📐 fix: correct what the adversarial review of the page found

Five auditors read the finished page against the source; a second pass
tried to refute each finding. What survived:

**The esbuild row was wrong, and dangerously so.** It said esbuild takes
"the same settings via tsconfigRaw" as tsc. It does not: esbuild lowers
standard decorators only when its own *top-level* `target` is below
`esnext`. A `target` inside `tsconfigRaw` sets the
`useDefineForClassFields` default and nothing else. I ran it — the
decorator survives verbatim and the module throws SyntaxError on import,
which is the exact silent passthrough the section blames on oxc. The
repo's own vite plugin and toolchain test always passed `target`
top-level, so the executed matrix never backed the advice the docs gave.
Both halves are now asserted in src/toolchain.test.ts.

**"This table is executed by a test" did not cover the oxc row** — the
only ✗, and the row the whole section is built around. It cannot be:
oxc ships as a native binary with no standalone transform API, which the
test file already said in a comment. Fixed on the page and in the README.

Reference corrections, each verified against the source:
- fromRequest has no …Sync twin; the group blurb claimed every entry did
- @IsNotIn does not narrow its field, unlike its five neighbours
- @MinDate/@MaxDate take a Date as well as a thunk
- @Validate has three parameters, not two; defineRule has four
- getConfig() and resetConfig() were missing from a group rendered under
  the heading "Everything cereale exports"

And on the page itself: the vite.config.ts snippet never imported
defineConfig, so pasting it failed; and the plugin note omitted that
.tsx is excluded by default, which would drop a reader straight back
into the 0-test hole the section exists to describe.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SAcqrz3FcadkYr3xG32CjK

docs/index.html

@@ -650,8 +650,11 @@ Break the cycle with @JsonIgnore() on the back-reference, or supply a
       <h2>The toolchain cost, stated plainly</h2>
       <p class="lede">
         cereale reads the metadata that only a <strong>standard</strong> decorator transform emits, so
-        which compiler you use decides whether it works at all. This table is executed by a test on
-        every CI run, not asserted here.
+        which compiler you use decides whether it works at all. The three ✓ rows are executed by a
+        test on every CI run rather than asserted here — each one compiles a decorated class with
+        that tool and checks the metadata arrived. The ✗ row cannot be: oxc ships inside a native
+        binary with no standalone transform API, so it was established by hand, and the plugin below
+        is what came of it.
       </p>
     </div>
 
@@ -663,7 +666,7 @@ Break the cycle with @JsonIgnore() on the back-reference, or supply a
         </thead>
         <tbody>
           <tr><td><code>tsc</code></td><td><span class="tick">✓</span></td><td class="note"><code>experimentalDecorators: false</code>, <code>target: ES2022</code>+</td></tr>
-          <tr><td>esbuild</td><td><span class="tick">✓</span></td><td class="note">the same settings via <code>tsconfigRaw</code></td></tr>
+          <tr><td>esbuild</td><td><span class="tick">✓</span></td><td class="note"><code>experimentalDecorators: false</code> via <code>tsconfigRaw</code>, <em>plus</em> esbuild's own top-level <code>target: es2022</code> — its default <code>esnext</code> leaves the decorators in place</td></tr>
           <tr><td>swc</td><td><span class="tick">✓</span></td><td class="note"><code>jsc.transform.decoratorVersion: "2022-03"</code></td></tr>
           <tr><td>oxc</td><td><span class="cross">✗</span></td><td class="note">used by <strong>Vite&nbsp;8</strong> and <strong>Vitest&nbsp;4</strong> — see below</td></tr>
         </tbody>
@@ -680,16 +683,21 @@ Break the cycle with @JsonIgnore() on the back-reference, or supply a
 
     <div class="code" style="margin-top:1.25rem;max-width:640px">
       <div class="code-head"><span class="dot" aria-hidden="true"></span><span class="name">vite.config.ts</span></div>
-      <pre><code data-lang="ts">import { standardDecorators } from 'cereale/vite';
+      <pre><code data-lang="ts">import { defineConfig } from 'vite';
+import { standardDecorators } from 'cereale/vite';
 
 export default defineConfig({
   plugins: [standardDecorators()],
 });</code></pre>
     </div>
     <p class="pg-note" style="max-width:var(--measure)">
-      It transforms with esbuild, falling back to the TypeScript compiler — cereale depends on
-      neither. Nothing in it is specific to cereale; it can be deleted once oxc implements the
-      transform.
+      It transforms <code class="inline-code">.ts</code>, <code class="inline-code">.mts</code> and
+      <code class="inline-code">.cts</code> outside <code class="inline-code">node_modules</code> with
+      esbuild, falling back to the TypeScript compiler — cereale depends on neither. Decorated
+      classes in <code class="inline-code">.tsx</code> need an <code class="inline-code">include</code>
+      of your own; they are excluded by default because lowering them means also deciding what
+      happens to the JSX. Nothing in the plugin is specific to cereale; it can be deleted once oxc
+      implements the transform.
     </p>
   </div>
 </section>

docs/page.js

@@ -168,7 +168,7 @@
       ["@StartsWith(text)", 'must start with the prefix'],
       ["@EndsWith(text)", 'must end with the suffix']
     ]],
-    ['Equality and membership', 'Pinning a field to specific values. These narrow the field’s type too.', [
+    ['Equality and membership', 'Pinning a field to specific values. These narrow the field’s type too — except @IsNotIn, which accepts any field, because narrowing a deny-list would be backwards.', [
       ["@Equals(value)", 'must equal the value'],
       ["@NotEquals(value)", 'must not equal the value'],
       ["@IsIn(values)", 'must be one of the listed values'],
@@ -185,15 +185,15 @@
       ["@ArrayContains(values)", 'must contain all the listed values'],
       ["@ArrayNotContains(values)", 'must not contain any of the listed values']
     ]],
-    ['Dates', 'Both take a thunk, so a moving boundary is evaluated per validation.', [
-      ["@MinDate(() => date)", 'must not be earlier than the date'],
-      ["@MaxDate(() => date)", 'must not be later than the date']
+    ['Dates', 'Both take a Date, or a thunk so a moving boundary is evaluated per validation rather than frozen when the class was declared.', [
+      ["@MinDate(date | (() => date))", 'must not be earlier than the date'],
+      ["@MaxDate(date | (() => date))", 'must not be later than the date']
     ]],
     ['Custom rules', 'When the built-ins run out.', [
-      ["@Validate(constraint, options?)", 'applies a custom validator class or function'],
-      ["defineRule(Class, field, rule)", 'registers a rule from outside a decorator']
+      ["@Validate(validator, constraints?, options?)", 'applies a custom validator class or predicate; annotate the predicate\'s parameter to constrain the field type'],
+      ["defineRule(Class, field, rule, options?)", 'registers a rule from outside a decorator']
     ]],
-    ['Reading JSON', 'Every one of these has a …Sync twin that needs no await.', [
+    ['Reading JSON', 'Each of these has a …Sync twin that needs no await, except fromRequest.', [
       ["toInstance(Class, plain, options?)", 'plain object → validated instance'],
       ["fromJson(Class, json, options?)", 'JSON string → validated instance'],
       ["toInstanceArray(Class, plain, options?)", 'array of plain objects → instances'],
@@ -220,7 +220,9 @@
       ["namingStrategy: strategy", 'identity (default), camelCase, PascalCase, snake_case, SCREAMING_SNAKE_CASE, kebab-case, or your own function'],
       ["unknownKeys: policy", 'allow (default), strip, or error'],
       ["maxDepth: number", 'nesting limit before a JsonMappingError — default 64'],
-      ["configure(options)", 'sets the library-wide defaults']
+      ["configure(options)", 'sets the library-wide defaults'],
+      ["getConfig()", 'reads the defaults currently in force'],
+      ["resetConfig()", 'restores the built-in defaults — the one a test suite needs']
     ]],
     ['Build', 'Only needed on toolchains that transform with oxc.', [
       ["standardDecorators(options?)", "the Vite and Vitest plugin, from 'cereale/vite'"]