fix: narrow toJSONwithObjects to only serialize Parse.ACL, preserving Date instances

Calling val.toJSON() on all objects with a toJSON method converts Date
instances to ISO strings, breaking directAccess consumers. Narrowing
to Parse.ACL fixes the original bug without regressing Date fields.

Author: yog27ray

spec/CloudCode.spec.js

@@ -3659,13 +3659,19 @@ describe('afterFind hooks', () => {
     acl.setRoleWriteAccess('admin', true);
     obj.setACL(acl);
 
+    const testDate = new Date('2025-01-01T00:00:00.000Z');
+    obj.set('dateField', testDate);
+
     const json = toJSONwithObjects(obj, 'Test');
 
     expect(json.ACL).toBeDefined();
     expect(json.ACL instanceof Parse.ACL).toBe(false);
     expect(json.ACL.constructor).toBe(Object);
     expect(json.ACL['*']).toEqual({ read: true });
     expect(json.ACL['role:admin']).toEqual({ write: true });
+
+    expect(Utils.isDate(json.dateField)).toBe(true);
+    expect(json.dateField).toEqual(testDate);
   });
 
   it('should return valid ACL with directAccess enabled when afterFind hook calls setACL()', async () => {

src/triggers.js

@@ -195,7 +195,7 @@ export function toJSONwithObjects(object, className) {
   for (const key in pending) {
     const val = object.get(key);
     if (!val || !val._toFullJSON) {
-      toJSON[key] = val && typeof val.toJSON === 'function' ? val.toJSON() : val;
+      toJSON[key] = val instanceof Parse.ACL ? val.toJSON() : val;
       continue;
     }
     toJSON[key] = val._toFullJSON();