Builders & Runtimes
Cloud Infrastructure
VPS, sandbox, registry, volume, API key, heartbeat, and platform provider management.
Cloud Infrastructure
Urmate includes infrastructure management for running generated projects and builder runtimes. The infra layer is designed around managed VPS providers, sandbox connections, volumes, registries, API keys, snapshots, and heartbeat checks.
Routes And APIs
| Area | API | What it manages |
|---|---|---|
| Platform options | /api/infra/platform-vps-options | Available VPS/provider options shown to admins or runtime selectors. |
| Sandbox connections | /api/infra/sandbox-connections | External sandbox credentials and runtime connection records. |
| Sandboxes | /api/infra/sandboxes | Runtime sandboxes for generated projects. |
| VPS | /api/infra/vps, /api/infra/vps/[id] | Registered VPS machines, state, ownership, and configuration. |
| Registration | /api/infra/vps/register | Registers a server with Urmate. |
| Volumes | /api/infra/vps/volumes | Persistent volumes available for runtimes. |
| Registries | /api/infra/vps/registries | Container registries or image sources. |
| API keys | /api/infra/vps/api-keys | Secrets used by agents/runtimes to authenticate. |
| Snapshots | /api/infra/vps/snapshots | Runtime images or saved workspace snapshots. |
| Heartbeat | /api/infra/vps/heartbeat | Server liveness and runtime health. |
| Install command | /api/infra/vps/install-command | Script generator for attaching a VPS. |
Runtime Health
Infrastructure is considered healthy when:
- the VPS heartbeat is recent;
- workspace storage is reachable;
- runtime ports are mapped correctly;
- secrets are present but never exposed to users;
- snapshots can be created and restored;
- project previews respond within an acceptable time.
Admin Checklist
- Add provider credentials in the admin infrastructure settings.
- Register at least one VPS or sandbox provider.
- Verify heartbeat and capacity.
- Run a builder project through preview and terminal commands.
- Test snapshot restore before allowing production users to rely on it.
Security Rules
Runtime credentials must be stored server-side only. Users can start, stop, preview, and publish projects through Urmate APIs, but they should not receive raw infrastructure API keys, registry secrets, or internal host credentials.