pragmatiks-pragma-provider 1.1.0

Built-in platform provider for Pragmatiks

Pragma Provider

Built-in platform resources for Pragmatiks.

Declaratively manage secrets, non-sensitive configuration, and file storage alongside the rest of your infrastructure. The resources in this provider are available out of the box in every organization and are commonly referenced by other providers through $ref lookups.

Installation

pip install pragmatiks-pragma-provider

or with uv:

uv add pragmatiks-pragma-provider

Resources

Resource	Type Slug	Description
Secret	pragma/secret	Platform-managed secrets referenced by other resources
Config	pragma/config	Non-sensitive configuration values shared across resources
File	pragma/file	Platform-managed file storage with public download URLs

---

Secret

Stores sensitive key-value data and exposes each entry as an output so that other resources can reference individual values through $ref lookups.

Config:

• data (dict[str, str], required, mutable) -- Key-value pairs of secret data. Values must be strings.

Outputs:

• Each key-value pair from data is exposed as a separate output field.

resources:
  database-credentials:
    provider: pragma
    resource: secret
    config:
      data:
        username: app_service
        password: hunter2

  app-user:
    provider: gcp
    resource: cloudsql/user
    config:
      instance: ${{ prod-instance }}
      username:
        $ref: database-credentials#outputs.username
      password:
        $ref: database-credentials#outputs.password

Behavior:

• Create: Stores each key as a separate output for downstream $ref resolution.
• Update: Replaces the full output set with the new data keys and values.
• Delete: No-op. Secret state is held alongside the resource itself.

---

Config

Non-sensitive configuration store. Unlike pragma/secret, values may be any JSON-serializable type, which makes it a natural place to keep shared defaults (project IDs, regions, feature flags) that many resources reference.

Config:

• data (dict[str, Any], required, mutable) -- Key-value pairs of configuration data. Values may be strings, numbers, booleans, lists, or nested objects.

Outputs:

• Each key-value pair from data is exposed as a separate output field, preserving its original type.

resources:
  gcp-defaults:
    provider: pragma
    resource: config
    config:
      data:
        project_id: my-gcp-project
        region: us-central1
        tags:
          - production
          - primary

  my-bucket:
    provider: gcp
    resource: storage
    config:
      project_id:
        $ref: gcp-defaults#outputs.project_id
      location:
        $ref: gcp-defaults#outputs.region

Behavior:

• Create: Stores each key as a separate output for downstream $ref resolution.
• Update: Replaces the full output set with the new data keys and values.
• Delete: No-op. Config state is held alongside the resource itself.

---

File

Platform-managed file storage. The actual file content is uploaded through the Pragmatiks API (POST /files/{name}/upload); this resource reads the uploaded metadata and exposes URLs, size, and checksum as outputs.

Config: none -- the resource tracks a file already uploaded through the Pragmatiks API under the resource's name.

Outputs:

• url -- Internal pragma:// URL used for cross-resource references.
• public_url -- Public HTTP URL for external download.
• size -- File size in bytes.
• content_type -- MIME type stored at upload time.
• checksum -- SHA256 hash of the file content.
• uploaded_at -- Timestamp the file was uploaded.

resources:
  onboarding-doc:
    provider: pragma
    resource: file
    config: {}

Behavior:

• Create: Reads the uploaded file metadata and exposes URLs, size, and checksum as outputs. Fails with a clear error if the file content has not been uploaded yet.
• Update: Re-reads the metadata from storage so outputs reflect the latest uploaded version.
• Delete: Removes both the file content and its metadata from the underlying object store. Idempotent -- missing files are treated as already deleted.

Runtime Environment

The pragma/file resource reads storage configuration from environment variables populated by the Pragmatiks runtime. Standalone use is not supported.

Variable	Purpose
PRAGMA_FILE_GCS_BUCKET	Object-store bucket holding uploaded file content
PRAGMA_FILE_PUBLIC_URL	Base URL used to compose public download URLs
PRAGMA_RUNTIME_ORGANIZATION_ID	Identifies the organization's file prefix in the bucket

Development

# Run tests
task pragma:test

# Lint and type check
task pragma:check

# Format
task pragma:format