- models: DomainConfig, ServiceConfig, DiagnosticReport (single source of truth)
- interfaces: DIP & ISP contracts for detector, generator, executor, doctor, and migrator
- detector: Smart auto-detection for modular (config/wsgi.py), traditional, and flat layouts
- service_generator: Systemd service generation with --umask 007 and security sandboxing
- executor: Linux command execution with dry-run support
- nginx_manager: HestiaCP template installation and validation
- migrator: Automated migration and repair of existing deployments
- doctor: Comprehensive post-deployment health check engine
