@payloadcms/codemod 4.0.0-internal.cc18726 → 4.0.0-internal.cd47d20

package/dist/transforms/add-override-access-true/basic.input.js

@@ -0,0 +1,41 @@
+// payload.find() relying on the Payload 3 default
+const posts = await payload.find({
+    collection: 'posts'
+});
+// payload.findByID() relying on the default
+const post = await payload.findByID({
+    id: 1,
+    collection: 'posts'
+});
+// Reached through req.payload
+const created = await req.payload.create({
+    collection: 'posts',
+    data: {
+        title: 'hello'
+    }
+});
+// A global operation
+const menu = await payload.findGlobal({
+    slug: 'menu'
+});
+// Already explicit — must not change
+const scoped = await payload.find({
+    collection: 'posts',
+    overrideAccess: false
+});
+// Jobs Local API operations also relied on the Payload 3 default
+await payload.jobs.queue({
+    input: {},
+    task: 'sync'
+});
+await req.payload.jobs.run({
+    silent: true
+});
+await payload.jobs.run();
+await payload.jobs.queue({
+    input: {},
+    task: 'sync'
+});
+export { };
+
+//# sourceMappingURL=basic.input.js.map

package/dist/transforms/add-override-access-true/basic.input.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/transforms/add-override-access-true/basic.input.ts"],"sourcesContent":["import type { Config } from 'payload'\n\n// payload.find() relying on the Payload 3 default\nconst posts = await payload.find({\n  collection: 'posts',\n})\n\n// payload.findByID() relying on the default\nconst post = await payload.findByID({\n  id: 1,\n  collection: 'posts',\n})\n\n// Reached through req.payload\nconst created = await req.payload.create({\n  collection: 'posts',\n  data: { title: 'hello' },\n})\n\n// A global operation\nconst menu = await payload.findGlobal({\n  slug: 'menu',\n})\n\n// Already explicit — must not change\nconst scoped = await payload.find({\n  collection: 'posts',\n  overrideAccess: false,\n})\n\n// Jobs Local API operations also relied on the Payload 3 default\nawait payload.jobs.queue({ input: {}, task: 'sync' })\nawait req.payload.jobs.run({ silent: true })\nawait payload.jobs.run()\nawait payload.jobs.queue({ input: {}, task: 'sync' } as never)\n"],"names":["posts","payload","find","collection","post","findByID","id","created","req","create","data","title","menu","findGlobal","slug","scoped","overrideAccess","jobs","queue","input","task","run","silent"],"mappings":"AAEA,kDAAkD;AAClD,MAAMA,QAAQ,MAAMC,QAAQC,IAAI,CAAC;IAC/BC,YAAY;AACd;AAEA,4CAA4C;AAC5C,MAAMC,OAAO,MAAMH,QAAQI,QAAQ,CAAC;IAClCC,IAAI;IACJH,YAAY;AACd;AAEA,8BAA8B;AAC9B,MAAMI,UAAU,MAAMC,IAAIP,OAAO,CAACQ,MAAM,CAAC;IACvCN,YAAY;IACZO,MAAM;QAAEC,OAAO;IAAQ;AACzB;AAEA,qBAAqB;AACrB,MAAMC,OAAO,MAAMX,QAAQY,UAAU,CAAC;IACpCC,MAAM;AACR;AAEA,qCAAqC;AACrC,MAAMC,SAAS,MAAMd,QAAQC,IAAI,CAAC;IAChCC,YAAY;IACZa,gBAAgB;AAClB;AAEA,iEAAiE;AACjE,MAAMf,QAAQgB,IAAI,CAACC,KAAK,CAAC;IAAEC,OAAO,CAAC;IAAGC,MAAM;AAAO;AACnD,MAAMZ,IAAIP,OAAO,CAACgB,IAAI,CAACI,GAAG,CAAC;IAAEC,QAAQ;AAAK;AAC1C,MAAMrB,QAAQgB,IAAI,CAACI,GAAG;AACtB,MAAMpB,QAAQgB,IAAI,CAACC,KAAK,CAAC;IAAEC,OAAO,CAAC;IAAGC,MAAM;AAAO;AAlCnD,WAAqC"}

package/dist/transforms/add-override-access-true/basic.output.js

@@ -0,0 +1,50 @@
+// payload.find() relying on the Payload 3 default
+const posts = await payload.find({
+    collection: 'posts',
+    overrideAccess: true
+});
+// payload.findByID() relying on the default
+const post = await payload.findByID({
+    id: 1,
+    collection: 'posts',
+    overrideAccess: true
+});
+// Reached through req.payload
+const created = await req.payload.create({
+    collection: 'posts',
+    data: {
+        title: 'hello'
+    },
+    overrideAccess: true
+});
+// A global operation
+const menu = await payload.findGlobal({
+    slug: 'menu',
+    overrideAccess: true
+});
+// Already explicit — must not change
+const scoped = await payload.find({
+    collection: 'posts',
+    overrideAccess: false
+});
+// Jobs Local API operations also relied on the Payload 3 default
+await payload.jobs.queue({
+    input: {},
+    task: 'sync',
+    overrideAccess: true
+});
+await req.payload.jobs.run({
+    silent: true,
+    overrideAccess: true
+});
+await payload.jobs.run({
+    overrideAccess: true
+});
+await payload.jobs.queue({
+    input: {},
+    task: 'sync',
+    overrideAccess: true
+});
+export { };
+
+//# sourceMappingURL=basic.output.js.map

package/dist/transforms/add-override-access-true/basic.output.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/transforms/add-override-access-true/basic.output.ts"],"sourcesContent":["import type { Config } from 'payload'\n\n// payload.find() relying on the Payload 3 default\nconst posts = await payload.find({\n  collection: 'posts',\n  overrideAccess: true,\n})\n\n// payload.findByID() relying on the default\nconst post = await payload.findByID({\n  id: 1,\n  collection: 'posts',\n  overrideAccess: true,\n})\n\n// Reached through req.payload\nconst created = await req.payload.create({\n  collection: 'posts',\n  data: { title: 'hello' },\n  overrideAccess: true,\n})\n\n// A global operation\nconst menu = await payload.findGlobal({\n  slug: 'menu',\n  overrideAccess: true,\n})\n\n// Already explicit — must not change\nconst scoped = await payload.find({\n  collection: 'posts',\n  overrideAccess: false,\n})\n\n// Jobs Local API operations also relied on the Payload 3 default\nawait payload.jobs.queue({ input: {}, task: 'sync', overrideAccess: true })\nawait req.payload.jobs.run({ silent: true, overrideAccess: true })\nawait payload.jobs.run({ overrideAccess: true })\nawait payload.jobs.queue({ input: {}, task: 'sync', overrideAccess: true } as never)\n"],"names":["posts","payload","find","collection","overrideAccess","post","findByID","id","created","req","create","data","title","menu","findGlobal","slug","scoped","jobs","queue","input","task","run","silent"],"mappings":"AAEA,kDAAkD;AAClD,MAAMA,QAAQ,MAAMC,QAAQC,IAAI,CAAC;IAC/BC,YAAY;IACZC,gBAAgB;AAClB;AAEA,4CAA4C;AAC5C,MAAMC,OAAO,MAAMJ,QAAQK,QAAQ,CAAC;IAClCC,IAAI;IACJJ,YAAY;IACZC,gBAAgB;AAClB;AAEA,8BAA8B;AAC9B,MAAMI,UAAU,MAAMC,IAAIR,OAAO,CAACS,MAAM,CAAC;IACvCP,YAAY;IACZQ,MAAM;QAAEC,OAAO;IAAQ;IACvBR,gBAAgB;AAClB;AAEA,qBAAqB;AACrB,MAAMS,OAAO,MAAMZ,QAAQa,UAAU,CAAC;IACpCC,MAAM;IACNX,gBAAgB;AAClB;AAEA,qCAAqC;AACrC,MAAMY,SAAS,MAAMf,QAAQC,IAAI,CAAC;IAChCC,YAAY;IACZC,gBAAgB;AAClB;AAEA,iEAAiE;AACjE,MAAMH,QAAQgB,IAAI,CAACC,KAAK,CAAC;IAAEC,OAAO,CAAC;IAAGC,MAAM;IAAQhB,gBAAgB;AAAK;AACzE,MAAMK,IAAIR,OAAO,CAACgB,IAAI,CAACI,GAAG,CAAC;IAAEC,QAAQ;IAAMlB,gBAAgB;AAAK;AAChE,MAAMH,QAAQgB,IAAI,CAACI,GAAG,CAAC;IAAEjB,gBAAgB;AAAK;AAC9C,MAAMH,QAAQgB,IAAI,CAACC,KAAK,CAAC;IAAEC,OAAO,CAAC;IAAGC,MAAM;IAAQhB,gBAAgB;AAAK;AAtCzE,WAAqC"}

package/dist/transforms/add-override-access-true/comment-between-properties.input.js

@@ -0,0 +1,11 @@
+// A comment between two properties previously corrupted the preceding comma
+// and placed the insert before the trailing property instead of at the end.
+const doc = await payload.findByID({
+    id,
+    collection,
+    req,
+    // Include trashed documents when the document being synced is trashed
+    trash: isTrashDocument
+});
+
+//# sourceMappingURL=comment-between-properties.input.js.map

package/dist/transforms/add-override-access-true/comment-between-properties.input.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/transforms/add-override-access-true/comment-between-properties.input.ts"],"sourcesContent":["// A comment between two properties previously corrupted the preceding comma\n// and placed the insert before the trailing property instead of at the end.\nconst doc = await payload.findByID({\n  id,\n  collection,\n  req,\n  // Include trashed documents when the document being synced is trashed\n  trash: isTrashDocument,\n})\n"],"names":["doc","payload","findByID","id","collection","req","trash","isTrashDocument"],"mappings":"AAAA,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAMA,MAAM,MAAMC,QAAQC,QAAQ,CAAC;IACjCC;IACAC;IACAC;IACA,sEAAsE;IACtEC,OAAOC;AACT"}

package/dist/transforms/add-override-access-true/comment-between-properties.output.js

@@ -0,0 +1,12 @@
+// A comment between two properties previously corrupted the preceding comma
+// and placed the insert before the trailing property instead of at the end.
+const doc = await payload.findByID({
+    id,
+    collection,
+    req,
+    // Include trashed documents when the document being synced is trashed
+    trash: isTrashDocument,
+    overrideAccess: true
+});
+
+//# sourceMappingURL=comment-between-properties.output.js.map

package/dist/transforms/add-override-access-true/comment-between-properties.output.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/transforms/add-override-access-true/comment-between-properties.output.ts"],"sourcesContent":["// A comment between two properties previously corrupted the preceding comma\n// and placed the insert before the trailing property instead of at the end.\nconst doc = await payload.findByID({\n  id,\n  collection,\n  req,\n  // Include trashed documents when the document being synced is trashed\n  trash: isTrashDocument,\n  overrideAccess: true,\n})\n"],"names":["doc","payload","findByID","id","collection","req","trash","isTrashDocument","overrideAccess"],"mappings":"AAAA,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAMA,MAAM,MAAMC,QAAQC,QAAQ,CAAC;IACjCC;IACAC;IACAC;IACA,sEAAsE;IACtEC,OAAOC;IACPC,gBAAgB;AAClB"}

package/dist/transforms/add-override-access-true/index.d.ts

@@ -0,0 +1,20 @@
+import type { Transform } from '../../types.js';
+/**
+ * Adds an explicit `overrideAccess: true` to Local API calls that omit it,
+ * preserving the Payload 3 default of skipping access control now that
+ * Payload 4 changes the default to `false`.
+ *
+ * Only matches calls on a receiver named `payload` — `payload.find(...)`,
+ * `req.payload.find(...)`, and their `payload.jobs.*` equivalents. Internal
+ * operations such as `findOperation(...)` are deliberately never matched: a
+ * missing value means `false` there, so inserting `true` would disable access
+ * control on every REST and GraphQL request.
+ *
+ * Detection is purely syntactic so the transform works on JavaScript projects,
+ * where ts-morph has no type information to consult.
+ *
+ * The property is appended rather than sorted. Callers are expected to run
+ * ESLint's `perfectionist/sort-objects` fixer afterwards.
+ */
+export declare const addOverrideAccessTrue: Transform;
+//# sourceMappingURL=index.d.ts.map

package/dist/transforms/add-override-access-true/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/transforms/add-override-access-true/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAkC/C;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAwEnC,CAAA"}

package/dist/transforms/add-override-access-true/index.js

@@ -0,0 +1,208 @@
+import { Node, SyntaxKind } from 'ts-morph';
+/**
+ * Local API methods that accept `overrideAccess`.
+ *
+ * Excludes `auth` and `verifyEmail`, which have no such option, and
+ * `resetPassword`, which has no destructuring default to preserve.
+ */ const LOCAL_API_OPERATIONS = new Set([
+    'count',
+    'countGlobalVersions',
+    'countVersions',
+    'create',
+    'delete',
+    'duplicate',
+    'find',
+    'findByID',
+    'findDistinct',
+    'findGlobal',
+    'findGlobalVersionByID',
+    'findGlobalVersions',
+    'findVersionByID',
+    'findVersions',
+    'forgotPassword',
+    'login',
+    'restoreGlobalVersion',
+    'restoreVersion',
+    'unlock',
+    'update',
+    'updateGlobal'
+]);
+const JOBS_LOCAL_API_OPERATIONS = new Set([
+    'cancel',
+    'cancelByID',
+    'queue',
+    'run',
+    'runByID'
+]);
+/**
+ * Adds an explicit `overrideAccess: true` to Local API calls that omit it,
+ * preserving the Payload 3 default of skipping access control now that
+ * Payload 4 changes the default to `false`.
+ *
+ * Only matches calls on a receiver named `payload` — `payload.find(...)`,
+ * `req.payload.find(...)`, and their `payload.jobs.*` equivalents. Internal
+ * operations such as `findOperation(...)` are deliberately never matched: a
+ * missing value means `false` there, so inserting `true` would disable access
+ * control on every REST and GraphQL request.
+ *
+ * Detection is purely syntactic so the transform works on JavaScript projects,
+ * where ts-morph has no type information to consult.
+ *
+ * The property is appended rather than sorted. Callers are expected to run
+ * ESLint's `perfectionist/sort-objects` fixer afterwards.
+ */ export const addOverrideAccessTrue = {
+    name: 'add-override-access-true',
+    apply: ({ project })=>{
+        const filesChanged = new Set();
+        for (const sourceFile of project.getSourceFiles()){
+            const insertions = [];
+            sourceFile.forEachDescendant((node)=>{
+                if (!Node.isCallExpression(node)) {
+                    return;
+                }
+                const callee = node.getExpression();
+                if (!Node.isPropertyAccessExpression(callee)) {
+                    return;
+                }
+                const receiver = callee.getExpression();
+                const isLocalAPICall = LOCAL_API_OPERATIONS.has(callee.getName()) && isPayloadReceiver({
+                    receiver
+                });
+                const isJobsLocalAPICall = JOBS_LOCAL_API_OPERATIONS.has(callee.getName()) && isPayloadJobsReceiver({
+                    receiver
+                });
+                if (!isLocalAPICall && !isJobsLocalAPICall) {
+                    return;
+                }
+                const [firstArg] = node.getArguments();
+                if (!firstArg && isJobsLocalAPICall) {
+                    const openParen = node.getFirstChildByKindOrThrow(SyntaxKind.OpenParenToken);
+                    insertions.push({
+                        position: openParen.getEnd(),
+                        text: '{ overrideAccess: true }'
+                    });
+                    return;
+                }
+                const object = firstArg && getObjectLiteral({
+                    node: firstArg
+                });
+                if (!object) {
+                    return;
+                }
+                if (object.getProperty('overrideAccess')) {
+                    return;
+                }
+                // A spread may already carry the property. Refuse to guess.
+                if (object.getProperties().some((property)=>Node.isSpreadAssignment(property))) {
+                    return;
+                }
+                insertions.push(planInsertion({
+                    object
+                }));
+            });
+            if (insertions.length === 0) {
+                continue;
+            }
+            // Applying back to front keeps every earlier offset valid, and means nested
+            // calls are handled before the call that contains them.
+            for (const { position, text } of insertions.sort((a, b)=>b.position - a.position)){
+                sourceFile.insertText(position, text);
+            }
+            filesChanged.add(sourceFile.getFilePath());
+        }
+        return {
+            filesChanged: [
+                ...filesChanged
+            ]
+        };
+    },
+    description: 'Add an explicit `overrideAccess: true` to Local API calls that omit it. Payload 4 changes the default to `false`; `true` preserves the Payload 3 default of skipping access control. Review each inserted value and switch to `false` wherever the operation acts on behalf of a user.'
+};
+/** Handles an object wrapped in the common `as SomeType` assertion. */ const getObjectLiteral = ({ node })=>{
+    if (Node.isObjectLiteralExpression(node)) {
+        return node;
+    }
+    if (Node.isAsExpression(node)) {
+        const expression = node.getExpression();
+        if (Node.isObjectLiteralExpression(expression)) {
+            return expression;
+        }
+    }
+};
+/**
+ * Works out where to put `overrideAccess: true` and what to write, without
+ * asking ts-morph to insert a property node.
+ *
+ * ts-morph's property insertion mishandles the comma whenever the object holds a
+ * comment — it emitted `req,,` for a comment sitting between two properties, and
+ * a double comma for one trailing the last property. Both produce a file that no
+ * longer parses, which in turn makes ESLint report nothing at all. Writing the
+ * text ourselves sidesteps the whole problem.
+ *
+ * The property goes last so the surrounding formatting is left alone. Callers are
+ * expected to run ESLint's `perfectionist/sort-objects` fixer afterwards.
+ */ const planInsertion = ({ object })=>{
+    const properties = object.getProperties();
+    const isSingleLine = !object.getText().includes('\n');
+    if (properties.length === 0) {
+        const openBrace = object.getFirstChildByKindOrThrow(SyntaxKind.OpenBraceToken);
+        return {
+            position: openBrace.getEnd(),
+            text: isSingleLine ? ' overrideAccess: true ' : `\n  overrideAccess: true,`
+        };
+    }
+    const lastProperty = properties[properties.length - 1];
+    const fullText = object.getSourceFile().getFullText();
+    // Step past trivia to find an existing trailing comma, including when a
+    // comment sits between the last property and the comma.
+    let cursor = lastProperty.getEnd();
+    while(cursor < object.getEnd()){
+        if (/\s/.test(fullText[cursor])) {
+            cursor += 1;
+        } else if (fullText.startsWith('//', cursor)) {
+            const newline = fullText.indexOf('\n', cursor + 2);
+            cursor = newline === -1 ? object.getEnd() : newline;
+        } else if (fullText.startsWith('/*', cursor)) {
+            const commentEnd = fullText.indexOf('*/', cursor + 2);
+            cursor = commentEnd === -1 ? object.getEnd() : commentEnd + 2;
+        } else {
+            break;
+        }
+    }
+    const hasTrailingComma = fullText[cursor] === ',';
+    const position = hasTrailingComma ? cursor + 1 : lastProperty.getEnd();
+    if (isSingleLine) {
+        return {
+            position,
+            text: hasTrailingComma ? ' overrideAccess: true,' : ', overrideAccess: true'
+        };
+    }
+    const indent = lastProperty.getIndentationText();
+    return {
+        position,
+        text: hasTrailingComma ? `\n${indent}overrideAccess: true,` : `,\n${indent}overrideAccess: true,`
+    };
+};
+/**
+ * True when the receiver of a call is a Payload instance, recognised
+ * syntactically as an identifier named `payload` or any property access ending
+ * in `.payload`.
+ */ const isPayloadReceiver = ({ receiver })=>{
+    if (Node.isIdentifier(receiver)) {
+        return receiver.getText() === 'payload';
+    }
+    if (Node.isPropertyAccessExpression(receiver)) {
+        return receiver.getName() === 'payload';
+    }
+    return false;
+};
+/** True for `payload.jobs` and property-access chains ending in `.payload.jobs`. */ const isPayloadJobsReceiver = ({ receiver })=>{
+    if (!Node.isPropertyAccessExpression(receiver) || receiver.getName() !== 'jobs') {
+        return false;
+    }
+    return isPayloadReceiver({
+        receiver: receiver.getExpression()
+    });
+};
+
+//# sourceMappingURL=index.js.map

package/dist/transforms/add-override-access-true/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/transforms/add-override-access-true/index.ts"],"sourcesContent":["import type { ObjectLiteralExpression } from 'ts-morph'\n\nimport { Node, SyntaxKind } from 'ts-morph'\n\nimport type { Transform } from '../../types.js'\n\n/**\n * Local API methods that accept `overrideAccess`.\n *\n * Excludes `auth` and `verifyEmail`, which have no such option, and\n * `resetPassword`, which has no destructuring default to preserve.\n */\nconst LOCAL_API_OPERATIONS = new Set([\n  'count',\n  'countGlobalVersions',\n  'countVersions',\n  'create',\n  'delete',\n  'duplicate',\n  'find',\n  'findByID',\n  'findDistinct',\n  'findGlobal',\n  'findGlobalVersionByID',\n  'findGlobalVersions',\n  'findVersionByID',\n  'findVersions',\n  'forgotPassword',\n  'login',\n  'restoreGlobalVersion',\n  'restoreVersion',\n  'unlock',\n  'update',\n  'updateGlobal',\n])\n\nconst JOBS_LOCAL_API_OPERATIONS = new Set(['cancel', 'cancelByID', 'queue', 'run', 'runByID'])\n\n/**\n * Adds an explicit `overrideAccess: true` to Local API calls that omit it,\n * preserving the Payload 3 default of skipping access control now that\n * Payload 4 changes the default to `false`.\n *\n * Only matches calls on a receiver named `payload` — `payload.find(...)`,\n * `req.payload.find(...)`, and their `payload.jobs.*` equivalents. Internal\n * operations such as `findOperation(...)` are deliberately never matched: a\n * missing value means `false` there, so inserting `true` would disable access\n * control on every REST and GraphQL request.\n *\n * Detection is purely syntactic so the transform works on JavaScript projects,\n * where ts-morph has no type information to consult.\n *\n * The property is appended rather than sorted. Callers are expected to run\n * ESLint's `perfectionist/sort-objects` fixer afterwards.\n */\nexport const addOverrideAccessTrue: Transform = {\n  name: 'add-override-access-true',\n  apply: ({ project }) => {\n    const filesChanged = new Set<string>()\n\n    for (const sourceFile of project.getSourceFiles()) {\n      const insertions: Insertion[] = []\n\n      sourceFile.forEachDescendant((node) => {\n        if (!Node.isCallExpression(node)) {\n          return\n        }\n\n        const callee = node.getExpression()\n\n        if (!Node.isPropertyAccessExpression(callee)) {\n          return\n        }\n\n        const receiver = callee.getExpression()\n        const isLocalAPICall =\n          LOCAL_API_OPERATIONS.has(callee.getName()) && isPayloadReceiver({ receiver })\n        const isJobsLocalAPICall =\n          JOBS_LOCAL_API_OPERATIONS.has(callee.getName()) && isPayloadJobsReceiver({ receiver })\n\n        if (!isLocalAPICall && !isJobsLocalAPICall) {\n          return\n        }\n\n        const [firstArg] = node.getArguments()\n\n        if (!firstArg && isJobsLocalAPICall) {\n          const openParen = node.getFirstChildByKindOrThrow(SyntaxKind.OpenParenToken)\n          insertions.push({ position: openParen.getEnd(), text: '{ overrideAccess: true }' })\n          return\n        }\n\n        const object = firstArg && getObjectLiteral({ node: firstArg })\n\n        if (!object) {\n          return\n        }\n\n        if (object.getProperty('overrideAccess')) {\n          return\n        }\n\n        // A spread may already carry the property. Refuse to guess.\n        if (object.getProperties().some((property) => Node.isSpreadAssignment(property))) {\n          return\n        }\n\n        insertions.push(planInsertion({ object }))\n      })\n\n      if (insertions.length === 0) {\n        continue\n      }\n\n      // Applying back to front keeps every earlier offset valid, and means nested\n      // calls are handled before the call that contains them.\n      for (const { position, text } of insertions.sort((a, b) => b.position - a.position)) {\n        sourceFile.insertText(position, text)\n      }\n\n      filesChanged.add(sourceFile.getFilePath())\n    }\n\n    return { filesChanged: [...filesChanged] }\n  },\n  description:\n    'Add an explicit `overrideAccess: true` to Local API calls that omit it. Payload 4 changes the default to `false`; `true` preserves the Payload 3 default of skipping access control. Review each inserted value and switch to `false` wherever the operation acts on behalf of a user.',\n}\n\ntype Insertion = {\n  position: number\n  text: string\n}\n\n/** Handles an object wrapped in the common `as SomeType` assertion. */\nconst getObjectLiteral = ({ node }: { node: Node }): ObjectLiteralExpression | undefined => {\n  if (Node.isObjectLiteralExpression(node)) {\n    return node\n  }\n\n  if (Node.isAsExpression(node)) {\n    const expression = node.getExpression()\n\n    if (Node.isObjectLiteralExpression(expression)) {\n      return expression\n    }\n  }\n}\n\n/**\n * Works out where to put `overrideAccess: true` and what to write, without\n * asking ts-morph to insert a property node.\n *\n * ts-morph's property insertion mishandles the comma whenever the object holds a\n * comment — it emitted `req,,` for a comment sitting between two properties, and\n * a double comma for one trailing the last property. Both produce a file that no\n * longer parses, which in turn makes ESLint report nothing at all. Writing the\n * text ourselves sidesteps the whole problem.\n *\n * The property goes last so the surrounding formatting is left alone. Callers are\n * expected to run ESLint's `perfectionist/sort-objects` fixer afterwards.\n */\nconst planInsertion = ({ object }: { object: ObjectLiteralExpression }): Insertion => {\n  const properties = object.getProperties()\n  const isSingleLine = !object.getText().includes('\\n')\n\n  if (properties.length === 0) {\n    const openBrace = object.getFirstChildByKindOrThrow(SyntaxKind.OpenBraceToken)\n\n    return {\n      position: openBrace.getEnd(),\n      text: isSingleLine ? ' overrideAccess: true ' : `\\n  overrideAccess: true,`,\n    }\n  }\n\n  const lastProperty = properties[properties.length - 1]!\n  const fullText = object.getSourceFile().getFullText()\n\n  // Step past trivia to find an existing trailing comma, including when a\n  // comment sits between the last property and the comma.\n  let cursor = lastProperty.getEnd()\n\n  while (cursor < object.getEnd()) {\n    if (/\\s/.test(fullText[cursor]!)) {\n      cursor += 1\n    } else if (fullText.startsWith('//', cursor)) {\n      const newline = fullText.indexOf('\\n', cursor + 2)\n      cursor = newline === -1 ? object.getEnd() : newline\n    } else if (fullText.startsWith('/*', cursor)) {\n      const commentEnd = fullText.indexOf('*/', cursor + 2)\n      cursor = commentEnd === -1 ? object.getEnd() : commentEnd + 2\n    } else {\n      break\n    }\n  }\n\n  const hasTrailingComma = fullText[cursor] === ','\n  const position = hasTrailingComma ? cursor + 1 : lastProperty.getEnd()\n\n  if (isSingleLine) {\n    return {\n      position,\n      text: hasTrailingComma ? ' overrideAccess: true,' : ', overrideAccess: true',\n    }\n  }\n\n  const indent = lastProperty.getIndentationText()\n\n  return {\n    position,\n    text: hasTrailingComma\n      ? `\\n${indent}overrideAccess: true,`\n      : `,\\n${indent}overrideAccess: true,`,\n  }\n}\n\n/**\n * True when the receiver of a call is a Payload instance, recognised\n * syntactically as an identifier named `payload` or any property access ending\n * in `.payload`.\n */\nconst isPayloadReceiver = ({ receiver }: { receiver: Node }): boolean => {\n  if (Node.isIdentifier(receiver)) {\n    return receiver.getText() === 'payload'\n  }\n\n  if (Node.isPropertyAccessExpression(receiver)) {\n    return receiver.getName() === 'payload'\n  }\n\n  return false\n}\n\n/** True for `payload.jobs` and property-access chains ending in `.payload.jobs`. */\nconst isPayloadJobsReceiver = ({ receiver }: { receiver: Node }): boolean => {\n  if (!Node.isPropertyAccessExpression(receiver) || receiver.getName() !== 'jobs') {\n    return false\n  }\n\n  return isPayloadReceiver({ receiver: receiver.getExpression() })\n}\n"],"names":["Node","SyntaxKind","LOCAL_API_OPERATIONS","Set","JOBS_LOCAL_API_OPERATIONS","addOverrideAccessTrue","name","apply","project","filesChanged","sourceFile","getSourceFiles","insertions","forEachDescendant","node","isCallExpression","callee","getExpression","isPropertyAccessExpression","receiver","isLocalAPICall","has","getName","isPayloadReceiver","isJobsLocalAPICall","isPayloadJobsReceiver","firstArg","getArguments","openParen","getFirstChildByKindOrThrow","OpenParenToken","push","position","getEnd","text","object","getObjectLiteral","getProperty","getProperties","some","property","isSpreadAssignment","planInsertion","length","sort","a","b","insertText","add","getFilePath","description","isObjectLiteralExpression","isAsExpression","expression","properties","isSingleLine","getText","includes","openBrace","OpenBraceToken","lastProperty","fullText","getSourceFile","getFullText","cursor","test","startsWith","newline","indexOf","commentEnd","hasTrailingComma","indent","getIndentationText","isIdentifier"],"mappings":"AAEA,SAASA,IAAI,EAAEC,UAAU,QAAQ,WAAU;AAI3C;;;;;CAKC,GACD,MAAMC,uBAAuB,IAAIC,IAAI;IACnC;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAED,MAAMC,4BAA4B,IAAID,IAAI;IAAC;IAAU;IAAc;IAAS;IAAO;CAAU;AAE7F;;;;;;;;;;;;;;;;CAgBC,GACD,OAAO,MAAME,wBAAmC;IAC9CC,MAAM;IACNC,OAAO,CAAC,EAAEC,OAAO,EAAE;QACjB,MAAMC,eAAe,IAAIN;QAEzB,KAAK,MAAMO,cAAcF,QAAQG,cAAc,GAAI;YACjD,MAAMC,aAA0B,EAAE;YAElCF,WAAWG,iBAAiB,CAAC,CAACC;gBAC5B,IAAI,CAACd,KAAKe,gBAAgB,CAACD,OAAO;oBAChC;gBACF;gBAEA,MAAME,SAASF,KAAKG,aAAa;gBAEjC,IAAI,CAACjB,KAAKkB,0BAA0B,CAACF,SAAS;oBAC5C;gBACF;gBAEA,MAAMG,WAAWH,OAAOC,aAAa;gBACrC,MAAMG,iBACJlB,qBAAqBmB,GAAG,CAACL,OAAOM,OAAO,OAAOC,kBAAkB;oBAAEJ;gBAAS;gBAC7E,MAAMK,qBACJpB,0BAA0BiB,GAAG,CAACL,OAAOM,OAAO,OAAOG,sBAAsB;oBAAEN;gBAAS;gBAEtF,IAAI,CAACC,kBAAkB,CAACI,oBAAoB;oBAC1C;gBACF;gBAEA,MAAM,CAACE,SAAS,GAAGZ,KAAKa,YAAY;gBAEpC,IAAI,CAACD,YAAYF,oBAAoB;oBACnC,MAAMI,YAAYd,KAAKe,0BAA0B,CAAC5B,WAAW6B,cAAc;oBAC3ElB,WAAWmB,IAAI,CAAC;wBAAEC,UAAUJ,UAAUK,MAAM;wBAAIC,MAAM;oBAA2B;oBACjF;gBACF;gBAEA,MAAMC,SAAST,YAAYU,iBAAiB;oBAAEtB,MAAMY;gBAAS;gBAE7D,IAAI,CAACS,QAAQ;oBACX;gBACF;gBAEA,IAAIA,OAAOE,WAAW,CAAC,mBAAmB;oBACxC;gBACF;gBAEA,4DAA4D;gBAC5D,IAAIF,OAAOG,aAAa,GAAGC,IAAI,CAAC,CAACC,WAAaxC,KAAKyC,kBAAkB,CAACD,YAAY;oBAChF;gBACF;gBAEA5B,WAAWmB,IAAI,CAACW,cAAc;oBAAEP;gBAAO;YACzC;YAEA,IAAIvB,WAAW+B,MAAM,KAAK,GAAG;gBAC3B;YACF;YAEA,4EAA4E;YAC5E,wDAAwD;YACxD,KAAK,MAAM,EAAEX,QAAQ,EAAEE,IAAI,EAAE,IAAItB,WAAWgC,IAAI,CAAC,CAACC,GAAGC,IAAMA,EAAEd,QAAQ,GAAGa,EAAEb,QAAQ,EAAG;gBACnFtB,WAAWqC,UAAU,CAACf,UAAUE;YAClC;YAEAzB,aAAauC,GAAG,CAACtC,WAAWuC,WAAW;QACzC;QAEA,OAAO;YAAExC,cAAc;mBAAIA;aAAa;QAAC;IAC3C;IACAyC,aACE;AACJ,EAAC;AAOD,qEAAqE,GACrE,MAAMd,mBAAmB,CAAC,EAAEtB,IAAI,EAAkB;IAChD,IAAId,KAAKmD,yBAAyB,CAACrC,OAAO;QACxC,OAAOA;IACT;IAEA,IAAId,KAAKoD,cAAc,CAACtC,OAAO;QAC7B,MAAMuC,aAAavC,KAAKG,aAAa;QAErC,IAAIjB,KAAKmD,yBAAyB,CAACE,aAAa;YAC9C,OAAOA;QACT;IACF;AACF;AAEA;;;;;;;;;;;;CAYC,GACD,MAAMX,gBAAgB,CAAC,EAAEP,MAAM,EAAuC;IACpE,MAAMmB,aAAanB,OAAOG,aAAa;IACvC,MAAMiB,eAAe,CAACpB,OAAOqB,OAAO,GAAGC,QAAQ,CAAC;IAEhD,IAAIH,WAAWX,MAAM,KAAK,GAAG;QAC3B,MAAMe,YAAYvB,OAAON,0BAA0B,CAAC5B,WAAW0D,cAAc;QAE7E,OAAO;YACL3B,UAAU0B,UAAUzB,MAAM;YAC1BC,MAAMqB,eAAe,2BAA2B,CAAC,yBAAyB,CAAC;QAC7E;IACF;IAEA,MAAMK,eAAeN,UAAU,CAACA,WAAWX,MAAM,GAAG,EAAE;IACtD,MAAMkB,WAAW1B,OAAO2B,aAAa,GAAGC,WAAW;IAEnD,wEAAwE;IACxE,wDAAwD;IACxD,IAAIC,SAASJ,aAAa3B,MAAM;IAEhC,MAAO+B,SAAS7B,OAAOF,MAAM,GAAI;QAC/B,IAAI,KAAKgC,IAAI,CAACJ,QAAQ,CAACG,OAAO,GAAI;YAChCA,UAAU;QACZ,OAAO,IAAIH,SAASK,UAAU,CAAC,MAAMF,SAAS;YAC5C,MAAMG,UAAUN,SAASO,OAAO,CAAC,MAAMJ,SAAS;YAChDA,SAASG,YAAY,CAAC,IAAIhC,OAAOF,MAAM,KAAKkC;QAC9C,OAAO,IAAIN,SAASK,UAAU,CAAC,MAAMF,SAAS;YAC5C,MAAMK,aAAaR,SAASO,OAAO,CAAC,MAAMJ,SAAS;YACnDA,SAASK,eAAe,CAAC,IAAIlC,OAAOF,MAAM,KAAKoC,aAAa;QAC9D,OAAO;YACL;QACF;IACF;IAEA,MAAMC,mBAAmBT,QAAQ,CAACG,OAAO,KAAK;IAC9C,MAAMhC,WAAWsC,mBAAmBN,SAAS,IAAIJ,aAAa3B,MAAM;IAEpE,IAAIsB,cAAc;QAChB,OAAO;YACLvB;YACAE,MAAMoC,mBAAmB,2BAA2B;QACtD;IACF;IAEA,MAAMC,SAASX,aAAaY,kBAAkB;IAE9C,OAAO;QACLxC;QACAE,MAAMoC,mBACF,CAAC,EAAE,EAAEC,OAAO,qBAAqB,CAAC,GAClC,CAAC,GAAG,EAAEA,OAAO,qBAAqB,CAAC;IACzC;AACF;AAEA;;;;CAIC,GACD,MAAMhD,oBAAoB,CAAC,EAAEJ,QAAQ,EAAsB;IACzD,IAAInB,KAAKyE,YAAY,CAACtD,WAAW;QAC/B,OAAOA,SAASqC,OAAO,OAAO;IAChC;IAEA,IAAIxD,KAAKkB,0BAA0B,CAACC,WAAW;QAC7C,OAAOA,SAASG,OAAO,OAAO;IAChC;IAEA,OAAO;AACT;AAEA,kFAAkF,GAClF,MAAMG,wBAAwB,CAAC,EAAEN,QAAQ,EAAsB;IAC7D,IAAI,CAACnB,KAAKkB,0BAA0B,CAACC,aAAaA,SAASG,OAAO,OAAO,QAAQ;QAC/E,OAAO;IACT;IAEA,OAAOC,kBAAkB;QAAEJ,UAAUA,SAASF,aAAa;IAAG;AAChE"}

package/dist/transforms/add-override-access-true/javascript.input.d.ts

@@ -0,0 +1,6 @@
+export declare const run: (payload: any, req: any) => Promise<{
+    created: any;
+    posts: any;
+    scoped: any;
+}>;
+//# sourceMappingURL=javascript.input.d.ts.map

package/dist/transforms/add-override-access-true/javascript.input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"javascript.input.d.ts","sourceRoot":"","sources":["../../../src/transforms/add-override-access-true/javascript.input.js"],"names":[],"mappings":"AAGA,eAAO,MAAM,GAAG;;;;EAgBf,CAAA"}

package/dist/transforms/add-override-access-true/javascript.input.js

@@ -0,0 +1,24 @@
+// A JavaScript project has no tsconfig.json, so ts-morph has no type
+// information. Detection must stay purely syntactic.
+export const run = async (payload, req)=>{
+    const posts = await payload.find({
+        collection: 'posts'
+    });
+    const created = await req.payload.create({
+        collection: 'posts',
+        data: {
+            title: 'hello'
+        }
+    });
+    const scoped = await payload.find({
+        collection: 'posts',
+        overrideAccess: false
+    });
+    return {
+        created,
+        posts,
+        scoped
+    };
+};
+
+//# sourceMappingURL=javascript.input.js.map

package/dist/transforms/add-override-access-true/javascript.input.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/transforms/add-override-access-true/javascript.input.js"],"sourcesContent":["// A JavaScript project has no tsconfig.json, so ts-morph has no type\n// information. Detection must stay purely syntactic.\n\nexport const run = async (payload, req) => {\n  const posts = await payload.find({\n    collection: 'posts',\n  })\n\n  const created = await req.payload.create({\n    collection: 'posts',\n    data: { title: 'hello' },\n  })\n\n  const scoped = await payload.find({\n    collection: 'posts',\n    overrideAccess: false,\n  })\n\n  return { created, posts, scoped }\n}\n"],"names":["run","payload","req","posts","find","collection","created","create","data","title","scoped","overrideAccess"],"mappings":"AAAA,qEAAqE;AACrE,qDAAqD;AAErD,OAAO,MAAMA,MAAM,OAAOC,SAASC;IACjC,MAAMC,QAAQ,MAAMF,QAAQG,IAAI,CAAC;QAC/BC,YAAY;IACd;IAEA,MAAMC,UAAU,MAAMJ,IAAID,OAAO,CAACM,MAAM,CAAC;QACvCF,YAAY;QACZG,MAAM;YAAEC,OAAO;QAAQ;IACzB;IAEA,MAAMC,SAAS,MAAMT,QAAQG,IAAI,CAAC;QAChCC,YAAY;QACZM,gBAAgB;IAClB;IAEA,OAAO;QAAEL;QAASH;QAAOO;IAAO;AAClC,EAAC"}

package/dist/transforms/add-override-access-true/javascript.output.d.ts

@@ -0,0 +1,6 @@
+export declare const run: (payload: any, req: any) => Promise<{
+    created: any;
+    posts: any;
+    scoped: any;
+}>;
+//# sourceMappingURL=javascript.output.d.ts.map

package/dist/transforms/add-override-access-true/javascript.output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"javascript.output.d.ts","sourceRoot":"","sources":["../../../src/transforms/add-override-access-true/javascript.output.js"],"names":[],"mappings":"AAGA,eAAO,MAAM,GAAG;;;;EAkBf,CAAA"}

package/dist/transforms/add-override-access-true/javascript.output.js

@@ -0,0 +1,26 @@
+// A JavaScript project has no tsconfig.json, so ts-morph has no type
+// information. Detection must stay purely syntactic.
+export const run = async (payload, req)=>{
+    const posts = await payload.find({
+        collection: 'posts',
+        overrideAccess: true
+    });
+    const created = await req.payload.create({
+        collection: 'posts',
+        data: {
+            title: 'hello'
+        },
+        overrideAccess: true
+    });
+    const scoped = await payload.find({
+        collection: 'posts',
+        overrideAccess: false
+    });
+    return {
+        created,
+        posts,
+        scoped
+    };
+};
+
+//# sourceMappingURL=javascript.output.js.map

package/dist/transforms/add-override-access-true/javascript.output.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/transforms/add-override-access-true/javascript.output.js"],"sourcesContent":["// A JavaScript project has no tsconfig.json, so ts-morph has no type\n// information. Detection must stay purely syntactic.\n\nexport const run = async (payload, req) => {\n  const posts = await payload.find({\n    collection: 'posts',\n    overrideAccess: true,\n  })\n\n  const created = await req.payload.create({\n    collection: 'posts',\n    data: { title: 'hello' },\n    overrideAccess: true,\n  })\n\n  const scoped = await payload.find({\n    collection: 'posts',\n    overrideAccess: false,\n  })\n\n  return { created, posts, scoped }\n}\n"],"names":["run","payload","req","posts","find","collection","overrideAccess","created","create","data","title","scoped"],"mappings":"AAAA,qEAAqE;AACrE,qDAAqD;AAErD,OAAO,MAAMA,MAAM,OAAOC,SAASC;IACjC,MAAMC,QAAQ,MAAMF,QAAQG,IAAI,CAAC;QAC/BC,YAAY;QACZC,gBAAgB;IAClB;IAEA,MAAMC,UAAU,MAAML,IAAID,OAAO,CAACO,MAAM,CAAC;QACvCH,YAAY;QACZI,MAAM;YAAEC,OAAO;QAAQ;QACvBJ,gBAAgB;IAClB;IAEA,MAAMK,SAAS,MAAMV,QAAQG,IAAI,CAAC;QAChCC,YAAY;QACZC,gBAAgB;IAClB;IAEA,OAAO;QAAEC;QAASJ;QAAOQ;IAAO;AAClC,EAAC"}

package/dist/transforms/add-override-access-true/non-matching.input.js

@@ -0,0 +1,42 @@
+import { findOperation, updateOperation } from 'payload';
+// Internal operations: a missing value means `false` here, so inserting `true`
+// would disable access control on every REST and GraphQL request.
+const internalFind = await findOperation({
+    collection,
+    req
+});
+const internalUpdate = await updateOperation({
+    collection,
+    data: {
+        title: 'hello'
+    },
+    req
+});
+// Already required in Payload 3 — never touched.
+const reset = await payload.resetPassword({
+    collection: 'users',
+    data: {
+        password: 'x',
+        token: 'y'
+    }
+});
+// No overrideAccess option exists on these.
+const authed = await payload.auth({
+    headers: req.headers
+});
+const verified = await payload.verifyEmail({
+    collection: 'users',
+    token: 'y'
+});
+// A spread may already carry the property. The transform must not guess.
+const spread = await payload.find({
+    ...baseArgs
+});
+// Not a Payload receiver.
+const elsewhere = await someService.find({
+    collection: 'posts'
+});
+// Not an object literal argument.
+const forwarded = await payload.find(buildArgs());
+
+//# sourceMappingURL=non-matching.input.js.map

package/dist/transforms/add-override-access-true/non-matching.input.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/transforms/add-override-access-true/non-matching.input.ts"],"sourcesContent":["import { findOperation, updateOperation } from 'payload'\n\n// Internal operations: a missing value means `false` here, so inserting `true`\n// would disable access control on every REST and GraphQL request.\nconst internalFind = await findOperation({\n  collection,\n  req,\n})\n\nconst internalUpdate = await updateOperation({\n  collection,\n  data: { title: 'hello' },\n  req,\n})\n\n// Already required in Payload 3 — never touched.\nconst reset = await payload.resetPassword({\n  collection: 'users',\n  data: { password: 'x', token: 'y' },\n})\n\n// No overrideAccess option exists on these.\nconst authed = await payload.auth({\n  headers: req.headers,\n})\n\nconst verified = await payload.verifyEmail({\n  collection: 'users',\n  token: 'y',\n})\n\n// A spread may already carry the property. The transform must not guess.\nconst spread = await payload.find({\n  ...baseArgs,\n})\n\n// Not a Payload receiver.\nconst elsewhere = await someService.find({\n  collection: 'posts',\n})\n\n// Not an object literal argument.\nconst forwarded = await payload.find(buildArgs())\n"],"names":["findOperation","updateOperation","internalFind","collection","req","internalUpdate","data","title","reset","payload","resetPassword","password","token","authed","auth","headers","verified","verifyEmail","spread","find","baseArgs","elsewhere","someService","forwarded","buildArgs"],"mappings":"AAAA,SAASA,aAAa,EAAEC,eAAe,QAAQ,UAAS;AAExD,+EAA+E;AAC/E,kEAAkE;AAClE,MAAMC,eAAe,MAAMF,cAAc;IACvCG;IACAC;AACF;AAEA,MAAMC,iBAAiB,MAAMJ,gBAAgB;IAC3CE;IACAG,MAAM;QAAEC,OAAO;IAAQ;IACvBH;AACF;AAEA,iDAAiD;AACjD,MAAMI,QAAQ,MAAMC,QAAQC,aAAa,CAAC;IACxCP,YAAY;IACZG,MAAM;QAAEK,UAAU;QAAKC,OAAO;IAAI;AACpC;AAEA,4CAA4C;AAC5C,MAAMC,SAAS,MAAMJ,QAAQK,IAAI,CAAC;IAChCC,SAASX,IAAIW,OAAO;AACtB;AAEA,MAAMC,WAAW,MAAMP,QAAQQ,WAAW,CAAC;IACzCd,YAAY;IACZS,OAAO;AACT;AAEA,yEAAyE;AACzE,MAAMM,SAAS,MAAMT,QAAQU,IAAI,CAAC;IAChC,GAAGC,QAAQ;AACb;AAEA,0BAA0B;AAC1B,MAAMC,YAAY,MAAMC,YAAYH,IAAI,CAAC;IACvChB,YAAY;AACd;AAEA,kCAAkC;AAClC,MAAMoB,YAAY,MAAMd,QAAQU,IAAI,CAACK"}

package/dist/transforms/add-override-access-true/non-matching.output.js

@@ -0,0 +1,42 @@
+import { findOperation, updateOperation } from 'payload';
+// Internal operations: a missing value means `false` here, so inserting `true`
+// would disable access control on every REST and GraphQL request.
+const internalFind = await findOperation({
+    collection,
+    req
+});
+const internalUpdate = await updateOperation({
+    collection,
+    data: {
+        title: 'hello'
+    },
+    req
+});
+// Already required in Payload 3 — never touched.
+const reset = await payload.resetPassword({
+    collection: 'users',
+    data: {
+        password: 'x',
+        token: 'y'
+    }
+});
+// No overrideAccess option exists on these.
+const authed = await payload.auth({
+    headers: req.headers
+});
+const verified = await payload.verifyEmail({
+    collection: 'users',
+    token: 'y'
+});
+// A spread may already carry the property. The transform must not guess.
+const spread = await payload.find({
+    ...baseArgs
+});
+// Not a Payload receiver.
+const elsewhere = await someService.find({
+    collection: 'posts'
+});
+// Not an object literal argument.
+const forwarded = await payload.find(buildArgs());
+
+//# sourceMappingURL=non-matching.output.js.map

package/dist/transforms/add-override-access-true/non-matching.output.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/transforms/add-override-access-true/non-matching.output.ts"],"sourcesContent":["import { findOperation, updateOperation } from 'payload'\n\n// Internal operations: a missing value means `false` here, so inserting `true`\n// would disable access control on every REST and GraphQL request.\nconst internalFind = await findOperation({\n  collection,\n  req,\n})\n\nconst internalUpdate = await updateOperation({\n  collection,\n  data: { title: 'hello' },\n  req,\n})\n\n// Already required in Payload 3 — never touched.\nconst reset = await payload.resetPassword({\n  collection: 'users',\n  data: { password: 'x', token: 'y' },\n})\n\n// No overrideAccess option exists on these.\nconst authed = await payload.auth({\n  headers: req.headers,\n})\n\nconst verified = await payload.verifyEmail({\n  collection: 'users',\n  token: 'y',\n})\n\n// A spread may already carry the property. The transform must not guess.\nconst spread = await payload.find({\n  ...baseArgs,\n})\n\n// Not a Payload receiver.\nconst elsewhere = await someService.find({\n  collection: 'posts',\n})\n\n// Not an object literal argument.\nconst forwarded = await payload.find(buildArgs())\n"],"names":["findOperation","updateOperation","internalFind","collection","req","internalUpdate","data","title","reset","payload","resetPassword","password","token","authed","auth","headers","verified","verifyEmail","spread","find","baseArgs","elsewhere","someService","forwarded","buildArgs"],"mappings":"AAAA,SAASA,aAAa,EAAEC,eAAe,QAAQ,UAAS;AAExD,+EAA+E;AAC/E,kEAAkE;AAClE,MAAMC,eAAe,MAAMF,cAAc;IACvCG;IACAC;AACF;AAEA,MAAMC,iBAAiB,MAAMJ,gBAAgB;IAC3CE;IACAG,MAAM;QAAEC,OAAO;IAAQ;IACvBH;AACF;AAEA,iDAAiD;AACjD,MAAMI,QAAQ,MAAMC,QAAQC,aAAa,CAAC;IACxCP,YAAY;IACZG,MAAM;QAAEK,UAAU;QAAKC,OAAO;IAAI;AACpC;AAEA,4CAA4C;AAC5C,MAAMC,SAAS,MAAMJ,QAAQK,IAAI,CAAC;IAChCC,SAASX,IAAIW,OAAO;AACtB;AAEA,MAAMC,WAAW,MAAMP,QAAQQ,WAAW,CAAC;IACzCd,YAAY;IACZS,OAAO;AACT;AAEA,yEAAyE;AACzE,MAAMM,SAAS,MAAMT,QAAQU,IAAI,CAAC;IAChC,GAAGC,QAAQ;AACb;AAEA,0BAA0B;AAC1B,MAAMC,YAAY,MAAMC,YAAYH,IAAI,CAAC;IACvChB,YAAY;AACd;AAEA,kCAAkC;AAClC,MAAMoB,YAAY,MAAMd,QAAQU,IAAI,CAACK"}

package/dist/transforms/add-override-access-true/single-line.input.js

@@ -0,0 +1,13 @@
+// A single-line object should stay on one line rather than being split open.
+const posts = await payload.find({
+    collection: 'posts'
+});
+// Trailing comma on one line.
+const one = await payload.findByID({
+    id,
+    collection: 'posts'
+});
+// An empty argument object.
+const all = await payload.find({});
+
+//# sourceMappingURL=single-line.input.js.map

package/dist/transforms/add-override-access-true/single-line.input.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/transforms/add-override-access-true/single-line.input.ts"],"sourcesContent":["// A single-line object should stay on one line rather than being split open.\nconst posts = await payload.find({ collection: 'posts' })\n\n// Trailing comma on one line.\nconst one = await payload.findByID({ id, collection: 'posts', })\n\n// An empty argument object.\nconst all = await payload.find({})\n"],"names":["posts","payload","find","collection","one","findByID","id","all"],"mappings":"AAAA,6EAA6E;AAC7E,MAAMA,QAAQ,MAAMC,QAAQC,IAAI,CAAC;IAAEC,YAAY;AAAQ;AAEvD,8BAA8B;AAC9B,MAAMC,MAAM,MAAMH,QAAQI,QAAQ,CAAC;IAAEC;IAAIH,YAAY;AAAS;AAE9D,4BAA4B;AAC5B,MAAMI,MAAM,MAAMN,QAAQC,IAAI,CAAC,CAAC"}

package/dist/transforms/add-override-access-true/single-line.output.js

@@ -0,0 +1,17 @@
+// A single-line object should stay on one line rather than being split open.
+const posts = await payload.find({
+    collection: 'posts',
+    overrideAccess: true
+});
+// Trailing comma on one line.
+const one = await payload.findByID({
+    id,
+    collection: 'posts',
+    overrideAccess: true
+});
+// An empty argument object.
+const all = await payload.find({
+    overrideAccess: true
+});
+
+//# sourceMappingURL=single-line.output.js.map

package/dist/transforms/add-override-access-true/single-line.output.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/transforms/add-override-access-true/single-line.output.ts"],"sourcesContent":["// A single-line object should stay on one line rather than being split open.\nconst posts = await payload.find({ collection: 'posts', overrideAccess: true })\n\n// Trailing comma on one line.\nconst one = await payload.findByID({ id, collection: 'posts', overrideAccess: true, })\n\n// An empty argument object.\nconst all = await payload.find({ overrideAccess: true })\n"],"names":["posts","payload","find","collection","overrideAccess","one","findByID","id","all"],"mappings":"AAAA,6EAA6E;AAC7E,MAAMA,QAAQ,MAAMC,QAAQC,IAAI,CAAC;IAAEC,YAAY;IAASC,gBAAgB;AAAK;AAE7E,8BAA8B;AAC9B,MAAMC,MAAM,MAAMJ,QAAQK,QAAQ,CAAC;IAAEC;IAAIJ,YAAY;IAASC,gBAAgB;AAAM;AAEpF,4BAA4B;AAC5B,MAAMI,MAAM,MAAMP,QAAQC,IAAI,CAAC;IAAEE,gBAAgB;AAAK"}