Gap
LimitlessExchange in core supports an HMAC auth mode that reads credentials.apiSecret (and credentials.passphrase). The TypeScript SDK's ExchangeOptions has no apiSecret or passphrase fields, so these credentials can never be forwarded to the sidecar.
Current state
Core (core/src/exchanges/limitless/index.ts:97): reads credentials?.apiSecret to select HMAC auth mode.
TypeScript SDK (sdks/typescript/pmxt/client.ts:194–239): ExchangeOptions exposes only apiKey, privateKey, pmxtApiKey, baseUrl, autoStartServer, proxyAddress, signatureType. No apiSecret or passphrase.
TypeScript SDK (sdks/typescript/pmxt/client.ts:359–369): getCredentials() returns { apiKey, privateKey, funderAddress, signatureType }. Neither apiSecret nor passphrase is included.
Python SDK (sdks/python/pmxt/_exchanges.py): the Limitless class correctly accepts api_secret and passphrase constructor parameters and forwards them via _get_credentials_dict.
Expected behaviour
ExchangeOptions should include optional apiSecret and passphrase fields. getCredentials() should forward them when set, so that TypeScript Limitless users can enable HMAC auth mode.
Impact
TypeScript SDK users cannot authenticate to Limitless using the HMAC auth mode; only private-key auth is possible, and only if the sidecar has the key.
Gap
LimitlessExchangein core supports an HMAC auth mode that readscredentials.apiSecret(andcredentials.passphrase). The TypeScript SDK'sExchangeOptionshas noapiSecretorpassphrasefields, so these credentials can never be forwarded to the sidecar.Current state
Core (
core/src/exchanges/limitless/index.ts:97): readscredentials?.apiSecretto select HMAC auth mode.TypeScript SDK (
sdks/typescript/pmxt/client.ts:194–239):ExchangeOptionsexposes onlyapiKey,privateKey,pmxtApiKey,baseUrl,autoStartServer,proxyAddress,signatureType. NoapiSecretorpassphrase.TypeScript SDK (
sdks/typescript/pmxt/client.ts:359–369):getCredentials()returns{ apiKey, privateKey, funderAddress, signatureType }. NeitherapiSecretnorpassphraseis included.Python SDK (
sdks/python/pmxt/_exchanges.py): theLimitlessclass correctly acceptsapi_secretandpassphraseconstructor parameters and forwards them via_get_credentials_dict.Expected behaviour
ExchangeOptionsshould include optionalapiSecretandpassphrasefields.getCredentials()should forward them when set, so that TypeScriptLimitlessusers can enable HMAC auth mode.Impact
TypeScript SDK users cannot authenticate to Limitless using the HMAC auth mode; only private-key auth is possible, and only if the sidecar has the key.