Show HN: Onetone – A full-stack framework with custom C interpreter

Onetone Framework

Onetone Framework is a modern full-stack PHP platform that combines advanced backend routing, controller autowiring, an ActiveRecord ORM, CLI tooling, native FFI integrations, AI model runtime support, and a complete frontend toolset. It aims to provide a single coherent toolkit for server, native, and research workflows while remaining extensible and modular.

Caution

PHP Transformers are extremely slow. If you want to use a Transformer, wait until a C FFI implementation is available.

Epoch 1/200 | Loss: 3.5834 | Time: 449.59s

Project Status
Overview
Key Features
Requirements
Security Summary
Contributing
[Testing and CI]…

Onetone Framework

Caution

PHP Transformers are extremely slow. If you want to use a Transformer, wait until a C FFI implementation is available.

Epoch 1/200 | Loss: 3.5834 | Time: 449.59s

Project Status
Overview
Key Features
Requirements
Security Summary
Contributing
Testing and CI
Documentation
Contact and reporting

🚀 Quick Start

Demo screenshot

📦 Project Status

Status: Alpha — under active development and not production-ready. Important: Do not use this repository as a production dependency. See Security section for legal and operational constraints.

⭐ Overview

Onetone provides:

A PHP core with dependency injection, autowiring, routing, and an ActiveRecord-style ORM.

Native FFI integrations for OnnxRuntime, CTranslate2, Windows WinAPI, and other C libraries.

AI integration points for LLMs, OnnxRuntime, and CTranslate2.

Frontend build pipelines supporting Webpack, Vite, and ESBuild, with optional CoreJS inclusion and WebGL/Three.js helpers.

Cross-platform interoperability utilities targeting C, C#, C++, Elixir, Flutter, Go, Java, Node.js, Objective-C, Python, R, Ruby, Rust, Swift, Unity, and legacy runtimes.

Tools for reverse engineering and security research integration such as Frida and Ghidra extensions for controlled, researcher-only workflows.

CLI utilities for common tasks and extensible event-injection components for payment and third-party integrations.

🏗️ Key Features

Advanced router with annotation-driven routes and middleware support.

Controller autowiring and dependency injection container.

ActiveRecord-style ORM with migration and query helpers.

Native extensions via PHP FFI for model inference and performance-sensitive operations.

Frontend scaffolding with example configs for Webpack, Vite, and ESBuild.

Extendable payment adapters with event injection points.

Research utilities and integrations kept separate and gated from the core runtime.

🖥️ Requirements

PHP 8.1 or later recommended.

Composer for dependency management.

Optional extensions for specific features: ffi, curl, mbstring, json, pdo (if using ORM with databases).

For native AI runtimes: platform-specific runtimes and shared libraries for OnnxRuntime / CTranslate2 when using those features.

🛡️ Security Summary

This repository contains or references datasets and tooling intended for security research. Those artifacts are sensitive and can be misused. Access to any malware dataset is restricted and not enabled by default. Do not use, download, or distribute any malware samples unless you have explicit authorization and appropriate legal and lab safeguards. See SECURITY.md for full policy.

Do not include API keys, passwords, or secrets in commits. Use environment variables and secret managers.

🤝 Contributing

Read CONTRIBUTING.md before opening issues or PRs.

All contributions must follow the code style, include tests for new features, and pass CI checks.

Security-sensitive contributions that touch datasets or research tooling will require additional review and approval.

✍️ Testing and CI

The project uses GitHub Actions for CI. The pipeline includes linting, static analysis, and unit tests.

📝 Documentation

Full API documentation and developer guides are under docs/.

If you need downloadable model binaries or native runtimes, follow the explicit download URLs in docs/native-runtimes.md and verify checksums before installation.

🔐 Contact and Reporting

For general issues, open an Issue on GitHub.

For security reports, follow the process described in SECURITY.md..

📂 Notes and Warnings

Onetone combines powerful research tooling with runtime integrations. Misuse of native code, FFI, or malware datasets can cause severe security, privacy, and legal issues. Operate only in controlled, isolated environments and follow institutional and legal guidance.