This API is a collection of the machine endpoints for
TextMate 3 (coming soon).
The signed bundle catalog and the application update feed.
All of these are static files, signed with Ed25519,
and verified by the application against public keys compiled into it.
The key at /bundles.pub verifies the bundle index and every archive it lists.
The app update feed carries Sparkle’s own signatures under a separate key.
/appcast.xml: the Sparkle feed for app updates/bundles: the signed bundle index/bundles.sig: the signature file for the bundle index/bundles.pub: the Ed25519 public key that verifies the index and every archive/bundles.pub.txt: the plaintext twin of /bundles.pub, viewable in a browser/downloads/…: one archive per bundle, addressed by the index/downloads/ruby.tmbundle.tbz: for example, the Ruby bundle