ScriptVault/managed-storage-schema.json at main · SysAdminDoc/ScriptVault · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
{
  "type": "object",
  "properties": {
    "managedScripts": {
      "title": "Managed userscripts",
      "description": "Userscripts provisioned by enterprise policy. Each item must provide a remote userscript URL or inline userscript source plus an integrity pin or trusted Ed25519 signature.",
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "url": {
            "title": "Userscript URL",
            "description": "HTTPS or HTTP userscript URL fetched through ScriptVault's normal install guards.",
            "type": "string"
          },
          "code": {
            "title": "Inline userscript source",
            "description": "Complete userscript source including a ==UserScript== metadata block.",
            "type": "string"
          },
          "integrity": {
            "title": "Userscript integrity pin",
            "description": "Required unless signature is supplied. Use sha256-<base64> SRI or sha256:<64-hex>.",
            "type": "string"
          },
          "signature": {
            "title": "Trusted userscript signature",
            "description": "Optional Ed25519 signature object. The public key must already be trusted in ScriptVault.",
            "type": "object",
            "properties": {
              "algorithm": {
                "type": "string"
              },
              "signature": {
                "type": "string"
              },
              "publicKey": {
                "type": "string"
              },
              "timestamp": {
                "type": "integer"
              }
            }
          }
        }
      }
    },
    "managedScriptsCleanup": {
      "title": "Prune removed managed scripts",
      "description": "When true, ScriptVault removes locally stored managed scripts that are no longer present in managedScripts.",
      "type": "boolean"
    }
  }
}