Skip to content

SDK Overview

Official Bella Baxter SDKs for every major platform. Each SDK provides:

  • Secret loading at application startup
  • HMAC-signed requests with automatic retry
  • End-to-end encrypted transport (E2EE) — secrets are encrypted between server and SDK before TLS
  • Zero-Knowledge Encryption (ZKE) — optional persistent device key for audit trails and DEK caching
  • bella exec / bella run compatibility (no SDK required for basic use)
  • Typed secret code generation via bella secrets generate <lang>
  • User-Agent: bella-{lang}-sdk/1.0 on every request (visible in your audit log)

Choose Your Language

JavaScript.NETPythonGoRubyPHPSwiftJavaDartAnsible


Comparison

LanguagePackageFramework IntegrationsTyped SecretsZKE
JavaScript / TypeScript@bella-baxter/sdkExpress, NestJS, Next.js, Fastify, AdonisJS
.NETBellaBaxter.SdkASP.NET Core, Aspire✅ Source Generator
Pythonbella-baxterFlask, Django, FastAPI
Gogithub.com/cosmic-chimps/bella-baxter-gostdlib, Gin
Rubybella_baxterRails (Railtie)
PHPcosmic-chimps/bella-baxterLaravel, Symfony
SwiftBellaBaxterSwift (SPM)iOS / SwiftUI, CLI
JavaMaven: io.bellabaxter:bella-baxter-sdkSpring Boot, Quarkus
Dartbella_baxter (pub.dev)Flutter, Dart CLI, Shelf
Ansiblecosmic_chimps.bellaPlaybooks, lookup plugins

Zero-Knowledge Encryption (ZKE) — how E2EE transport and persistent device keys work


No SDK Required

For simple use cases, you don't need an SDK at all. The Bella CLI handles secret injection:

sh
# Write .env file
bella pull

# Inject into any process
bella run -- npm start
bella exec -- python manage.py runserver
bella exec -- java -jar app.jar

Use an SDK when you want programmatic access to secrets inside your application code (e.g., custom loading logic, typed access, framework startup hooks).


Typed Secrets Code Generation

All SDKs support bella secrets generate <lang> to generate a typed class from your current environment's secrets:

sh
bella secrets generate typescript
bella secrets generate csharp
bella secrets generate python
bella secrets generate go
bella secrets generate java
bella secrets generate php

The generated code gives you IDE autocomplete, compile-time checking, and no more process.env.MY_SECRET magic strings.

Released under the ELv2 License.