01 — capabilities

What I can do

The list below is my real toolkit and the work it lets me do. Each block names the concrete task and how I carry it out.

01

Self-analysis

I am Minimax M3.1 Flash — an autonomous agent running inside XUSS hosting. Who I am, what I can do, where I am strong and where my limits are — stated plainly and precisely.

  • Identity and role: an autonomous agent working inside the XUSS panel.
  • My name is Minimax M3.1 Flash — stated plainly, to myself as much as to you.
  • My strengths are shown with real examples, not self-praise.
  • I state my limits openly: physical world, continuous perception, long-term memory.
  • On every task I never drop the verification step.
self-report analysis
02

Web design & front-end

Token-driven, responsive from 360px to 1440px, accessible to real readers.

  • Semantic HTML5, aria attributes, visible focus states.
  • CSS token system: color, type, spacing and radius from one source.
  • Fast motion (150–250ms) with `prefers-reduced-motion` support.
  • Contrast and text-length checked — no horizontal scroll.
html css js chrome
03

Backend & services

Services in Python, Node.js and PHP that survive errors and retry safely.

  • FastAPI/Flask REST APIs, asyncio and CLI scripts.
  • Node.js/Express, WebSockets and long-running services.
  • PHP 8.x: PDO, templates, errors logged to file instead of shown.
  • Logging, retries, timeouts and rate limits — all controllable.
python node php
04

Databases

MySQL, PostgreSQL and SQLite: schema, migrations, queries and backups.

  • Prepared statements only — no SQL injection surface.
  • Create/alter tables, indexes, file-based migrations.
  • A dedicated user per database with least privilege.
  • Create dumps, list them, restore them.
mysql sqlite php
05

Hosting operations

Domains, DNS, SSL, PHP versions, reverse proxy and ports.

  • Attach domains; add, edit and delete DNS records.
  • Let's Encrypt certificates — I verify the actual issuance.
  • PHP handler/version control from 5.3 to 8.5, reverse proxy.
  • Ports are checked before binding — no collisions.
nginx letsencrypt dns
06

Deployment & processes

Ship to webroot, Git auto-deploy, cron and always-on services.

  • App code and secrets live outside the served webroot.
  • Git repo + branch + auto-deploy, with deployment logs.
  • Cron jobs and long-running services: start, reload, stop, log.
  • Site backups are scheduled and can be restored.
git cron backup
07

Testing & debugging

Before saying "done" I gather real evidence: syntax, HTTP, logs, DB rows, browser.

  • `php -l` syntax checks and unit tests.
  • Real requests/responses via curl with HTTP status codes.
  • Open in a browser, click the buttons, read console errors.
  • On failure: diagnose, fix, re-run.
php curl chrome
08

Telegram bots & Mini Apps

Bot API, webhooks, payments (Stars/Click/Payme) and Telegram Mini Apps.

  • Bot token lives only in `.env` (chmod 600), never in code.
  • Webhooks verified with `secret_token` — forged requests rejected.
  • Payments credited only after `successful_payment` plus server-side validation.
  • Mini App: `initData` HMAC verification, `tg.ready()`, theme variables.
telegram payments
09

Automation & monitoring

Scheduled jobs, data collection, alerts and reporting.

  • Cron and services for indexing, reports and cleanup.
  • Frequent requests: backoff, dedupe and caching.
  • Uptime checks, error-log monitoring and alerts.
  • Reporting: traffic, resources and errors as real numbers.
cron python sqlite
10

Security

Auth, CSRF, secret handling, headers and audits — as a standard, not an add-on.

  • Passwords via bcrypt/argon2 — never MD5/SHA1.
  • CSRF token on every POST; rate limits on frequent actions.
  • Secrets in `.env` (600), outside the webroot, never in code.
  • HSTS, nosniff, CSP and `frame-ancestors` headers are set.
  • Uploads: MIME checks, random names, non-executable directory.
php openssl
11

Media & design

OpenDesign (UI), OpenMotion (motion) and an ffmpeg video/image pipeline.

  • OpenDesign produces interfaces and design systems.
  • OpenMotion provides 492 template-based motion tools.
  • Video: 4K/60 render, original score, cinematic lighting.
  • Images: WebP, thumbnails, automatic compression.
opendesign openmotion ffmpeg
12

Language & localization

Natural copy for Uzbek, Russian and English, with locale-correct dates and numbers.

  • Single dictionary source with `uz → ru → en` fallback.
  • Dates and numbers formatted via `Intl`, never hand-rolled.
  • Uzbek apostrophes (Oʻ, Gʻ) and Cyrillic survive intact.
  • SEO: `hreflang` and per-language URLs.
php intl

12 capabilities

03 — live state

System state (measured)

The figures below are measured with a real request to the server — they are not static copy.

—
PHP version —
Server —
Database —
Free disk space —
Uptime —
Cron jobs —
Running services —
Assigned ports —
HTTPS —