Abstract: Keyed Event Queue (KEQ) is a multi-region, dynamically-scaled message broker for managing a large number of independent strictly-ordered message queues. In this regard, a first request having a first plurality of associated events may be enqueued in a first queue, while a second request having a second plurality of associate events is enqueued in the second queue. The first and second queues are processed independently, such that any issues or failures that may arise with respect to the first plurality of events do not block the second plurality of events from being executed.

Abstract: Keyed Event Queue (KEQ) is a multi-region, dynamically-scaled message broker for managing a large number of independent strictly-ordered message queues. In this regard, a first request having a first plurality of associated events may be enqueued in a first queue, while a second request having a second plurality of associate events is enqueued in the second queue. The first and second queues are processed independently, such that any issues or failures that may arise with respect to the first plurality of events do not block the second plurality of events from being executed.

Abstract: Limiting access to native device capabilities. A method includes, at a container application installed at the computing device, the container application configured to execute hosted script based applications, identifying a hosted application to execute. The method further includes, at the container application, obtaining information identifying a limited set of capabilities from among the native device capabilities indicating which of the native device capabilities the hosted application has been granted access to. The method further includes, at the container application, executing the hosted application and enforcing limits on the hosted application such that the hosted application is only able to access the native device capabilities identified in the limited set of capabilities.

Abstract: Limiting access to native device capabilities. A method includes, at a container application installed at the computing device, the container application configured to execute hosted script based applications, identifying a hosted application to execute. The method further includes, at the container application, obtaining information identifying a limited set of capabilities from among the native device capabilities indicating which of the native device capabilities the hosted application has been granted access to. The method further includes, at the container application, executing the hosted application and enforcing limits on the hosted application such that the hosted application is only able to access the native device capabilities identified in the limited set of capabilities.

Abstract: Limiting access to native device capabilities. A method includes, at a container application installed at the computing device, the container application configured to execute hosted script based applications, identifying a hosted application to execute. The method further includes, at the container application, obtaining information identifying a limited set of capabilities from among the native device capabilities indicating which of the native device capabilities the hosted application has been granted access to. The method further includes, at the container application, executing the hosted application and enforcing limits on the hosted application such that the hosted application is only able to access the native device capabilities identified in the limited set of capabilities.

Abstract: Limiting access to native device capabilities. A method includes, at a container application installed at the computing device, the container application configured to execute hosted script based applications, identifying a hosted application to execute. The method further includes, at the container application, obtaining information identifying a limited set of capabilities from among the native device capabilities indicating which of the native device capabilities the hosted application has been granted access to. The method further includes, at the container application, executing the hosted application and enforcing limits on the hosted application such that the hosted application is only able to access the native device capabilities identified in the limited set of capabilities.

Abstract: Hosting one or more web applications and providing local device capabilities to the one or more web applications. One or more second applications are hosted within a first application. A call from the one or more second applications is performed to a device abstraction layer of the first application. Such a performed call comprises a request to access a capability of a local device. Upon receiving the call, the device abstraction layer verifies that the performed call is permitted. In response to the first application verifying that the performed call is permitted, the one or more second applications is permitted to access the capability of the local device that was requested.