feat(perps): add reliable Lighter trading and advanced orders

[abretonc7s]

Explanation

Recover Lighter trading access for the selected wallet after restore, preserve other devices' keys, and isolate account/network changes.

Add supported trigger orders, position protection, Scale, post-only limits, order editing and isolated-margin updates. Reconcile uncertain submissions without replay. Preserve accepted orders and cancellations through response loss, restart and account changes. Delayed Chase cancellation confirmation uses observation-only reconciliation, preventing another cancellation dispatch.

Tests, build and Mobile integration pass. Basic testnet trading, restart and reconnect are validated; final advanced-order and reinstall validation remain pending. TWAP is unavailable, Chase is a bounded testnet probe, and further TP/SL work is deferred.

References

• Mobile: feat(perps): enable reliable Lighter trading and advanced orders metamask-mobile#37161
• Recipes: https://github.com/MetaMask/experimental-metamask-recipe-perps/pull/31
• TAT-4045

Checklist

• I've updated the test suite for new or updated code as appropriate
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed
• I've introduced breaking changes in this PR and prepared draft consumer PRs

---

Note

High Risk
Large, breaking changes to Lighter order placement, protection, and financial dispatch with new recovery/Chase reconciliation paths; incorrect settlement or lifecycle fencing could block trading or mishandle ambiguous venue state.

Overview
Expands perps-controller with durable Lighter trading, recovery, and advanced order flows, plus controller/messenger APIs and monorepo test wiring so clients can observe and reconcile without blind replay.

Controller & aggregation adds lifecycle-fenced actions: getChaseOrderOwnership and reconcileChaseOrderCancellation (read/settle only—no new cancel dispatch), attached and Scale group list/review, reviewRecoveryVenue, reconcileRecoveredDispatches, and resolveRecoveryProtection. placeOrder/validateOrder snapshot Scale intent via captureScaleOrderParams; testnet Lighter can opt into chaseTestnetProbe from client config. Aggregated subscriptions tag order/fill callbacks with providerId and forward optional onError.

Lighter & HyperLiquid behavior (documented heavily in README/CHANGELOG) includes explicit margin mode and updateMargin, standalone triggers, partial/independent position TP/SL with expectedPosition, native attached OTO/OTOCO, Scale preview/placement/cancel with expectedScaleLadder, post-only limits, same-order editOrder settlement, multi-slot key recovery and dispatch reconciliation, and default-off testnet Chase/TWAP probes (LighterTwapService, Chase utilities/constants). Breaking Lighter changes: attached TP/SL on placeOrder, stricter grouped-signer shapes, new capability/Scale states, and rejecting stray triggerPrice on basic orders. HyperLiquid gains guarded post-sign dispatch (createGuardedHyperLiquidClient) and richer HYPERLIQUID_ORDER_CAPABILITIES.

Tooling maps @metamask/perps-controller/constants/* and utils/* to source in Jest; package Jest compiles selected ESM SDK deps on Node 22.

^{Reviewed by Cursor Bugbot for commit 1ffc52a. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Stale Bugbot comment from a previous run.

The base branch was changed.

[cursor]

Stale Bugbot comment from a previous run.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit e3d7a4c. Configure here.}

[geositta]

Approve, the three findings are resolved: protection obligations survive key slot migration, trigger support excludes spot markets, and recovery cannot continue a guarded removal after its position precondition fails.