{"record":{"id":"6bdc55e7cd16e458","repo":"BigPizzaV3/CodexPlusPlus","slug":"manifest-keyid-createdat","errorCode":null,"errorMessage":"manifest keyId 或 createdAt 无效","messagePattern":"manifest keyId 或 createdAt 无效","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"crates/codex-plus-core/src/dream_skin_package.rs","lineNumber":974,"sourceCode":"            .bytes()\n            .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'_' | b'-'))\n        || manifest.license.is_empty()\n        || manifest.license.len() > 64\n        || !manifest.license.bytes().enumerate().all(|(index, byte)| {\n            byte.is_ascii_alphanumeric()\n                || (index > 0 && matches!(byte, b' ' | b'.' | b'+' | b'(' | b')' | b'-'))\n        })\n        || !safe_manifest_text(&manifest.provenance.summary, 1, 500, true)\n    {\n        bail!(\"manifest 发布者、许可证或来源说明为空\");\n    }\n    if manifest\n        .key_id\n        .as_deref()\n        .is_some_and(|key| !valid_key_id(key))\n        || !valid_rfc3339(&manifest.created_at)\n    {\n        bail!(\"manifest keyId 或 createdAt 无效\");\n    }\n    if manifest.files.len() < 2 || manifest.files.len() > 8 {\n        bail!(\"manifest.files 数量无效\");\n    }\n    Ok(())\n}\n\nfn validate_theme(\n    theme: &Value,\n    manifest: &DreamSkinPackageManifest,\n    image_name: &str,\n) -> anyhow::Result<()> {\n    let object = theme.as_object().context(\"theme.json 必须是对象\")?;\n    const REQUIRED: &[&str] = &[\"schemaVersion\", \"id\", \"name\", \"image\"];\n    const OPTIONAL: &[&str] = &[\n        \"brandSubtitle\",\n        \"tagline\",\n        \"projectPrefix\",","sourceCodeStart":956,"sourceCodeEnd":992,"githubUrl":"https://github.com/BigPizzaV3/CodexPlusPlus/blob/f2074595a281bc057525c748175c8eb9805b0673/crates/codex-plus-core/src/dream_skin_package.rs#L956-L992","documentation":"Thrown by validate_manifest when the optional manifest.key_id is present but fails valid_key_id, or created_at fails the RFC 3339 check. This is a provenance guard on signing metadata: the offending inputs are manifest.keyId and/or manifest.createdAt; a bad value means the package's authorship/issuance metadata cannot be trusted or sorted.","triggerScenarios":"Thrown at crates/codex-plus-core/src/dream_skin_package.rs:974 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["修正 keyId 格式或留空","把 createdAt 改为 RFC3339 格式，如 2026-01-01T00:00:00Z"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"f2074595a281bc057525c748175c8eb9805b0673","analyzedAt":"2026-08-23T12:52:24.489Z","contentChangedAt":"2026-08-23T12:52:24.489Z","schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}