Pilot routes each playbook step to an executor based on the step’s executor field or its action prefix. The executor registry resolves the target executor in this order:
executor field on the steptf_ -> terraform, git_ -> git, etc.)browserThe browser executor drives a Playwright browser instance. It handles all 14 built-in actions: navigate, click, fill, select, set_toggle, wait_for, assert, capture, capture_secret, ai_decide, scroll, hover, press, upload.
When ai_fallback: true, a failing selector triggers the AI healing engine, which compares the stored DOM snapshot to the current page and proposes a replacement selector.
No explicit configuration required. The browser executor starts automatically.
\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n| Env var | Purpose | Default |
|---|---|---|
CUITTY_AI_KEY | AI model key for selector healing | (local model) |
Wraps the Architect API for infrastructure provisioning. Steps are prefixed with tf_.
| Action | Description | Key fields |
|---|---|---|
tf_init | Create or ensure a target | target_id, provider, kind |
tf_validate | Validate target config | target_id, resource_types |
tf_plan | Generate a runtime plan | target_id, resource_types |
tf_apply | Apply runtime state | target_id, resource_types |
tf_destroy | Destroy runtime resources | target_id, resource_types |
tf_output | Read a specific output value | target_id, output_name |
tf_import | Import an existing resource | target_id, resource_type, resource_id |
tf_state | Read full runtime state | target_id |
All Terraform steps accept an optional capture_as field and allow_remote boolean.
| Env var | Purpose | Default |
|---|---|---|
PILOT_ARCHITECT_URL | Architect API base URL | http://localhost:4470 |
PILOT_EXECUTOR_TERRAFORM | Enable/disable | true |
Wraps the Code API for repository and pull request operations. Steps are prefixed with git_.
| Action | Description | Key fields |
|---|---|---|
git_clone | Create a repository | name, visibility, auto_init |
git_branch | Create a branch | owner, repo, name, sha |
git_commit | Create a commit | owner, repo, message |
git_push | Push a branch | owner, repo, branch |
git_pr_create | Open a pull request | owner, repo, title, head, base |
git_pr_merge | Merge a pull request | owner, repo, number, strategy |
git_tag | Create a tag | owner, repo, tag_name, name |
git_release | Create a release | owner, repo, tag_name, name, body |
Merge strategies: merge, squash, rebase, fast_forward.
| Env var | Purpose | Default |
|---|---|---|
PILOT_CODE_URL | Code API base URL | http://localhost:4351 |
PILOT_EXECUTOR_GIT | Enable/disable | true |
Wraps the Persist API for storage provisioning and data management. Steps are prefixed with persist_.
| Action | Description | Key fields |
|---|---|---|
persist_provision | Provision storage stores | profile, stores |
persist_migrate | Run database migrations | dry_run |
persist_sync | Sync data between stores | |
persist_backup | Create a backup | |
persist_restore | Restore from backup | archive_path |
persist_proxy_start | Start the proxy | |
persist_proxy_stop | Stop the proxy |
| Env var | Purpose | Default |
|---|---|---|
PILOT_PERSIST_URL | Persist API base URL | http://localhost:4290 |
PILOT_EXECUTOR_PERSIST | Enable/disable | true |
Executes shell commands with an allowlist for security. Steps are prefixed with shell_.
| Action | Description | Key fields |
|---|---|---|
shell_exec | Run a single command | command, args, env |
shell_script | Run a multi-line script | command |
shell_assert | Run a command and assert output | command, assert |
Shell assertions support: exit_code, stdout_contains, stderr_empty.
| Env var | Purpose | Default |
|---|---|---|
PILOT_EXECUTOR_SHELL | Enable/disable | false (disabled by default) |
The shell executor uses an allowedCommands allowlist in executor_config:
executor_config:\n shell:\n allowedCommands: [\"curl\", \"dig\", \"nslookup\", \"jq\"]\n timeout: 30000Makes API requests, polls endpoints, and asserts response contents. Steps are prefixed with http_.
| Action | Description | Key fields |
|---|---|---|
http_request | Send an HTTP request | url, method, headers, body |
http_assert | Request + assert response | url, assert |
http_poll | Poll until condition met | url, until, interval, max_attempts |
HTTP assertions support: status, body_contains, header.
| Env var | Purpose | Default |
|---|---|---|
PILOT_EXECUTOR_HTTP | Enable/disable | true |
The HTTP executor supports an allowedHosts restriction in executor_config:
executor_config:\n http:\n allowedHosts: [\"api.cloudflare.com\", \"api.github.com\"]\n timeout: 30000The composite executor orchestrates other steps. It supports four meta-actions:
\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n| Action | Description | Key fields |
|---|---|---|
run_playbook | Execute another playbook inline | playbook, inputs |
parallel | Run step branches concurrently | branches |
conditional | Execute steps if condition is true | condition, then |
loop | Repeat steps until condition or max iterations | until, max_iterations, steps |
Conditions use the syntax captures.key == value, captures.key != value, or captures.key (truthy check).
steps:\n - id: check-provider\n action: conditional\n executor: composite\n condition: \"captures.provider == cloudflare\"\n then:\n - id: setup-dns\n action: run_playbook\n playbook: cloudflare.dns.add-a-record\n inputs:\n zone: \"{{zone}}\"\n record_name: \"{{subdomain}}\"\n ip_address: \"{{ip}}\"\n - id: deploy-both\n action: parallel\n executor: composite\n branches:\n - steps:\n - id: provision-storage\n action: persist_provision\n profile: production\n - steps:\n - id: apply-infra\n action: tf_apply\n target_id: \"{{target}}\"\n resource_types: [\"aws_s3_bucket\"]