step 4.5: done

src/app.js

@@ -4,6 +4,8 @@ const { createSessionMiddleware, requireAuth } = require('./middleware/session')
 const { registerLimiter, loginLimiter, routes: authRoutes } = require('./routes/auth');
 const { routes: characterRoutes } = require('./routes/character');
 const { routes: huntRoutes } = require('./routes/hunt');
+const { routes: zonesRoutes } = require('./routes/zones');
+const { routes: combatLogRoutes } = require('./routes/combatLog');
 const { AppError } = require('./utils/errors');
 
 function createApp() {
@@ -44,6 +46,12 @@ function createApp() {
   // Hunt routes (require session)
   app.post('/api/hunt', requireAuth, huntRoutes.postHunt);
 
+  // Zone routes (require session)
+  app.get('/api/zones', requireAuth, zonesRoutes.getZones);
+
+  // Combat log routes (require session)
+  app.get('/api/combat-log', requireAuth, combatLogRoutes.getCombatLog);
+
   // Central error handler
   app.use((err, _req, res, _next) => {
     // Log stack traces server-side only