Habeas is an open-source browser extension that reclaims your data (receipts, invoices, bank/card transactions) from services with no API or export that hide it behind anti-bot walls. It runs in your real, logged-in session, so it stores no credentials and never fights bot detection: the opposite of Plaid/Tink. Local-first: your data only leaves the browser to a destination you choose (folder, Drive, Dropbox, WebDAV, S3). Sources are declarative, auditable data, not code, in an open registry.
 Homepage
 Download
Recent Releases
0.9.1209 Aug 2026 03:15
minor feature:
Chore(release): 0.9.12
Ships the ING window, which needs the runtime clamp: ing-es 2026-08-08.2 is.
Gated behind minVersion 0.9.11.4, so until this reaches the stores the source.
Update is offered to nobody.
Also makes a failed Chrome Web Store upload visible. The step is deliberately.
Continue-on-error a store hiccup must not fail the release or skip the sibling.
AMO upload but that left the run green with the failure only in the log. The.
0.9.11 release read as success while the store never received it. A follow-up step.
Now emits a warning annotation and a job-summary block saying the GitHub asset.
Shipped and the store did not.
0.9.1006 Aug 2026 03:15
minor feature:
Chore(release): 0.9.10
Ships config-sync adopt-on-write: writeSnapshotIfChanged unions the remote.
Config snapshot before writing, so a device with a smaller/unpulled local.
View can never shrink the shared snapshot completing the "adopt a remote.
Canonical ledger, never clobber it with a local copy" invariant.
0.9.801 Aug 2026 03:15
minor feature:
Feat(perms): detect amp; recover revoked site access (noperm)
A source's OPTIONAL host permissions can be silently revoked by a.
Browser/add-on update notably a Firefox temporary add-on reload .
After which auto-sync died with a cryptic "groups 0 Missing host.
Permission for the tab".
An unattended run now checks permissions.contains first.
(lib/capture.js#hasCapturePermissions); on loss it logs a distinct.
`noperm` status and fires an actionable notification whose click opens.
Settings. Settings flags each affected source with a "Site access.
Needed" pill + a one-click "Grant site access" button that re-requests.
The permission (the user gesture the background lacks) and re-registers.
The capture bridge. Localized (en/es), styled, unit-tested. Release 0.9.8.
0.9.228 Jul 2026 03:15
minor feature:
Chore(release): 0.9.2
Groups the accumulated work: native in-Settings recorder, configurable.
Sync-all (membership/order, drag'n'drop), passphrase secrets vault, broker.
Trade display, epoch range format, list.expand (+drop), refresh progress.
Send-from-store (avoid needless source access). Unblocks pepephone-es.
(minVersion 0.9.2).
0.7.024 Jul 2026 03:15
minor feature:
Chore(release): 0.7.0
Milestone grouping the 0.6.0.x dev iterations: month-sharded canonical store.
(all backends, self-heal + move to month shard), Amazon real dates in the store.
Recover-from-destination, live progress + Stop button, group-header checkboxes.
Long-press select, inline preview, checkpointed large downloads, SW-recycle.
Retry + keep-alive, static backend imports.
Parallel shard reads + progressive rendering.
0.4.120 Jul 2026 03:15
minor feature:
Chore(release): 0.4.1
Manifest 0.4.0.1 - gt; 0.4.1, rename CHANGELOG Unreleased - gt; 0.4.1 2026-07-17, open a.
Fresh Unreleased . Ships the consent-gated `list-sources` external hook.
0.2.016 Jul 2026 04:26
major feature:
Added support to extract information from WebSocket-based data sources.
| 
David Marín