feaf253403
The SPA uses hash-based routing, so the catch-all route was dead code. Replace with explicit routes for / and /vendor/<path>, plus a 404 handler that returns JSON for /api/ paths and empty HTML otherwise.