step 7.2: done

src/app.js

@@ -8,6 +8,7 @@ const { routes: zonesRoutes } = require('./routes/zones');
 const { routes: combatLogRoutes } = require('./routes/combatLog');
 const { routes: inventoryRoutes } = require('./routes/inventory');
 const { routes: shopRoutes } = require('./routes/shop');
+const { routes: expeditionRoutes } = require('./routes/expeditions');
 const { AppError } = require('./utils/errors');
 
 function createApp() {
@@ -65,6 +66,11 @@ function createApp() {
   app.post('/api/shop/buy', requireAuth, shopRoutes.postBuy);
   app.post('/api/shop/sell', requireAuth, shopRoutes.postSell);
 
+  // Expedition routes (require session)
+  app.post('/api/expeditions/start', requireAuth, expeditionRoutes.postStart);
+  app.get('/api/expeditions/active', requireAuth, expeditionRoutes.getActive);
+  app.post('/api/expeditions/claim', requireAuth, expeditionRoutes.postClaim);
+
   // Central error handler
   app.use((err, _req, res, _next) => {
     // Log stack traces server-side only