[BUG] CLI login funding step fails: PJS missing AuthorizeValueTransfer extension

[ottovlotto]

Severity: P1
Reported by: DevEx Audit External
Source: DevEx Audit (External), 3 June 2026

Symptom

CLI
login error
Account has funds
✓ allowances granted (3)
✕ funding registering H160 mapping…
PJS does not support this signed-extension: AuthorizeValueTransfer

CLI login flow gets through allowances granted (3) but fails at funding / registering H160 mapping… with: PJS does not support this signed-extension: AuthorizeValueTransfer. The account already has funds, yet the CLI fails on funding.

Reproduction

DOT_DEPLOY_VERBOSE=1 DOT_MEMORY_TRACE=1 pg login 2> >(tee dot.log >&2)

Observe failure at H160 mapping step with the PJS signed-extension error.

Recommended fix / next steps

• Investigate why PJS (polkadot-js) is being used here and lacks the AuthorizeValueTransfer signed-extension.
• Either:
  • Migrate the signing path to a backend that supports this extension (PAPI / signer that includes V2 extensions); or
  • Skip the funding step when the account already has funds (the audit notes "Account has funds" was reported just above the failure).
• Cross-ref user memory: "Don't build workarounds for upstream SDK gaps" — if this is an upstream PJS gap, surface to PJS owners.