feat(core): implement priority

.github/workflows/test.yml

@@ -72,5 +72,19 @@ jobs:
       - name: Build (all features)
         run: cargo test --locked --workspace --all-features --no-run
 
+      # Slash-less `charon/priority/2.0.0` Charon interop relies on the vendored
+      # multistream-select fork ([patch.crates-io] -> third_party/). If a libp2p
+      # bump moves the required version off the fork's, cargo only warns and
+      # silently falls back to the registry copy, regressing interop. Fail loudly
+      # instead: assert no registry-sourced multistream-select is in the graph.
+      - name: Verify multistream-select fork patch is applied
+        run: |
+          if ! cargo metadata --locked --format-version 1 \
+            | jq -e '[.packages[] | select(.name == "multistream-select" and .source != null)] | length == 0' > /dev/null; then
+            echo "::error::multistream-select fork patch not applied — a registry copy is in the dependency graph (likely a libp2p bump). Re-vendor third_party/multistream-select to the matching version (see its PATCHES.md)."
+            exit 1
+          fi
+          echo "multistream-select fork patch applied ✓"
+
       - name: Run tests (all features)
         run: cargo test --locked --workspace --all-features

Cargo.toml

@@ -21,7 +21,12 @@ members = [
     "crates/tracing",
     "crates/peerinfo",
     "crates/frost",
+    "crates/priority",
 ]
+# Vendored fork consumed only via [patch.crates-io]; excluded so it builds/tests
+# standalone (its upstream code isn't written to this workspace's lints) without
+# cargo treating it as a member.
+exclude = ["third_party/multistream-select"]
 resolver = "3"
 
 [workspace.package]
@@ -162,3 +167,10 @@ opt-level = 3
 
 [profile.test.package.aes]
 opt-level = 3
+
+# Forked multistream-select that accepts slash-less protocol names, required for
+# the priority protocol to interoperate with Charon's "charon/priority/2.0.0"
+# (no leading slash). Upstream rejects such names; the only delta is relaxing
+# that check. See third_party/multistream-select/PATCHES.md.
+[patch.crates-io]
+multistream-select = { path = "third_party/multistream-select" }

crates/consensus/src/qbft/msg.rs

@@ -269,7 +269,7 @@ impl SomeMsg<ConsensusQbftTypes> for Msg {
 /// The hash input is deterministic protobuf encoding, then SSZ `PutBytes`
 /// merkleization. `Any` is rejected because the consensus value hash must bind
 /// to the inner message bytes, not the transport envelope.
-pub(crate) fn hash_proto<M>(msg: &M) -> Result<[u8; 32]>
+pub fn hash_proto<M>(msg: &M) -> Result<[u8; 32]>
 where
     M: prost::Message + prost::Name,
 {
@@ -288,7 +288,7 @@ where
 /// This helper hashes the bytes exactly as provided; it does not decode or
 /// canonicalize a protobuf envelope. Callers must pass bytes produced from the
 /// concrete inner message with deterministic field/map ordering.
-pub(crate) fn hash_proto_bytes(encoded: &[u8]) -> Result<[u8; 32]> {
+pub fn hash_proto_bytes(encoded: &[u8]) -> Result<[u8; 32]> {
     let mut hasher = Hasher::default();
     let index = hasher.index();
     hasher.put_bytes(encoded).map_err(Error::HashProto)?;

crates/core/src/deadline/calculator.rs

@@ -1,5 +1,7 @@
 //! Deadline calculator trait and beacon-node-derived implementation.
 
+use std::sync::Arc;
+
 use chrono::{DateTime, Duration, Utc};
 use pluto_eth2api::EthBeaconNodeApiClient;
 
@@ -86,6 +88,14 @@ pub trait DeadlineCalculator: Send + Sync + 'static {
     fn deadline(&self, duty: &Duty) -> Result<Option<DateTime<Utc>>>;
 }
 
+/// Lets a shared (`Arc`-wrapped) calculator satisfy the trait, so a single
+/// calculator instance can back both a deadliner task and other consumers.
+impl<T: DeadlineCalculator + ?Sized> DeadlineCalculator for Arc<T> {
+    fn deadline(&self, duty: &Duty) -> Result<Option<DateTime<Utc>>> {
+        (**self).deadline(duty)
+    }
+}
+
 /// Calculator that reports every duty as never expiring. Useful for
 /// scenarios that need to plug into the deadliner API but don't actually want
 /// any eviction (e.g. DKG, which is one-shot and outside the slot timeline).

crates/p2p/src/utils.rs

@@ -129,7 +129,7 @@ pub(crate) fn default_swarm_config(cfg: libp2p::swarm::Config) -> libp2p::swarm:
 }
 
 /// Converts a secret key to a libp2p keypair.
-pub(crate) fn keypair_from_secret_key(key: k256::SecretKey) -> crate::p2p::Result<Keypair> {
+pub fn keypair_from_secret_key(key: k256::SecretKey) -> crate::p2p::Result<Keypair> {
     let mut der = key.to_sec1_der()?;
     let keypair = Keypair::secp256k1_from_der(&mut der)?;
     Ok(keypair)

crates/priority/Cargo.toml

@@ -0,0 +1,39 @@
+[package]
+name = "pluto-priority"
+version.workspace = true
+edition.workspace = true
+repository.workspace = true
+license.workspace = true
+publish.workspace = true
+
+[dependencies]
+async-trait.workspace = true
+chrono.workspace = true
+either.workspace = true
+futures.workspace = true
+k256.workspace = true
+libp2p.workspace = true
+pluto-consensus.workspace = true
+pluto-core.workspace = true
+pluto-k1util.workspace = true
+pluto-p2p.workspace = true
+pluto-ssz.workspace = true
+prost.workspace = true
+prost-types.workspace = true
+thiserror.workspace = true
+tokio.workspace = true
+tokio-util.workspace = true
+tracing.workspace = true
+
+[dev-dependencies]
+pluto-testutil.workspace = true
+rand.workspace = true
+test-case.workspace = true
+tokio = { workspace = true, features = ["test-util", "rt-multi-thread", "macros", "net", "time", "io-util"] }
+# Interop proof: drive the patched multistream-select negotiation over real TCP.
+multistream-select = "0.13"
+tokio-util = { workspace = true, features = ["compat"] }
+futures.workspace = true
+
+[lints]
+workspace = true