v0.37.0 lwconf live and fixes

doc/architecture.md

@@ -265,8 +265,9 @@ so the page needs only `'wasm-unsafe-eval'` in its `script-src`.
 `lwconf.js` is one dependency-free ES module that knows the calls and shapes,
 never a key:
 
-- `load({execURL, execSRI, wasmURL, wasmSRI})` fetches both by their
-  integrity and resolves to the engine.
+- `load({execURL, execSRI, wasmURL, wasmSRI, progress})` fetches both by
+  their integrity and resolves to the engine; `progress` hears the module's
+  bytes as they arrive, which fetch's own integrity check would hold back.
 - `fields(schema, role, type)` is a node's form rows, a table's a group.
 - `value`, `at` and `group` read a node's value and sort problems by node.
 

doc/configuration.md

@@ -217,8 +217,9 @@ pipelines[0].plugin_sinks[http].config: unknown key "tls.enabeld"
   key's default, or the meaning its help gives zero (off, none, unlimited). A
   number below its key's minimum is refused, a negative one included where
   zero means the default (`buffer_size = -1`).
-- Flow stages are checked whether enabled or not: kinds, enums and ranges,
-  and filter patterns must compile ([Filters](filters.md)).
+- Flow stages are checked whether enabled or not: kinds, enums and ranges;
+  a filter needs at least one pattern, and each must compile
+  ([Filters](filters.md)).
 - `auth` enums (`identity`, `node_binding`) are checked whatever `type` is; a
   block naming peers or credentials with `type` `none` or unset is refused
   ([Security](security.md#validation-1)).

doc/filters.md

@@ -16,10 +16,10 @@ patterns = ["ERROR", "WARN"]
   `exclude` (matches are dropped).
 - `logic`, string, default `or`: `or` (any pattern matches) or `and` (every
   pattern matches).
-- `patterns`, []string, default `[]`: Go RE2 regular expressions.
+- `patterns`, []string, required: Go RE2 regular expressions.
 
-A filter with no patterns passes everything. An invalid pattern is refused
-when the configuration loads, named by its path
+A filter needs at least one pattern. A filter without one, or with an invalid
+pattern, is refused when the configuration loads, named by its path
 (`pipelines[0].flow.filters[0].patterns[1]`).
 
 ## What Gets Matched