General TODO updates.

Some more details, links etc, plus a bug I just noticed in
favouriting.

diff --git a/TODO.md b/TODO.md
index a5af8a6b821f53b88fe8bd6725db7013232400dc..da2b3e042826b875d2ee95c10e4787ec751a9389 100644 (file)
--- a/TODO.md
+++ b/TODO.md
@@ -1,3 +1,9 @@
+# Bugs
+
+When you favourite a post that you saw via a boost, the [F] doesn't
+appear. Presumably some confusion between the original status and the
+boosting status.
+
 # Missing features
 
 ## Verbose help
@@ -202,8 +208,10 @@ example, the default language for your posts (if you want to override
 the one we get from the system locale). Maybe also UI options in
 future if we add any.
 
-It should also let you set server-side options about your account,
-such as your display name, flags like `bot`, and info fields.
+It should also let you [set server-side
+options](https://docs.joinmastodon.org/methods/accounts/#update_credentials)
+about your account, such as your display name, flags like `bot`, and
+info fields.
 
 ### Following/blocking/etc: ESC E [user] O
 
@@ -226,30 +234,42 @@ be slotted in as another option in the post-composer menu.
 You can lock your account so that people can only follow you if you
 give permission. We should support that:
 
-* support marking your own account as locked via the ESC Y O options
-  menu
-* if someone then sends you a follow request, make it possible to
-  receive it and act on it
-* support sending follow requests to a locked account
+* support [marking your own account as
+  locked](https://docs.joinmastodon.org/methods/accounts/#update_credentials)
+  via the ESC Y O options menu
+* put follow requests into some kind of notifications feed that causes
+  you to hear about them
+* allow you to [get a list of your current pending
+  requests](https://docs.joinmastodon.org/methods/follow_requests/#get),
+  in the same format as actual followers, so that from there, you can
+  examine requesting users in the normal way
+* when examining a user who is a pending requester, there should be
+  options to
+  [accept](https://docs.joinmastodon.org/methods/follow_requests/#accept)
+  or
+  [reject](https://docs.joinmastodon.org/methods/follow_requests/#reject)
+  the request
+* support sending follow requests to a locked account (IDK if this is
+  the same as 'follow'; if so, perhaps you get back a Relationship
+  that says `requested` rather than `following`?)
 
 ### Registering an account
 
 There's an [API
 method](https://docs.joinmastodon.org/methods/accounts/#create) to
-_create_ an account on Mastodon. Perhaps that means we could support
-directly registering via Mastodonochrome, without having to first use
-the web interface?
-
-(Whether or not this is useful in the live Fediverse, it would
-certainly streamline setting up a handful of test accounts on a clean
-dev instance in a VM, which is a common activity during development!)
-
-But I'm not sure. The docs for that method say you're required to
-provide a user token. But how did you get one without already logging
-in as an existing user? Perhaps I've misunderstood, and this API
-request is for _administrators_ to use, to create an account for a
-user who asked for one, if for some reason they don't want to use web
-registration?
+_create_ an account on Mastodon, authenticated by an app rather than
+user token. Perhaps that means we could support directly registering
+via Mastodonochrome, without having to first use the web interface?
+
+It's harder than ordinary login, though. You have to submit a password
+for the web UI, which means we have to prompt for one, twice, and
+perhaps also judge its strength. And you have to confirm that the user
+has accepted the rules etc, which means actually showing the rules to
+the user.
+
+And it's harder for the user, because even after this reports success
+(with a user token for the app to keep) they still have to wait for a
+confirmation email and follow the link from it.
 
 ### General search