Classes

Sessions, credentials, MFA, API keys and the audit trail. The session, redirect and authentication services are one instance per request.

The connection to the DNS backend: the provider, its API client, and the repositories and record managers that read and write through it. Every memoized instance is shared for the request so read caches are not split.

Record writes and the change-approval flow around them: managers, reverse record creation, comments, and the change request pipeline.

Users, groups, permissions and preferences. The permission service is memoized so its per-user cache spans the whole request.

Zone lifecycle: creation, ownership, templates, signing, metadata and the zone lists.