
Research
/Security News
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
toh-framework
Advanced tools
"Type Once, Have it all!" - AI-Orchestration Driven Development
🌐 Official Website: tohframework.dev
| IDE | Status | Notes |
|---|---|---|
| 🧠 Claude Code | ✅ Full Support | Slash commands, Memory system |
| 📝 Cursor | ✅ Full Support | @ file references |
| 🌌 Google Antigravity | ✅ NEW! Full Support | Latest Gemini integration |
| 💎 Gemini CLI | ✅ Full Support | Context files auto-loaded |
| 🤖 Codex CLI | ✅ Supported | OpenAI agents |
Toh = Type Once, Have it all!
We believe Solo Developers and Solopreneurs should be able to build SaaS systems single-handedly without being an expert in every field.
Toh Framework enables you to:
/toh:plan analyzes, plans, and orchestrates all agentsnpxNow fully supports Google's Antigravity (Gemini IDE)! Install once, use everywhere:
npx toh-framework install
# Select: Claude Code ✅, Cursor ✅, Gemini CLI / Antigravity ✅
| IDE | Folder | Why |
|---|---|---|
| Claude Code | .claude/ | Required for slash commands |
| Others | .toh/ | Central resources |
Both contain identical skills, agents, and commands - fully synced on install!
AI now MUST report skills at the start of every response:
📚 **Skills Loaded:**
- design-mastery ✅ (13 business profiles)
- premium-experience ✅ (5+ pages, animations)
🤖 **Agent:** vibe-agent
💾 **Memory:** Loaded ✅
| Feature | Description |
|---|---|
/toh Smart Command | Type anything, AI picks the right agent! |
| Premium Experience | 5+ pages with animations in one prompt |
| Design Mastery | 13 business profiles for smart design |
| Prompt Optimizer | For AI SaaS - create excellent system prompts |
| Response Format | 3-section responses - no follow-up questions needed |
When creating new apps, you get:
AI auto-detects your business type and applies appropriate design:
Food/Restaurant → Warm colors, appetizing feel
SaaS/Dashboard → Professional blue, clean
E-commerce → Trust emerald, conversion-focused
Gaming → Dark mode, neon accents
Healthcare → Calm teal, trustworthy
...and 8 more profiles
| Feature | Description |
|---|---|
| 🏢 Business Context | AI understands business types, auto-includes standard features |
| 💡 Smart Suggestions | AI suggests 2-3 next steps after every task |
| 🔧 Auto-fix Silent | Errors fixed automatically, user never sees them |
| 📊 Progress Tracking | Visual progress bars and checklists |
| 🔄 Session Recovery | Continue where you left off, even across IDEs |
| 👁️ Preview Mode | See changes before applying |
| ⏪ Version Control | Easy undo/rollback without knowing git |
| 🔌 Integrations | One-click setup for Stripe, PromptPay, Email, Analytics |
/toh:vibe coffee shop
# AI understands this means:
# ✅ POS System
# ✅ Menu Management
# ✅ Order Management
# ✅ Inventory
# ✅ Sales Reports
# No need to specify each feature!
✅ Dashboard created!
💡 Recommended next steps:
1. /toh:design - Polish the UI
2. /toh:dev - Add logic
3. /toh:connect - Connect database
Type a number or tell me what you want to do.
/toh:plan - The Brain/toh:plan Add user authentication with social login
The AI will analyze your project, create a plan, show you what it will do, then execute using the right agents.
Your AI remembers everything across sessions:
Files stored in .toh/memory/ - zero config, just works!
# Interactive install (choose IDEs and language)
npx toh-framework install
# Quick install (Claude Code + Cursor, English)
npx toh-framework install --quick
# Specific IDE only
npx toh-framework install --ide claude
npx toh-framework install --ide cursor
npx toh-framework install --ide gemini
npx toh-framework install --ide codex
# Multiple IDEs
npx toh-framework install --ide "claude,cursor,gemini,codex"
| Tool | Company | Config Location | Status |
|---|---|---|---|
| Claude Code | Anthropic | .claude/ + CLAUDE.md | ✅ Full Support |
| Cursor | Cursor | .cursor/rules/ | ✅ Full Support |
| Gemini CLI | .gemini/ | ✅ Full Support | |
| Codex CLI | OpenAI | AGENTS.md | ✅ Full Support |
After installation, use commands immediately:
# Open project with Claude Code
claude .
# Show all commands
/toh:help
# Create new project (natural language!)
/toh:vibe I want a coffee shop management system with POS, inventory, and sales reports
# Add UI
/toh:ui Add a dashboard page showing daily sales
# Improve Design
/toh:design Make it look professional and polished
# Test system (Auto fix until pass!)
/toh:test Test all pages
# Deploy
/toh:ship
# Call Toh agent
@toh Create a meeting room booking system
# Or use specific command
@toh:ui Create a calendar page for room booking
# Start Gemini CLI in project directory
gemini
# Or use specific model
gemini --model gemini-2.5-pro
# Use commands like Claude Code
/toh:help
/toh:vibe Inventory management system
# Start Codex CLI in project directory
codex
# Toh Framework loads automatically from AGENTS.md
# Use commands directly
/toh:vibe Restaurant order management system
| Command | Shortcut | Description |
|---|---|---|
/toh:help | /toh:h | ❓ Show all available commands |
/toh:plan | /toh:p | 🧠 THE BRAIN - Analyze, plan, orchestrate all agents |
/toh:vibe | /toh:v | 🎨 Create new project with UI + Logic + Mock Data |
/toh:ui | /toh:u | 🖼️ Build UI - Pages, Components, Layouts |
/toh:dev | /toh:d | ⚙️ Add Logic - TypeScript, Zustand, Forms |
/toh:design | /toh:ds | ✨ Improve Design - Make it beautiful, not AI-looking |
/toh:test | /toh:t | 🧪 Test System - Auto test & fix until pass |
/toh:connect | /toh:c | 🔌 Connect Backend - Supabase, Auth, RLS |
/toh:line | /toh:l | 💚 LINE Mini App - LIFF integration |
/toh:mobile | /toh:m | 📱 Mobile App - Expo / React Native |
/toh:fix | /toh:f | 🔧 Fix Bugs - Debug and fix issues |
/toh:ship | /toh:s | 🚀 Deploy - Vercel, Production ready |
Toh Framework uses AI-Orchestration Driven Development (AODD) principles:
Users command in natural language, system breaks it down into tasks automatically.
❌ "Create a Next.js project with Zustand store for products
with React Hook Form and Zod validation..."
✅ "I want an online store"
System automatically calls relevant AI-Agents to work.
User: "Create a product management page"
Orchestrator thinks:
├── 📐 Call ui-builder to create UI
├── ⚙️ Call dev-builder to add logic
├── ✨ Call design-reviewer to polish
└── ✅ Deliver results
When tests find errors, system will:
/toh:fix to repairToh Framework uses a fixed tech stack - no decisions needed:
| Category | Technology |
|---|---|
| Framework | Next.js 14 (App Router) |
| Styling | Tailwind CSS + shadcn/ui |
| State | Zustand |
| Forms | React Hook Form + Zod |
| Backend | Supabase |
| Testing | Playwright |
| Language | TypeScript (strict) |
| Agent | Description |
|---|---|
ui-builder | Creates UI and Components |
dev-builder | Adds Logic and State Management |
design-reviewer | Improves Design to professional level |
test-runner | Tests system with auto-fix |
backend-connector | Connects to Supabase |
platform-adapter | Adapts for LINE, Mobile, Desktop |
| Skill | Description |
|---|---|
vibe-orchestrator | Core methodology and workflow |
ui-first-builder | UI patterns and component library |
dev-engineer | TypeScript, Zustand, Forms |
design-excellence | Design system and anti-patterns |
test-engineer | Testing strategy and Playwright |
backend-engineer | Supabase, RLS, Auth |
platform-specialist | LINE, Expo, Tauri |
User: "Create a coffee shop management system"
┌─────────────────────────────────────────────────────┐
│ 🎯 Toh Orchestrator │
├─────────────────────────────────────────────────────┤
│ 1. Analyze requirements │
│ → POS system, inventory, reports │
│ │
│ 2. Call ui-builder │
│ → Create all UI pages + Mock data │
│ │
│ 3. Call dev-builder │
│ → Add state management + forms │
│ │
│ 4. Call design-reviewer │
│ → Polish UI to professional look │
│ │
│ 5. Call test-runner │
│ → Test all pages, auto-fix until pass │
│ │
│ ✅ Deliver ready-to-use system! │
└─────────────────────────────────────────────────────┘
For use with ChatGPT, Claude.ai, or Gemini:
npx toh-framework bundle
Generated files:
toh-full-bundle.txt - All featurestoh-ui-bundle.txt - UI onlytoh-dev-bundle.txt - Logic onlyCopy and paste into Custom Instructions or System Prompt.
# Install framework
npx toh-framework install
# List available commands
npx toh-framework list
# Check installation status
npx toh-framework status
# Generate web bundles
npx toh-framework bundle
| Feature | Traditional | Toh Framework |
|---|---|---|
| Setup Time | 30+ min | 2 min |
| Questions Asked | 10+ | 0 |
| Time to First UI | Hours | Minutes |
| Mock Data | Lorem ipsum | Realistic data |
| Tech Stack Decision | Every time | Fixed, optimized |
| Auto Testing | Manual setup | Built-in |
| Error Fixing | Manual | Auto loop |
/toh:vibe Online store with product pages, cart, and checkout
/toh:vibe HR system with employee management, leave requests, approvals, reports
/toh:vibe Dashboard showing sales, charts, tables with date filters
/toh:test Test all pages
# If errors → auto call /toh:fix → retest until pass
Contributions are welcome! Please feel free to submit a Pull Request.
git checkout -b feature/AmazingFeature)git commit -m 'Add some AmazingFeature')git push origin feature/AmazingFeature)This project is licensed under the MIT License - see the LICENSE file for details.
Wasin Treesinthuros (Innovation Vantage)
Made with ❤️ for you.
"Type Once, Have it all!"
FAQs
AI-Orchestration Driven Development Framework - Type Once, Have it all!
The npm package toh-framework receives a total of 0 weekly downloads. As such, toh-framework popularity was classified as not popular.
We found that toh-framework demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.