step 8.2: done

src/app.js

@@ -10,6 +10,7 @@ const { routes: inventoryRoutes } = require('./routes/inventory');
 const { routes: shopRoutes } = require('./routes/shop');
 const { routes: expeditionRoutes } = require('./routes/expeditions');
 const { routes: leaderboardRoutes } = require('./routes/leaderboard');
+const { routes: heroProfileRoutes } = require('./routes/heroProfile');
 const { AppError } = require('./utils/errors');
 
 function createApp() {
@@ -76,6 +77,9 @@ function createApp() {
   // Leaderboard route (require session)
   app.get('/api/leaderboard', requireAuth, leaderboardRoutes.getLeaderboard);
 
+  // Hero profile route (public, no session required)
+  app.get('/api/heroes/:name', heroProfileRoutes.getHeroProfile);
+
   // Central error handler
   app.use((err, _req, res, _next) => {
     // Log stack traces server-side only