$ show papra-hq/papra
Papra is a self-hostable, open-source document management platform that provides a full-stack solution for archiving, organizing, and searching documents. The system consists of a Hono-based API server with SQLite (via Drizzle ORM and libsql/Turso), a SolidJS web client, a React Native mobile app (Expo), a CLI tool, and several standalone packages. It supports multi-tenant organizations, role-based access, document upload with content extraction (OCR via Tesseract, Mistral OCR, Azure Document Intelligence, Docling, and a custom HTTP strategy), full-text search via SQLite FTS5 with a custom query parser, tagging with automatic tagging rules, document sharing with password-protected links, intake emails, webhooks, and subscriptions with Stripe integration. The architecture is modular, using repository and usecase patterns, an in-process event system, and a driver-based approach for storage (filesystem, S3, Azure Blob), email delivery, and KV stores. The codebase is heavily tested with unit, integration, and e2e tests, and includes a comprehensive demo mode.
The LLM identified 4 files worth highlighting for reuse:
The lecture package is a standalone, reusable text extraction library that supports multiple input formats (PDF, images, Office documents) via pluggable extractors. It uses Tesseract for OCR on images and scanned PDFs, and internal parsers for text-based formats. The package is fully testable with fixtures and expected outputs, and can be extracted and used in any document processing pipeline with minimal changes.
A standalone, dependency-free search query parser that tokenizes input into an AST with support for boolean operators (AND, OR, NOT), parentheses, quoted strings, field filters (e.g., `tag:`, `date:`), and comparison operators. The parser includes optimization passes and is used by the server's FTS5 search provider. It can be reused in any project requiring a rich search query language.
Implements per-document encryption using AES-256-GCM with a key-wrapping scheme (HKDF-derived key encryption keys). Provides stream transformers for encrypting/decrypting file streams, a magic header for format detection, and key derivation utilities. The module is well-tested and can be extracted as a standalone encryption library for file storage systems.
A server-side request forgery (SSRF) protection module that blocks requests to private and reserved IP ranges (IPv4 and IPv6) using Node's `net.BlockList`. It caches DNS lookups and performs efficient IP checks. This module is a self-contained, reusable security utility that can be integrated into any application making outbound HTTP requests.