Pragma Download & Install

Pragma is the native desktop IDE for CredVault. Users install it on their own computer, sign in with a CredVault account, and then use the local terminal, editor, AI agent, Drive, secrets, and remote development tools from one app.

The download page is available at:

/download

The download page is public. Users do not need a CLI command just to reach it.

The product page is available at:

/pragma

Supported Operating Systems

Pragma is prepared for the three major desktop operating systems:

macOS Install

Apple does not treat a downloaded .dmg like a Windows installer. The disk image is only a temporary volume. The real install is: copy Pragma.app into /Applications, eject the image, then open it from Applications.

1. Download pragma-latest.dmg from CredVault, not a random Drive link if you can avoid it.
2. Double-click the .dmg. Finder opens a window named Pragma.
3. Drag Pragma onto Applications. Do not double-click the app inside the disk image.
4. Eject the disk image (eject icon in Finder, or right-click the Pragma volume).
5. Open Pragma from /Applications.
6. Sign in with the user's CredVault account.

How macOS decides whether the app can run

Every file Chrome, Safari, or Drive saves from the internet gets a quarantine flag (com.apple.quarantine). The first time the user opens the app, Gatekeeper (Apple’s OS security, not CredVault) checks:

1. Developer ID signature — signed by an Apple Developer Program Developer ID Application certificate.
2. Notarization — Apple scanned the build with notarytool and a ticket was stapled onto the DMG.
3. The app was not modified after signing.

If those pass, macOS shows a one-time prompt: this app was downloaded from the internet, Open. After that it runs normally and shows the real app icon.

If they fail, current macOS (Sequoia / Tahoe) shows "Pragma is damaged and can't be opened. You should eject the disk image." That is Gatekeeper’s block for an unsigned or un-notarized download. The file is not actually damaged. The generic document icon in that Finder window is the same block: macOS will not treat the bundle as a trusted app.

Our GitHub macOS job currently builds with --nosign, so public DMGs will keep hitting this until we sign and notarize with a CredVault Apple team (not Warp’s leftover 2BBY89MBSN certs).

If a tester already sees the damaged dialog

They should Cancel, eject the DMG if Finder will let them, and install correctly:

1. Drag Pragma to Applications if it is not there yet.
2. Eject pragma-latest.dmg.
3. Open System Settings → Privacy & Security, scroll to Security, and use Open Anyway after the blocked launch.
4. Only if that is missing, a tester can clear quarantine on the copy in Applications:

xattr -dr com.apple.quarantine /Applications/Pragma.app

Do not tell customers to disable Gatekeeper or SIP. That is not how Mac software is supposed to ship.

Windows Install

The Windows build is distributed as an installer.

1. Download the .exe.
2. Run the installer.
3. Follow the install steps.
4. Open Pragma from the Start Menu or desktop shortcut.
5. Sign in with the user's CredVault account.

Windows users may see a security prompt if the installer is not signed. For production distribution, the installer should be code-signed so SmartScreen can build trust for the app.

No command-line step is required for Windows installation.

Linux Install

Linux users should use the public AppImage release we publish today.

Universal Linux AppImage

chmod +x Pragma-*.AppImage
./Pragma-*.AppImage

The AppImage is useful when the user does not want a system install or when their distribution does not match a package-manager install.

If we publish .deb or .rpm later, those will be linked from the same public download page.

Running Without System Installation (Portable Mode)

If users cannot or prefer not to run system installers (for example, if they lack Administrator permissions), they can still execute Pragma directly while preserving the application icon.

Windows (Portable Extraction)

1. Extract Files: The Windows .exe installer is built with Inno Setup and can be unpacked without execution. Right-click PragmaSetup.exe, select 7-Zip (or a similar archive utility), and extract the package.
2. Execute directly: Open the extracted directory and run the main pragma.exe binary.
3. Application Icon: The icon is embedded directly inside the pragma.exe executable's resource header. Windows Explorer automatically displays it, and users can create a desktop icon by right-clicking pragma.exe and choosing Send to -> Desktop (create shortcut).

macOS (install, then run)

1. Mount DMG: Double-click the downloaded .dmg.
2. Install: Drag Pragma.app into /Applications. Do not run it from the disk image window.
3. Eject the Pragma volume, then open Pragma from Applications.
4. Application Icon: After a trusted launch, Finder and the Dock use the icon inside Pragma.app/Contents/Resources. A generic document icon usually means Gatekeeper blocked the unsigned bundle.

Linux (AppImage Natively Portable)

1. Make Executable: AppImages run without setup. Grant execution rights:

   chmod +x Pragma-*.AppImage
   

2. Execute directly: Run ./Pragma-*.AppImage.
3. Application Icon: The icon is integrated into the binary. To register a desktop shortcut icon manually, create a launcher file at ~/.local/share/applications/pragma.desktop pointing to the AppImage executable and its internal icon resources.

First Launch

On first launch, Pragma should guide the user through:

1. Sign in or account connection.
2. Default AI model choice.
3. Agent autonomy level.
4. Terminal and editor layout.
5. Optional Drive, secrets, and remote server setup.

After this, the user lands inside the IDE with terminal, editor, AI tools, and account-connected features available.

What The Download Must Include

Each release should include:

• macOS installer.
• Windows installer.
• Linux AppImage.
• Version number.
• Release notes.
• Checksums.

Checksums help users and admins verify that downloaded files were not changed after release.