Abstract: Techniques are disclosed relating to filtering messages. A computer system may detect an occurrence of an event of a particular type. The computer system may determine whether to enqueue, in a message queue, a message that identifies a set of tasks to be performed in relation to the event. The determination may be based on a response received from a cache that stores a subset of filter rules of a filter rules table. Based on the response indicating a cache miss, the computer system may enqueue the message in the message queue. A process that processes the message may be operable to resolve the cache miss by 1) accessing a filter rule from the filter rules table that indicates whether messages for events of the particular type should be enqueued in the message queue and 2) updating the cache to store the filter rule.

Abstract: Managing organization disconnections from a shared resource of a communication platform is described. In a sharing approval repository of a communication platform, a shared resource can be associated with a host organization identifier and a non-host organization identifier. In an example, in response to receiving, from a user computing device associated with the host organization identifier or the non-host organization identifier, a resource disconnection request comprising a disconnecting organization identifier and a resource identifier associated with the shared resource, the sharing approval repository can be updated to add a disconnection indication for the resource identifier in association with the disconnecting organization identifier.

Abstract: Exemplary systems, methods, and apparatuses implement efficient storage and validation of data and metadata within a blockchain using Distributed Ledger Technology (DLT) in conjunction with a cloud based computing environment.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for implementing a polling command strategy in a database system. A subscriber transmits, to a database system, a subscription to an event. When the database system detects the event, a publisher transmits a message notifying the subscriber of the occurrence of the event. The subscriber processes the message received from the publisher. Responsive to processing the message, the subscriber waits a predefined period of time. After waiting the predefined period of time, the subscriber sends a polling message to the database system. Responsive to the polling message, the subscriber obtains data satisfying the subscription from the database system and the subscriber processes the data.

Abstract: A computer-implemented method for providing user interface functionalities is disclosed. The method includes providing a base design system layer including web browser components providing platform-agnostic user interface functionalities, an application programming interface (API) that extends the base design system layer into a second design system layer providing platform-specific user interface functionalities, inheriting and extending extensible APIs from the second design system layer, building a third design system layer using the extensible APIs, providing product-specific user interface functionalities using the third design system layer, inheriting and extending extensible APIs from the second design system layer, building a fourth design system layer using the extensible APIs, and providing presentation-specific user interface functionalities using the fourth design system layer.

Abstract: An agent for navigating a mobile automated system is disclosed herein. The navigation agent receives a navigation instruction and visual information for one or more observed images. The navigation agent is provided or equipped with self-awareness, which provides or supports the following abilities: identifying which direction to go or proceed by determining the part of the instruction that corresponds to the observed images (visual grounding), and identifying which part of the instruction has been completed or ongoing and which part is potentially needed for the next action selection (textual grounding). In some embodiments, the navigation agent applies regularization to ensures that the grounded instruction can correctly be used to estimate the progress made towards the navigation goal (progress monitoring).

Abstract: Methods, media, and systems for a changing a private channel in a channel-based communication system from an “invited-members” mode to a “whitelisted groups” mode. When in a whitelisted-groups mode, the channel administrator can whitelist one or more groups for channel membership. The whitelisted groups may be external groups managed by an identity provider. Based on the whitelisted groups, users cannot be added to the private channel without being a member of one of the whitelisted groups. Users are also automatically removed from the channel if they are no longer in one of the whitelisted groups for any reason.

Abstract: A header and a timestamp element for the header may be generated based on a request to process data for a page of a user interface. A tooltip with descriptive information for the timestamp element may be generated and displayed based on proximity of an interactive element to the timestamp element, and a page representation window may be displayed based on an interaction with the timestamp element. The page representation window includes a representation of the data field and its content that is indicative of how the data field and its content existed at a time of the request to process data. Moreover, an indicator of correspondence between the timestamp element and the page representation window may be displayed. Based on interaction with a settings indicator element, a header settings window for modifying settings for the header may be displayed with view options (e.g., all, custom, etc.) for data submissions.

Abstract: A recommendation service access a data matrix listing of products associated with product profiles, the data matrix having product entries that store sparse historical electronic activity. For a target product it is determined which other products should be used to boost the historical electronic activity of the target product based on a first subset of product profiles that share product characteristics with the target product. Similarity scores are computed between the product profile of the target product and the first subset of product profiles to identify a second subset of one or more products having a similarity score above a scoring threshold. The historical electronic activity of the target product is boosted using the historical electronic activity of the other products in the second subset. Association values are calculated between the target product and the other products in the second subset by based on the boosted activity.

Abstract: A system is provided for object localization in image data. The system includes an object localization framework comprising a plurality of object localization processes. The system is configured to receive an image comprising unannotated image data having at least one object in the image, access a first object localization process of the plurality of object localization processes, determine first bounding box information for the image using the first object localization process, wherein the first bounding box information comprises at least one first bounding box annotating at least a first portion of the at least one object in the image, and receive first feedback regarding the first bounding box information determined by the first object localization process. The system is further configured to persist the image with the first bounding box information or access a second object localization process based on the first feedback.

Abstract: A system can allow collaboration between two or more tenants in a multi-tenant system. Each tenant can share a common access to a processing space and a data storage device. Each tenant can be assigned to a virtual environment having a dedicated portion of the data storage device. The system can create a database record in a first dedicated portion assigned to the first tenant. The database record can be displayed on a user interface of the first tenant and include a collaboration tool component embedded within the database record. The database record can be transmitted to a database and transmitted from the database to a second dedicated portion of the data storage device. The second dedicated portion can be assigned to a second tenant of the multi-tenant system.

Abstract: Systems and methods for verifying a firewall for a cloud provider. The method includes receiving by a timelord module configured with access to a plurality of HTTP attacks that incorporate random tokens, an updated policy ok signal that was generated by an external element. The timelord module responds by (a) loading a first HTTP attack with a first expected response that is either forbidden or accepted, the first HTTP attack including the random tokens in a form of a header key value parameter; (b) sending the first HTTP attack to the firewall; (c) comparing a response from the firewall to the first HTTP attack with the first expected response; and (d) incrementing the first HTTP attack and repeating (a)-(c) until the plurality of HTTP attacks has been sent; and deleting the random tokens after the plurality of HTTP attacks have been sent.

Abstract: Methods and apparatus for mediating user access to services over a network are described. Access is provided by a service network host to a plurality of connectors providing access to a plurality of services over the network. The services are provided by entities independent from the service network host. The connectors including a first connector are configured to communicate with a first service using a first format to retrieve or modify data associated with the first service. The first connector is further configured to identify one or more methods or data fields of the first service. The service network host is further configured to provide, to a computer associated with a user over the network, one or more directions for using the first connector to display and/or modify data from the first service over the network.

Abstract: A method and system for message handling implemented by a first node in a distributed computing environment. The method including receiving a message including a connection identifier to identify a connection in the application layer to be utilized to send the message to a client application, parsing the connection identifier to determine a node identifier indicating a second node in the distributed computing environment that implements the connection, and forwarding the message to the second node that implements the connection by a message broker that utilizes a routing information registry to locate the second node using the node identifier, in response to the first node having a different node identifier than the node identifier of the message.

Abstract: Techniques for facilitating a digital signature occurrence associated with an object transmitted via a communication channel associated with a group-based communication platform. The object may be created by a user within either the group-based communication platform or a third-party application and transmitted to one or more other users associated with the communication channel via the group-based communication platform. The group-based communication platform may be configured to authenticate a digital signature and, based on a verification of the authenticity, associate the digital signature with the object. The group-based communication platform may cause the digital signature to be presented via an interface associated with the communication channel, such as proximate to or viewable in association with the object.

Abstract: Techniques for clustering a plurality of virtual space servers based on communication platform data are discussed herein. In some examples, a user may post a message to a virtual space of a communication platform. The communication platform may transmit the message to virtual space servers configured to manage the virtual space within which the message originated. In such examples, the communication platform may identify clusters of virtual space servers and determine within which cluster the corresponding virtual space server is located. Virtual space servers may be clustered based on attribute data associated with communication platform data. In some examples, the communication platform may send the message to the virtual space server which may send the message to subscribing gateway servers. Further, the gateways servers may send the message to the recipient client devices. The recipient client devices may display the message via a user interface of the communication platform.

Abstract: A cloud infrastructure is configured and deployed for managing services executed on a cloud platform. The cloud infrastructure includes a control datacenter configured to communicate with one or more service datacenters. The service datacenter deploys one or more application programming interfaces (API's) associated with a service. The service datacenter also deploys an administration agent. The control datacenter hosts an engine that receives requests from users to perform administration operations by invoking the administration API's. In this manner, the control datacenter functions as a centralized control mechanism that effectively distributes administration operation requests as they are received from users to service datacenters that can service the requests. The cloud infrastructure provides an auditable, compliant and secure management system for administering services for distributed systems running in the cloud.

Abstract: Database systems and methods are provided for automatically generating records at a database system in a configurable and customizable manner. One method involves using a key value associated with a configuration to identify related records at a database system associated with the key value and identify configuration metadata associated with the configuration at the database system. The method continues by providing a graphical user interface (GUI) display at a client device coupled to the database system over a network, where the GUI display includes a first region including a first subset of the records grouped into a first group based on the configuration metadata and a first common field value and a second region including a second subset of the records grouped into a second group based on the configuration metadata and a second common field value.

Abstract: A native user interface (UI) application of a mobile device includes a library of different components such as text, forms, tables, lists, maps, views and buttons. The components can also have associated actions in some cases. When a view of the UI is launched, the mobile device contacts a server or other data source to obtain metadata associated with the view. The metadata can be tailored to a user or organization of the mobile device. The metadata selects specific components and defines a layout for the components. The mobile device uses the metadata to retrieve the components and render them in the view. The views can be changed by changing the metadata without changing the native application.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for sharing and publishing files. In one aspect, the database system can maintain a user database, a file database and a library. The database system can receive a first request initiated by a first user to share a first file with one or more second users and, responsive to the first request, enable a second set of one or more permissions for each of the second users. The database system also can receive a second request initiated by the first user to publish the first file to the library and, responsive to the second request, publish the first file to the library. The database system additionally can restrict access to the published file based on permissions associated with the library.

Abstract: A computer-implemented method of providing targeted content to a user includes generating a query index from a data corpus, the query index including a plurality of market segment-based queries, wherein each market segment-based query of the plurality of queries is configured to provide targeted content on a browser user interface of a user determined to be within a corresponding market segment.

Abstract: Systems, devices, and techniques are disclosed for database inventory isolation. Demand levels for access to items may be monitored. The items may have associated inventory counts in a database. An item of the items for which to isolate the inventory count associated with the item may be determined based on the demand levels. The inventory count associated with the determined item may be isolated by moving the inventory count associated with the determined item from a first data block that stores the inventory count associated with the determined item and inventory counts associated with others of the items to a second data block that does not store any other inventory counts.

Abstract: Techniques are provided for thwarting attackers in a computing system which uses network management interfaces (NMIs). Before submitting NMI form data, a user computing device queries a server using a user id to obtain a signature which defines a shuffling map and random data such as a random key. The NMI form data is divided into portions and the random data is appended to each portion to provide respective data units, or buckets of data. The data units are then shuffled according to the shuffling map before being transmitted to a server, with the signature or an identifier of the signature included in a header. At the server, the data units are unshuffled to recover the data units, and the random data is removed to recover the form data portions. The instructions of the form data can then be executed.

Abstract: Embodiments herein relate to prediction, based on previous usage of a cloud-based computing resource by a user of one or more users of the cloud-based computing resource, future usage of the cloud-based computing resource. Based on the predicted future usage, embodiments relate to identifying that throttling of access to the cloud-based computing resource is to occur, and notifying the user of the throttling. Other embodiments may be described and/or claimed.

Abstract: Database systems and methods are provided for managing related records using a tiered hierarchical arrangement that supports asynchronous and independent events with respect to related records. A method involves automatically generating a child record having a field value based on configuration data associated with a parent record, automatically updating a second field value for a summarization field associated with the parent record in response to automatically generating the child record, and after automatically updating the second field value, identifying a group record that is a parent of the parent record based on a second field of the parent record, automatically updating a third value for a second summarization field associated with the group record based at least in part on the second field value, and providing a graphical representation of the group record including a graphical representation of the third value for the second summarization field.

Abstract: Activation policies for workflows are described. Some implementations support receiving a definition of a workflow, including data defining an input set for the workflow and data defining activities and a flow of the activities for the workflow. The data includes an activation policy for at least a particular activity of the activities. An estimated operational outcome for the workflow and/or each of the activities is determined and displayed. Then data identifying edits to the activation policy are received, and an updated version of the estimated operational outcome for the workflow and/or each of the activities is determined and displayed.

Abstract: A method and system to manage application package installation in a multi-tenant system is provided. The method includes accessing metadata of an application package for distribution in the multi-tenant system, selecting a component of the application package with a permission guard in the metadata, evaluating permission guard logic to determine wither a target tenant in the multi-tenant system can install the component, and compiling and installing the component in response to the permission guard logic indicating the tenant of the multi-tenant system has met conditions to utilize the component.

Abstract: System and methods are described for receiving a request from a client application to obtain data from a server; collecting a list of tasks to be performed by the server to process the request to obtain the data; performing tasks from the list of tasks by the server until an elapsed time to perform the list of tasks exceeds a first threshold and a size of a payload storing the data exceeds a second threshold; preparing the payload; and sending the payload to the client application.

Abstract: A request may be received to transfer from a first entity to a second entity a right related to a digital asset stored in an on-demand database system. The on-demand database system may provide computing services to a plurality of entities via the internet. A token associated with the digital asset may be identified. The token may being included in a smart contract recorded within a distributed trust ledger and may be owned by a first distributed trust ledger account. The smart contract may be executed within the distributed trust ledger to record a transfer of the token from the first distributed trust ledger account to a second distributed trust ledger account. The on-demand database system may be updated to include one or more database entries reflecting the recorded transfer.

Abstract: Techniques are disclosed relating to determining a similarity of components of a current webpage to different UI components for use in automatically generating an updated webpage. A computer system may receive information specifying a current webpage, including a particular current UI component and information specifying a plurality of different UI components for an updated webpage. The computer system may identify one or more characteristics of the particular current UI component. The computer system may determine, based on the identified one or more characteristics, a similarity of ones of the plurality of different UI components to the particular current UI component. The computer system may select, based on the determining, a particular different UI component from the plurality of different UI components for use, in the updated webpage, for the particular current UI component. Such techniques may advantageously improve user experience by automatically providing up-to-date user interfaces.

Abstract: A method and system of authenticating a user logon builds a user logon profile with a plurality of user logon features gathered during at least one successful attempted user logon, determines a logon feature novelty score for each feature, receives a user logon request for authentication and extracts current user logon features, retrieves corresponding logon feature novelty scores, determines a first distance function score for the corresponding logon feature novelty scores of the current user logon features, builds a failed logon attempt database, determines a failed logon feature novelty score, extracts the failed logon feature novelty scores corresponding to current user logon features, determines a second distance function score for the corresponding failed logon feature novelty scores of the current user logon features, and determining to one of allow or deny the user logon request based on at least one of the first distance function score and the second distance function score.

Abstract: Described herein are a system, apparatus, device, method, and/or computer program product embodiments and/or combinations and sub-combinations thereof for managing alerts and subscriptions in a cloud collaborative system. In one embodiment, a modification notice identifying a change to a field of a record is obtained, and the change is compared with a criterion specified in a subscription for a user. If the change satisfies the criterion, an alert is generated based on the modification notice. An alert GUI is transmitted to a user device to display alerts for the user. The user may access an expanded view of the record through the alert in the alert GUI. The user may also publish the alert to a chat session involving other users of the cloud collaborative system.

Abstract: The technology disclosed relates to a platform for ultra-fast, ad-hoc data exploration and faceted navigation on integrated, heterogeneous data sets. The disclosed method of declarative specification of visualization queries, display formats and bindings represents queries, widgets and bindings combined on a dashboard in real time, with flexible display options for analyzing data and conveying analysis results.

Abstract: Disclosed are some implementations associated with a flow builder application including a graphical representation of a flow. Performance data associated with the flow can be obtained. A set of metrics associated with the flow can be generated or updated based, at least in part, on the performance data. The set of metrics can include one or more metrics collected across one or more flow runs. At least a portion of the set of metrics can be provided for presentation within the flow builder application in relation to one or more elements of the flow. The portion of the set of metrics can indicate a performance condition including a duration of the one or more elements of the flow. A request to edit the flow based on the performance condition can be processed, and the graphical representation of the flow can be modified.

Abstract: Disclosed herein are system, method, and computer program product embodiments for incorporating metadata extensions of various metadata formats into a metadata mapping or graphing function. Extensions for various formats are separately defined with a predetermined syntax. When a metadata object is received, it is scanned to determine whether any extensions are present. When such an extension is detected, the parser is loaded with an extension parsing plugin corresponding to the format of the metadata object. That plugin retrieves extension definitions from a repository in order to accurately parse the extension information of the metadata object. The metadata object and its extensions can then be parsed and graphed accordingly.

Abstract: Systems, apparatuses, methods, and computer program products are provided for managing geographically distributed data storage in a group-based communication system and for servicing deletion requests related thereto. In some embodiments, an apparatus physically located in a first geographic area defined by a first geographic boundary is provided. In embodiments, upon determining that an entity identifier associated with a message is associated with a geographic data storage policy, the apparatus is configured to transmit a geographic data residency message package comprising message data of the message to a geographic data residency server physically located within a second geographic area defined by a second geographic boundary. The second geographic area is associated with the geographic data storage policy. In some embodiments, the apparatus is configured to update the message data of the message with residency token data received from the geographic data residency server.

Abstract: Digital data processing systems of the type in which a server digital data device (“server”) is coupled to a client digital data device (“client”) over a network, e.g., the Internet, include web server software executing within an application layer on the server that responds to a request from the client by (i) validating a key received from the client with that request, (ii) generating a result code indicative of a success of that validation, (iii) initiating processing of the request, including invoking server resource software executing outside the application layer. The server resource software, which checks the result code upon invocation and before performing a protected operation required for processing the request, responds to a result code indicating that the result did not validate by exiting before executing the protected operation.

Abstract: The present disclosure provides systems and methods for controllable protein generation. According to some embodiments, the systems and methods leverage neural network models and techniques that have been developed for other fields, in particular, natural language processing (NLP). In some embodiments, the systems and methods use or employ models implemented with transformer architectures developed for language modeling and apply the same to generative modeling for protein engineering.

Abstract: A method for managing features for a search system using declarative metadata. The method includes receiving search metadata including declarative statements identifying at least one search feature to be enabled across a plurality of components of the search system, performing functional verification of the at least one search feature, testing the at least one search feature, and enabling the at least one search feature in at least one of the plurality of components of the search system in response to positive functional verification and positive testing.

Abstract: Techniques are disclosed relating to archive operations for database systems. In some embodiments, a database system initiates one or more archive operations to archive one or more data extents for a database maintained by the database system. The system may halt archive activity for the database, in response to determining that archive operations for a threshold amount of data extents are initiated but not completed. The system may cancel at least one of the one or more archive operations. The system may determine to resume activity for the database based on determining that a threshold timer interval has elapsed and determining that a threshold amount of storage space is available for the database system. Disclosed embodiments may improve database availability, relative to traditional techniques.

Abstract: A method that includes receiving a request to generate a data package for deployment in a target database environment. The request may indicate a first set of data objects from a first configuration associated with a source database environment. The method may further include determining a second set of data objects that are related to the first set of data objects based on the request and on a mapping between the first set of data objects and the second set of data objects. The method may further include transmitting an indication of the second set of data objects to a user at a user interface. The method may further include receiving a selection of one or more data objects from the second set of data objects for inclusion in the data package. The method may further include generating the data package based on the selection.

Abstract: Direct access to embedded links via an authenticated application is described. In an example, a first user interface can be presented via a web browser of a computing device, wherein the first user interface includes an actuation mechanism corresponding to an object associated with a platform, and wherein the computing device is associated with an application associated with the platform. In at least one example, an indication of an interaction with the actuation mechanism can be received and based at least in part on (i) receiving the indication of the interaction with the actuation mechanism and (ii) a determination that the application is associated with an active authentication session, the object can be presented via a second user interface presented via the application. As such, direct access to the object can be provided via the authenticated application.

Abstract: Techniques are disclosed relating to managing data objects. A computer system may access a first application comprising a set of functions and may execute a second application to facilitate execution of the first application. The first application may be written in a different programming language than the second application. The second application may manage, on behalf of the first application, memory resources of data objects that are defined within ones of the set of functions of the first application. The second application may establish, for the data objects, ownership information that indicates which ones of the functions are utilizing the data objects. The ownership information may be usable to determine, upon completion of a function of the set of functions, whether a given one of the data objects can be deallocated based on whether the given data object is being utilized by another function.

Abstract: An integration application comprising a plurality of components may be provided. The components may provide connections between systems. The integration application may be configured to allow the systems to exchange data. It may be determined that a new version of a first one of the components is a candidate for release. Prior to release of the new version of the first component, the integration application may be tested using the new version of the first component and an existing version of the first component. An instance of the integration application may be automatically caused to be upgraded to include the new version of the first component.

Abstract: System and methods are described for generating recommendations from dynamically-mapped data. In one implementation, a database system receives a first request to generate a recommendation objection and a second request to retrieve additional data to include in the recommendation object. The database system retrieves the recommendation data from a first database table. The database system identifies the additional data in a second database table that is stored separately from the first database table. The database system generates the recommendation object to include the recommendation data from the first database, and maps the additional data to one or more fields of the recommendation object.

Abstract: A system is programmed and operated to perform a method of indicating health, status, or condition of a monitored target. In certain implementations, the method involves: obtaining at least one metric associated with the monitored target; determining a level of audio degradation to be applied to a source digital media file that conveys default audio content, wherein the level of audio degradation is determined as a function of the obtained at least one metric; modifying the source digital media file in accordance with the determined level of audio degradation, resulting in modified audio data; and controlling playback of the modified audio data to serve as an audible indicator of the health, status, or condition of the monitored target.

Abstract: Embodiments described herein embodiments described herein provide Contrastive Attention-Supervised Tuning (CAST), a training method to fix the visual grounding ability of contrastive SSL methods based on a data augmentation strategy using unsupervised saliency maps. In addition to the contrastive loss that encourages the model to pick the crop that comes from the corresponding image, CAST provides an explicit grounding supervision through a Grad-CAM based attention loss that enforces models to look at the specified object of interest that is common across different crops when making this decision. A new geometric transform is introduced for randomly cropping different views from an input image based on certain constraints derived from a saliency map.