Sign panel sessions and isolate test runs

- Replace in-memory auth sessions with signed cookies and signed OAuth state
- Add auth route coverage and update panel/web server wiring
- Switch test script to per-file Bun processes and clean up type checks

bot/index.ts

@@ -1,9 +1,8 @@
 import { AuroraClient } from "@/lib/BotClient";
 import { env } from "@shared/lib/env";
-import { join } from "node:path";
 import { initializeConfig } from "@shared/lib/config";
 import { registerDomainEventListeners } from "@shared/lib/eventWiring";
-import { startWebServerFromRoot } from "../api/src/server";
+import { createWebServer } from "../api/src/server";
 
 // Initialize config from database
 await initializeConfig();
@@ -21,12 +20,11 @@ console.log("🌐 Starting web server...");
 
 let shuttingDown = false;
 
-const webProjectPath = join(import.meta.dir, "../api");
 const webPort = Number(process.env.WEB_PORT) || 3000;
 const webHost = process.env.HOST || "0.0.0.0";
 
 // Start web server in the same process
-const webServer = await startWebServerFromRoot(webProjectPath, {
+const webServer = await createWebServer({
     port: webPort,
     hostname: webHost,
 });
@@ -53,4 +51,4 @@ const shutdownHandler = async () => {
 };
 
 process.on("SIGINT", shutdownHandler);
-process.on("SIGTERM", shutdownHandler);
+process.on("SIGTERM", shutdownHandler);

bot/modules/economy/shop.view.ts

@@ -163,8 +163,9 @@ export function getShopListingMessage(
 
             if (line) {
                 if (!tiers[rarity]) tiers[rarity] = { items: [], totalChance: 0 };
-                tiers[rarity].items.push(line);
-                tiers[rarity].totalChance += chance;
+                const tier = tiers[rarity]!;
+                tier.items.push(line);
+                tier.totalChance += chance;
             }
         }