<critical_constraints> ❌ NO global DB sessions → use Depends(get_db) ❌ NO manually instantiating services in routes → use Depends ❌ NO routes without response_model → prevents data leaks ✅ MUST use Pydantic V2 (model_config, ConfigDict) ✅ MUST use AsyncSession with select() ✅ MUST use alembic for migrations </critical_constraints>

<pydantic_v2>

from pydantic import BaseModel, ConfigDict, Field

class UserCreate(BaseModel): model_config = ConfigDict(from_attributes=True) username: str = Field(..., min_length=3) email: str

</pydantic_v2>

<dependency_injection>

@router.post("/", response_model=ShowUser) async def create_user( user_in: UserCreate, db: AsyncSession = Depends(get_db), current_user: User = Depends(get_current_active_user) ): return await UserService.create(db, user_in)

</dependency_injection>

<async_db>

result = await db.execute(select(User).where(User.id == user_id)) user = result.scalars().first()

</async_db>