by hieuphung97
Multi-harness control protocol that turns requests into approved design contracts, orchestrating isolated worker sessions for sequential implementation and independent code reviews under Orca supervision for Claude Code, Codex, Cursor, Antigravity, and other AI coding agents.
# Add to your Claude Code skills
git clone https://github.com/hieuphung97/delyLast scanned: 9/7/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-09-07T08:57:47.803Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how dely compares with popular alternatives.
dely is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by hieuphung97. Multi-harness control protocol that turns requests into approved design contracts, orchestrating isolated worker sessions for sequential implementation and independent code reviews under Orca supervision for Claude Code, Codex, Cursor, Antigravity, and other AI coding agents. It has 61 GitHub stars.
Yes. dely passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/hieuphung97/dely" and add it to your Claude Code skills directory (see the Installation section above).
dely is primarily written in JavaScript. It is open-source under hieuphung97 on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh dely against similar tools.
No comments yet. Be the first to share your thoughts!
30 days in the Featured rail · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
Ask for a change; Dely takes it through design approval, implementation, independent review, and a pull request you merge.
https://github.com/user-attachments/assets/83ec539a-6551-4807-8517-0c73e5d171d7
Install Orca, then Dely.
orca open
orca status --json
orca orchestration run-list --json
dely:delivery stops if this preflight fails. On Linux the binary is
orca-ide (see the install docs).
Optional agent skills orca-cli and orchestration:
https://www.onorca.dev/docs/cli/skills
Then:
dely in the harness (Install).dely:setup (optional).In the project, invoke dely:setup.
It asks Quick (this harness for both phases) or Customize (pick harness,
model, and effort for implement and review), then writes one managed
block into AGENTS.md. Skip it and dely:delivery uses the current
harness and that harness's defaults.
The plugin is dely, from the dely marketplace at
https://github.com/hieuphung97/dely.git. The skill name is delivery;
invoke it as dely:delivery. The runtime needs Node 18 or newer on PATH.
Three harnesses are supported today: Claude Code, Codex CLI, and Cursor
Agent CLI. That list is not closed. harnesses.json at the repository
root carries four more as deferred: GitHub Copilot CLI, Antigravity
CLI, Grok Build, and Kiro CLI.
claude plugin marketplace add https://github.com/hieuphung97/dely.git
claude plugin install dely@dely
claude plugin list # verify it is installed
claude plugin update dely # update (restart required to apply)
claude plugin uninstall dely # uninstall
A Claude Code Control was observed running scripts/dely straight out of
the marketplace source directory it was added from, not from
~/.claude/plugins/cache. A hash check that covers only the cache proves
nothing; it must cover every location that can serve the skill.
codex plugin marketplace add https://github.com/hieuphung97/dely.git
codex plugin add dely@dely
codex plugin list # verify it is installed
codex plugin marketplace upgrade # update: see below
codex plugin remove dely@dely # uninstall
codex plugin marketplace add --ref <ref> pins the marketplace to a tag
such as v0.17.0 or an exact full commit SHA. There is no
codex plugin update: use codex plugin marketplace upgrade. Do not use
codex plugin install.
codex plugin marketplace add was observed keeping a stale marketplace of
the same name, installing the previous version, and reporting success. A
harness reporting a successful install is not evidence. To refresh, remove
the marketplace and the plugin, then add and install again.
cursor-agent plugin marketplace add https://github.com/hieuphung97/dely.git
# verify it is installed
cursor-agent plugin marketplace list
# re-index, no fetch
cursor-agent plugin marketplace update dely
# refresh: remove and re-add (remove drops the marketplace, not the plugin)
cursor-agent plugin marketplace remove dely
cursor-agent plugin marketplace add https://github.com/hieuphung97/dely.git
Cursor Agent CLI cannot install from a local snapshot:
cursor-agent plugin marketplace add takes a git URL only, and installing
what it indexes needs the interactive /plugin panel. It reads the Claude
plugin cache; a Cursor copy with a different hash wins over that cache.
The snapshot is addressed by commit, so marketplace update only re-indexes
and does not fetch. Remove and re-add the marketplace to pick up new commits,
then choose Uninstall from the Installed tab and install again from the
Marketplace tab of the /plugin panel.
Add the marketplace first with cursor-agent plugin marketplace add, then in
a Cursor Agent session type /plugin and press Enter. Open the Marketplace
tab, type dely in the search box, press Enter on dely (dely), and choose
Install for you (user scope) (or Install for all collaborators on this repository (project scope)).
To uninstall, open the Installed tab, select dely, and choose
Uninstall. cursor-agent plugin marketplace remove removes the marketplace
entry and leaves the plugin installed.
Type /dely to filter the palette to Dely's /delivery and /setup.
These are the versions this README's commands were last locally checked against — observations, not a promised minimum:
| Tool | Checked version |
|---|---|
| Claude Code | 2.1.274 |
| Codex CLI | 0.154.0 |
| Cursor Agent CLI | 2026.09.15-d2fe57e |
| Orca | 1.4.205 |
Ask for a change. Approve the design when asked. Dely implements, a different session reviews, then opens a PR. You merge. A Spike investigates only — no delivery run.
Control loads orca skills get orchestration and follows that supervised
loop. dely preflight runs in setup, and again after NO_ACK. After
DISPATCHED, Control waits by the harness Control wake: background
runs dely wait; waker runs dely wait-bg as its last command and
ends the turn. It never acts on an Orca nudge. SETTLED hands over the
batch; ATTENTION with a nextAction other than none runs the argv Orca
printed, and ATTENTION with nextAction: none and requiresAction means
the plane lost sight of the worker — check it, stop, abandon and release it,
then dispatch the same prompt file once more; STALLED is read then waited
or recovered; NO_ACK and FAILED retry once; DEADLINE is a checkpoint
(worker-list and last output; wait again if progressing; a second
DEADLINE with no progress goes to the human); ERROR goes to the
human.
The workflow contract is skills/delivery/SKILL.md.
~/.dely/log.jsonl is machine-local JSON Lines, one object per line. It
is off unless ~/.dely/ exists; mkdir ~/.dely turns it on, and Dely
never creates that directory. A missing directory means nothing is
written and nothing is created.
The file may contain sensitive content. It quotes worker screen output in full, so it can hold repository contents, error text, and whatever a harness printed.
dely:delivery stops immediately. Orca is not running or a required
capability is absent, including orchestration. Run the Quickstart
preflight, then retry.~/.agents/skills, and a copy left there — or a symlink to it from
~/.claude/skills — wins over the plugin. Claude Code was observed
running scripts/dely from the marketplace source directory, not from
~/.claude/plugins/cache. Cursor Agent CLI reads the Claude plugin
cache, and a Cursor copy with a different hash wins over it. Compare
skills/delivery/SKILL.md by hash at every location that can serve the
skill, including marketplace source directories, then update or remove
the shadowing install. A harness reporting a successful install is not
evidence of which copy ran; the hash is.codex plugin marketplace upgrade.
Confirm the remote has new commits. A delivery already running keeps the
plugin version from its start; open a new session after the upgrade.AGENTS.md pins don't seem to apply in Claude Code. Put
@AGENTS.md in CLAUDE.md; Claude Code does not read AGENTS.md
directly.CONTRIBUTING.md — issue-first workflow, fork/branch/pull
request flow, and review expectations. External contributors do not need
Dely or Orca.CODE_OF_CONDUCT.md — Contributor Covenant 2.1.SECURITY.md — how to report a vulnerability privately.docs/decisions.md — settled, open, and rejected
design decisions, with rationale.