Put Kiosk App parameters into device settings.

chrome/browser/policy/proto/chromeos/chrome_device_policy.proto

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 syntax = "proto2";
 
 option optimize_for = LITE_RUNTIME;
 
 package enterprise_management;
 
@@ skipping 206 matching lines @@
   // that are equivalent to one of the timezones in "timezone_settings.cc" are
   // valid. In case of an invalid value, the setting is still activated with a
   // fallback timezone (currently "GMT"). In case of an empty string or if no
   // value is provided, the timezone device setting is inactive. In that case,
   // the currently active timezone will remain in use however users can change
   // the timezone and the change is persistent. Thus a change by one user
   // affects the login-screen and all other users.
   optional string timezone = 1;
 }
 
+// Parameters for Kiosk App device-local accounts.
+message KioskAppInfoProto {
+  // Indicates the Kiosk App for the corresponding device-local account. The
+  // string value should be a valid 32-character Chrome App identifier and
+  // specifies the Kiosk App to download and run.
+  optional string app_id = 1;
+
+  // Optional extension update URL to download the Kiosk App package from. If
+  // not specified, the app will be downloaded from the standard Chrome Web
+  // Store update URL.
+  optional string update_url = 2;
+}
+
 // Describes a single device-local account.
 message DeviceLocalAccountInfoProto {
-  // Identifier for the device-local account. Account identifiers loosely follow
-  // the conventions for email addresses as specified by RFC 5322, e.g. local
-  // (user name) and domain parts, separated by the '@' character.
-  // Policy-configured device-local accounts are on the same domain that the
-  // device is enrolled to. In contrast to RFC 5322 (which is more restrictive),
-  // the local part may contain any characters other than '@'.
+  // Deprecated: Account identifier for a public session device-local account.
+  // Old code didn't have the |type| field, so it can't handle new types of
+  // device-local accounts gracefully (i.e. ignoring unsupported types). New
+  // code should instead set type to ACCOUNT_TYPE_PUBLIC_SESSION and write the
+  // identifier to the |account_id| field below. If the |type| field is present,
+  // |deprecated_public_session_id| will be ignored.
+  // TODO(mnissler): Rename this field to indicate it's deprecated.
   optional string id = 1;
+
+  // Identifier for the device-local account. This is an opaque identifier that
+  // is used to distinguish different device-local accounts configured. All
+  // configured accounts on a device must have unique identifiers.
+  optional string account_id = 2;
+
+  // Indicates the type of device-local account.
+  enum AccountType {
+    // A login-less, policy-configured browsing session.
+    ACCOUNT_TYPE_PUBLIC_SESSION = 0;
+    // An account that serves as a container for a single full-screen app.
+    ACCOUNT_TYPE_KIOSK_APP = 1;
+  };
+
+  // The account type.
+  optional AccountType type = 3;
+
+  // Kiosk App parameters, relevant if |type| is ACCOUNT_TYPE_KIOSK_APP.
+  optional KioskAppInfoProto kiosk_app = 4;
 }
 
 message DeviceLocalAccountsProto {
   // The list of device-local accounts (i.e. accounts without an associated
   // cloud-backed profile) that are available on the device.
   repeated DeviceLocalAccountInfoProto account = 1;
 
   // The identifier of the device-local account to which the device
   // should be logged in automatically.  Should be equal to one of the
   // ids in DeviceLocalAccountInfoProto.
   optional string auto_login_id = 2;
 
   // The amount of time, in milliseconds, that should elapse at the signin
   // screen without user interaction before automatically logging in.
   optional int64 auto_login_delay = 3;
+
+  // Whether the keyboard shortcut to prevent zero-delay auto-login should be
+  // enabled or not. If this keyboard shortcut is engaged, the auto-login will
+  // be delayed by 3 minutes so administrators can log in or make configuration
+  // changes.
+  optional bool enable_auto_login_bailout = 4 [default = true];
 }
 
 message AllowRedeemChromeOsRegistrationOffersProto {
   // Chrome OS Registration service provides way for chromeos device users
   // to redeem electronic offers provided by service provider.
   // This value determines if users are allowed to redeem offers through
   // Chrome OS Registration service.
   optional bool allow_redeem_offers = 1 [default = true];
 }
 
@@ skipping 50 matching lines @@
   optional StartUpUrlsProto start_up_urls = 18;
   optional PinnedAppsProto pinned_apps = 19;
   optional SystemTimezoneProto system_timezone = 20;
   optional DeviceLocalAccountsProto device_local_accounts = 21;
   optional AllowRedeemChromeOsRegistrationOffersProto allow_redeem_offers = 22;
   optional StartUpFlagsProto start_up_flags = 23;
   optional UptimeLimitProto uptime_limit = 24;
   optional VariationsParameterProto variations_parameter = 25;
   optional AttestationSettingsProto attestation_settings = 26;
 }