update CHANGELOG and TODO for v0.2.1

Don't intend to increment API version (because it hasn't changed); git
revs in workers should be good enough.

2 files changed, 49 insertions, 18 deletions

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7e8312fe..9f87d5f4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,12 +16,28 @@ See also:
 
 ## [Unreleased]
 
-- expanded example entities in SQL schema
-- updated rust (cargo) dependencies; depend on rust 1.32+
-- many tweaks to webface and guide
+## [0.2.1] - 2019-04-09
+
+No API or SQL schema changes in this release. Macaroon generation and
+verification way broken; all non-CLI-generated tokens will need to be
+regenerated (eg, log-out, log-in).
+
+### Fixed
+
+- fix macaroon 'expires' caveat check (in rust), allowing actual login via OAuth/IA
+
+### Added
+
 - basic release, container, file webface editing
 - basic editgroup annotation and control (submit/accept) in webface
 - CSL/BibTeX citation endpoints
+- "review bot" framework (for CI-style edit checks)
+
+### Changed
+
+- expanded example entities in SQL schema
+- updated rust (cargo) dependencies; depend on rust 1.32+
+- many tweaks to webface and guide
 
 ## [0.2.0] - 2019-02-05
 
diff --git a/TODO.md b/TODO.md
index 37e0ad43..4341c9a4 100644
--- a/TODO.md
+++ b/TODO.md
@@ -1,22 +1,30 @@
 
 ## In Progress
 
-- in dev, make JSON API link to localhost:9810
-- "as bibtext" webface URL
-- example entities
-    => work with multiple releases
-    => dataset/fileset
-    => webcapture
-    => dweb URLs
-- basic web editing/creation of containers and papers
-- commenting and accepting editgroups via web interface
-- example editgroup review bot (can be trivial)
 
 ## Next Up
 
+- review bots:
+    - tests
+    - not actually processing work entities
+    - filter out already reviewed
+    - handle deletions, merges
+    - examples of warnings, etc
 - import from arabesque output (eg, specific crawls)
-- missing SQL indices: `ENTITY_edit.editgroup_id, ENTITY_edit.ident_id`
 - test logins, and add loginpass support for: orcid, wikimedia
+- missing test coverage (python):
+    batch create work, fileset, webcapture
+    delete entity (for each entity type)
+    delete entity edits (for each entity type)
+    get entity edit (for each entity type)
+    get entity redirects (for each entity type)
+    get entity revision (for each entity type)
+    get release webcaptures
+    update editor (?)
+    update fileset, webcapture
+    release elastic transform (rich extra)
+    successful web entity edits (create fresh entities first)
+    editgroup web submit, accept, annotate
 
 ## Bugs
 
@@ -24,20 +32,26 @@
 - searching 'N/A' is a bug, because not quoted; auto-quote it?
 - author (contrib) names not getting included in search (unless explicit)
 - fatcat flask lookup ValueError should return 4xx (and message?)
-    => if blank: UnboundLocalError: local variable 'extid' referenced before assignment
 
-## Next Schema Iteration
+## Next Schema Iteration (0.3.0)
 
 Changes to SQL (and swagger):
 
 - structured names in contribs (given/sur)
 - `release_status` => `release_stage`
 - `withdrawn_date` and retraction as a release stage
-- subtitle as a string field? what about translation (`original_subtitle`)?
+- subtitle as a string field
+    => but what about translation? `original_subtitle`? just combine them?
+    => combine in elasticsearch 'title' field
+- size on webcapture CDX lines (we fetch for sha256 anyways, so easy to calculate)
+- ark extid?
+- missing SQL indices: `ENTITY_edit.editgroup_id, ENTITY_edit.ident_id`
 
 Changes to swagger only:
 
-- edit URLs: editgroup_id in URL, not a query param
+- edit URLs: `editgroup_id` in URL, not a query param
+- changelog API endpoint should needs expand=editors option
+- include 'created' in editgroup object (already in SQL)
 
 ## Next Full Release "Touch"
 
@@ -47,6 +61,7 @@ Want to minimize edit counts, so will bundle a bunch of changes
 - structured contrib names (given, sur)
 - reference linking (release-to-release), via crossref DOI refs
 - subtitle as string, not array
+- remove crossref alt ids that are just the DOI (?)
 
 ## Production Public Launch Blockers