forbidden: desktop origin required

[xcusso]

Describe the bug

Error

403 Forbidden: desktop origin required
ApiError: 403 Forbidden: desktop origin required
    at $ (http://localhost:3900/assets/client-DGPQXBYP.js:5:13185)
    at async Ve (http://localhost:3900/assets/client-DGPQXBYP.js:5:13337)
    at async Object.startInstall (http://localhost:3900/assets/ModelCatalogue-DCj-BjHm.js:2:13771)

Environment

Version: 0.5.2
Platform: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Build status: current at filing time (latest v0.5.2)
OS: Linux-5.15.0-191-generic-x86_64-with-glibc2.35
Python: 3.11.13
Compute device: cuda
GPU: NVIDIA RTX A2000 Laptop GPU (3.7 GB VRAM)
CPU: 12th Gen Intel(R) Core(TM) i7-12800H
RAM: 15.6 GB
Disk free: 59.3 GB
Active TTS engine: omnivoice

Backend reachability

Deployment mode: server
Last backend response: 0 s before this report

Last backend crash (auto-captured — may predate this bug)

When: 2026-09-15T18:37:36.000Z (12 min ago)
Exit: process ended uncleanly (previous run)
Uptime before crash: 0 s
Backend version: 0.5.2

… (truncated)
 cached
2026-09-15 18:23:46,345 INFO [omnivoice.events] WS client connected (1 total)
2026-09-15 18:24:11,979 INFO [omnivoice.capture_ws] sherpa offline dictation: model=sherpa-whisper-tiny sr=16000 aec=False
2026-09-15 18:29:18,096 INFO [omnivoice.endpoint_race] HF endpoint race: picked https://huggingface.co (reachable=True, latency=60.6ms) from [('https://huggingface.co', True, 60.6), ('https://hf-mirror.com', True, 910.9)]
2026-09-15 18:29:38,246 INFO [omnivoice.capture_ws] sherpa offline dictation: model=sherpa-whisper-tiny sr=16000 aec=False
2026-09-15 18:29:54,049 INFO [omnivoice.capture_ws] sherpa offline dictation: model=sherpa-whisper-tiny sr=16000 aec=False
2026-09-15 18:30:13,025 INFO [omnivoice.capture_ws] sherpa offline dictation: model=sherpa-whisper-tiny sr=16000 aec=False
2026-09-15 18:32:48,643 INFO [omnivoice.events] WS client connected (2 total)
2026-09-15 18:32:56,368 INFO [omnivoice.events] WS client disconnected (1 remaining)
2026-09-15 18:36:23,262 INFO [omnivoice.model] Idle timeout reached. Unloading VoiceStudio model to free VRAM.
2026-09-15 18:37:36,115 INFO [omnivoice.api] Startup watchdog armed: thread dump if startup exceeds 300s (#632).

Recent actions

20:38:10 view:settings
20:39:40 view:launchpad
20:39:49 view:transcriptions
20:40:27 view:settings
20:47:19 view:catalogue

What I was doing