step 6.1: wip (not ticked)

src/app.js

@@ -7,6 +7,7 @@ const { routes: huntRoutes } = require('./routes/hunt');
 const { routes: zonesRoutes } = require('./routes/zones');
 const { routes: combatLogRoutes } = require('./routes/combatLog');
 const { routes: inventoryRoutes } = require('./routes/inventory');
+const { routes: shopRoutes } = require('./routes/shop');
 const { AppError } = require('./utils/errors');
 
 function createApp() {
@@ -59,6 +60,11 @@ function createApp() {
   app.post('/api/inventory/unequip', requireAuth, inventoryRoutes.postUnequip);
   app.post('/api/inventory/use', requireAuth, inventoryRoutes.postUse);
 
+  // Shop routes (require session)
+  app.get('/api/shop', requireAuth, shopRoutes.getShop);
+  app.post('/api/shop/buy', requireAuth, shopRoutes.postBuy);
+  app.post('/api/shop/sell', requireAuth, shopRoutes.postSell);
+
   // Central error handler
   app.use((err, _req, res, _next) => {
     // Log stack traces server-side only