feat(perps): update latest hyperliquid sdk

[abretonc7s]

Description

Bumps @nktkas/hyperliquid from 0.30.2 to 0.32.2 (latest).

What changed in the SDK:

• @nktkas/rews 1.2.3 → 2.1.0 (WebSocket reconnection library)
• valibot 1.2.0 → 1.3.1 (request validation)
• micro-eth-signer removed (signing now fully delegated to wallet adapter)

What this PR changes:

• package.json / yarn.lock — version bump
• shim.js — Added CloseEvent and MessageEvent polyfills for React Native/Hermes. @nktkas/rews v2 uses new CloseEvent(...) and new MessageEvent(...) which are standard Web APIs but not available as constructors in Hermes. Without these polyfills, every WebSocket close/message event crashes the transport.

No changes to HyperLiquidClientService, HyperLiquidProvider, or any other app code.

Changelog

CHANGELOG entry: null

Related issues

Fixes: https://consensyssoftware.atlassian.net/browse/TAT-2906

Manual testing steps

Feature: Hyperliquid SDK upgrade validation

  Scenario: Full BTC trade lifecycle on testnet
    Given wallet is unlocked and perps feature is enabled

    When user navigates to Perps and switches to testnet
    Then market data loads (BTC, ETH, SOL visible with prices)

    When user opens a BTC long market order ($10, 2x leverage)
    Then position appears in portfolio

    When user creates TP/SL (+25% / -10%)
    Then TP and SL orders are confirmed

    When user closes the position
    Then position is removed from portfolio

Reproduce via recipe:

bash scripts/perps/agentic/validate-recipe.sh \
  scripts/perps/agentic/teams/perps/recipes/full-trade-lifecycle.json \
  --testnet

Screenshots/Recordings

Before

No UI changes — dependency update only.

After

Full trade lifecycle validated (14/14 steps pass): navigate → testnet → open BTC long → TP/SL → close → verify.

sdk-upgrade-validation.mp4

Pre-merge author checklist

• I've followed MetaMask Contributor Docs and MetaMask Mobile Coding Standards.
• I've completed the PR template to the best of my ability
• I've included tests if applicable
• I've documented my code using JSDoc format if applicable
• I've applied the right labels on the PR (see labeling guidelines). Not required for external contributors.

Pre-merge reviewer checklist

• I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
• I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

---

Note

Medium Risk
Updates the Hyperliquid perps dependency and its WebSocket stack, which can affect trading connectivity and runtime behavior. Adds global CloseEvent/MessageEvent constructors to prevent Hermes crashes, but changes occur in app-wide shims.

Overview
Upgrades @nktkas/hyperliquid to 0.32.2, pulling in @nktkas/rews v2 and updated validation deps, and updating the lockfile accordingly.

Adds React Native/Hermes polyfills in shim.js for global CloseEvent and MessageEvent to support the SDK’s updated WebSocket transport and avoid crashes when handling close/message events.

^{Reviewed by Cursor Bugbot for commit e109022. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​nktkas/​hyperliquid@​0.30.2 ⏵ 0.32.2			+7

View full report

[abretonc7s]

Automated dev run — TAT-2906

Metric	Value
Run	7d9c7333
Duration	?
Model	claude/sonnet
Nudges	0
Cost estimate	$4.86

Worker report

Report — TAT-2906: Update Hyperliquid SDK

Summary

Updated @nktkas/hyperliquid from 0.30.2 to 0.32.2. No API-breaking changes were found affecting the codebase — all existing type imports and method signatures remain compatible. All 288 perps test suites pass (1467 controller + 5503 UI tests).

Changes

File	Change
package.json	Bumped @nktkas/hyperliquid from ^0.30.2 to ^0.32.2
yarn.lock	Updated lock entry; @nktkas/rews bumped from 1.2.3 → 2.1.0, valibot from 1.2.0 → 1.3.1, micro-eth-signer removed (no longer a dep), CLI bin removed

Test Plan

• TypeScript: tsc --noEmit — no errors
• Unit tests: yarn jest app/controllers/perps/ — 29 suites, 1467 tests passed
• Unit tests: yarn jest app/components/UI/Perps/ — 259 suites, 5503 tests passed
• Recipe: 5/5 steps passed (navigate → wait route → wait market data → assert BTC found → screenshot)

Evidence Artifacts

• evidence-market-loaded.png — markets list loaded successfully with SDK 0.32.2

Ticket

https://consensyssoftware.atlassian.net/browse/TAT-2906

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit aa71f14. Configure here.}

[github-actions]

🔍 Smart E2E Test Selection

• Selected E2E tags: SmokePerps, SmokeWalletPlatform, SmokeConfirmations
• Selected Performance tags: @PerformancePreps
• Risk Level: medium
• AI Confidence: 88%

click to see 🤖 AI reasoning details

E2E Test Selection:
The changes consist of:

1. package.json: Bumps @nktkas/hyperliquid from ^0.30.2 to ^0.32.2 — a minor version bump of the Hyperliquid SDK used exclusively by the Perps feature.
2. shim.js: Adds CloseEvent and MessageEvent polyfills required by @nktkas/rews v2 (the WebSocket transport library used by the updated Hyperliquid SDK). React Native/Hermes doesn't provide these globals natively, so without these polyfills the WebSocket transport would fail.
3. yarn.lock: Updated to reflect the new dependency resolution.

The Hyperliquid SDK is used in HyperLiquidClientService.ts, HyperLiquidSubscriptionService.ts, standaloneInfoClient.ts, and related perps utilities. The WebSocket transport is critical for real-time order book data and subscription events in the Perps feature.

Tag selection rationale:

• SmokePerps: Directly impacted — the Hyperliquid SDK version bump and WebSocket polyfills affect the core Perps trading functionality (Add Funds, balance verification, market data).
• SmokeWalletPlatform: Required per SmokePerps tag description — Perps is a section inside the Trending tab, so changes to Perps affect Trending.
• SmokeConfirmations: Required per SmokePerps tag description — Add Funds deposits are on-chain transactions that go through the confirmation flow.

The shim polyfills are low-level but critical — if CloseEvent or MessageEvent constructors are missing, WebSocket connections in the Perps feature would fail silently or throw errors. The version bump from 0.30.x to 0.32.x may include breaking API changes that need validation.

Performance Test Selection:
The Hyperliquid SDK version bump (0.30.x → 0.32.x) updates the WebSocket transport layer used for real-time perps market data. The new shim polyfills for CloseEvent and MessageEvent affect how WebSocket connections are established and managed. These changes could impact perps market loading times, order book subscription performance, and the Add Funds flow — all covered by @PerformancePreps.

View GitHub Actions results

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

✅ E2E Fixture Validation — Schema is up to date
11 value mismatches detected (expected — fixture represents an existing user).
View details