SDK Overview
Official Bella Baxter SDKs for every major platform. Each SDK provides:
- Secret loading at application startup
- HMAC-signed requests with automatic retry
- End-to-end encrypted transport (E2EE) — secrets are encrypted between server and SDK before TLS
- Zero-Knowledge Encryption (ZKE) — optional persistent device key for audit trails and DEK caching
bella exec/bella runcompatibility (no SDK required for basic use)- Typed secret code generation via
bella secrets generate <lang> User-Agent: bella-{lang}-sdk/1.0on every request (visible in your audit log)
Choose Your Language
Comparison
| Language | Package | Framework Integrations | Typed Secrets | ZKE |
|---|---|---|---|---|
| JavaScript / TypeScript | @bella-baxter/sdk | Express, NestJS, Next.js, Fastify, AdonisJS | ✅ | ✅ |
| .NET | BellaBaxter.Sdk | ASP.NET Core, Aspire | ✅ Source Generator | ✅ |
| Python | bella-baxter | Flask, Django, FastAPI | ✅ | ✅ |
| Go | github.com/cosmic-chimps/bella-baxter-go | stdlib, Gin | ✅ | ✅ |
| Ruby | bella_baxter | Rails (Railtie) | ✅ | ✅ |
| PHP | cosmic-chimps/bella-baxter | Laravel, Symfony | ✅ | ✅ |
| Swift | BellaBaxterSwift (SPM) | iOS / SwiftUI, CLI | ✅ | ✅ |
| Java | Maven: io.bellabaxter:bella-baxter-sdk | Spring Boot, Quarkus | ✅ | ✅ |
| Dart | bella_baxter (pub.dev) | Flutter, Dart CLI, Shelf | ✅ | ✅ |
| Ansible | cosmic_chimps.bella | Playbooks, lookup plugins | — | — |
→ Zero-Knowledge Encryption (ZKE) — how E2EE transport and persistent device keys work
No SDK Required
For simple use cases, you don't need an SDK at all. The Bella CLI handles secret injection:
sh
# Write .env file
bella pull
# Inject into any process
bella run -- npm start
bella exec -- python manage.py runserver
bella exec -- java -jar app.jarUse an SDK when you want programmatic access to secrets inside your application code (e.g., custom loading logic, typed access, framework startup hooks).
Typed Secrets Code Generation
All SDKs support bella secrets generate <lang> to generate a typed class from your current environment's secrets:
sh
bella secrets generate typescript
bella secrets generate csharp
bella secrets generate python
bella secrets generate go
bella secrets generate java
bella secrets generate phpThe generated code gives you IDE autocomplete, compile-time checking, and no more process.env.MY_SECRET magic strings.