@nx/angular 23.0.0 → 23.1.0-beta.1

package/dist/src/generators/setup-ssr/lib/generate-files.js

@@ -16,44 +16,22 @@ function generateSSRFiles(tree, options) {
         // server has already been added
         return;
     }
-    const { major: angularMajorVersion, version: angularVersion } = (0, version_utils_1.getInstalledAngularVersionInfo)(tree);
-    const baseFilesPath = (0, path_1.join)(__dirname, '..', 'files');
-    let pathToFiles;
-    if (angularMajorVersion >= 20) {
-        pathToFiles = (0, path_1.join)(baseFilesPath, 'v20+', options.isUsingApplicationBuilder
-            ? 'application-builder'
-            : 'server-builder', options.standalone ? 'standalone-src' : 'ngmodule-src');
-    }
-    else {
-        pathToFiles = (0, path_1.join)(baseFilesPath, 'v19', options.isUsingApplicationBuilder
-            ? 'application-builder'
-            : 'server-builder', options.standalone ? 'standalone-src' : 'ngmodule-src');
-    }
+    const { version: angularVersion } = (0, version_utils_1.getInstalledAngularVersionInfo)(tree);
+    const pathToFiles = (0, path_1.join)(__dirname, '..', 'files', 'v20+', options.isUsingApplicationBuilder
+        ? 'application-builder'
+        : 'server-builder', options.standalone ? 'standalone-src' : 'ngmodule-src');
     const sourceRoot = (0, internal_1.getProjectSourceRoot)(project, tree);
-    const ssrVersion = (0, devkit_1.getDependencyVersionFromPackageJson)(tree, '@angular/ssr');
-    const cleanedSsrVersion = ssrVersion
-        ? ((0, semver_1.clean)(ssrVersion) ?? (0, semver_1.coerce)(ssrVersion).version)
-        : null;
     const componentType = (0, artifact_types_1.getComponentType)(tree);
     const appComponentInfo = (0, app_components_info_1.getAppComponentInfo)(tree, componentType ? `.${componentType}` : '', project);
     const moduleTypeSeparator = (0, artifact_types_1.getModuleTypeSeparator)(tree);
-    const useBootstrapContext = 
     // https://github.com/angular/angular-cli/releases/tag/20.3.0
-    (0, semver_1.gte)(angularVersion, '20.3.0') ||
-        // https://github.com/angular/angular-cli/releases/tag/19.2.16
-        (angularMajorVersion === 19 && (0, semver_1.gte)(angularVersion, '19.2.16'));
+    const useBootstrapContext = (0, semver_1.gte)(angularVersion, '20.3.0');
     (0, devkit_1.generateFiles)(tree, pathToFiles, sourceRoot, {
         ...options,
-        provideServerRoutingFn: !cleanedSsrVersion || (0, semver_1.gte)(cleanedSsrVersion, '19.2.0')
-            ? 'provideServerRouting'
-            : 'provideServerRoutesConfig',
         appFileName: appComponentInfo.extensionlessFileName,
         appSymbolName: appComponentInfo.symbolName,
         moduleTypeSeparator,
         useBootstrapContext,
         tpl: '',
     });
-    if (angularMajorVersion === 19 && !options.serverRouting) {
-        tree.delete((0, devkit_1.joinPathFragments)(sourceRoot, 'app/app.routes.server.ts'));
-    }
 }

package/dist/src/generators/setup-ssr/lib/generate-server-ts-config.js

@@ -32,14 +32,7 @@ function generateTsConfigServerJsonForBrowserBuilder(tree, options) {
     const packageJson = (0, devkit_1.readJson)(tree, 'package.json');
     const hasLocalizePackage = !!packageJson.dependencies?.['@angular/localize'] ||
         !!packageJson.devDependencies?.['@angular/localize'];
-    const baseFilesPath = (0, path_1.join)(__dirname, '..', 'files');
-    let pathToFiles;
-    if (angularMajorVersion >= 20) {
-        pathToFiles = (0, path_1.join)(baseFilesPath, 'v20+', 'server-builder', 'root');
-    }
-    else {
-        pathToFiles = (0, path_1.join)(baseFilesPath, 'v19', 'server-builder', 'root');
-    }
+    const pathToFiles = (0, path_1.join)(__dirname, '..', 'files', 'v20+', 'server-builder', 'root');
     (0, devkit_1.generateFiles)(tree, pathToFiles, project.root, {
         ...options,
         rootOffset: (0, devkit_1.offsetFromRoot)(project.root),
@@ -54,18 +47,16 @@ function generateTsConfigServerJsonForBrowserBuilder(tree, options) {
         });
         return json;
     });
-    if (angularMajorVersion >= 20) {
-        (0, devkit_1.updateJson)(tree, options.buildTargetTsConfigPath, (json) => {
-            const exclude = new Set(json.exclude ?? []);
-            exclude.add(`src/${options.main}`);
-            exclude.add(`src/${options.serverFileName}`);
-            if (options.standalone) {
-                exclude.add('src/app/app.config.server.ts');
-            }
-            json.exclude = Array.from(exclude);
-            return json;
-        });
-    }
+    (0, devkit_1.updateJson)(tree, options.buildTargetTsConfigPath, (json) => {
+        const exclude = new Set(json.exclude ?? []);
+        exclude.add(`src/${options.main}`);
+        exclude.add(`src/${options.serverFileName}`);
+        if (options.standalone) {
+            exclude.add('src/app/app.config.server.ts');
+        }
+        json.exclude = Array.from(exclude);
+        return json;
+    });
     if (angularMajorVersion >= 21) {
         // remove module and moduleResolution from tsconfig.server.json
         (0, devkit_1.updateJson)(tree, tsconfigServerPath, (json) => {

package/dist/src/generators/setup-ssr/lib/normalize-options.js

@@ -1,29 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.normalizeOptions = normalizeOptions;
-const internal_1 = require("@nx/devkit/internal");
 const devkit_1 = require("@nx/devkit");
 const ast_utils_1 = require("../../../utils/nx-devkit/ast-utils");
-const version_utils_1 = require("../../utils/version-utils");
 async function normalizeOptions(tree, options) {
     const { targets, root } = (0, devkit_1.readProjectConfiguration)(tree, options.project);
     const isUsingApplicationBuilder = targets.build.executor === '@angular-devkit/build-angular:application' ||
         targets.build.executor === '@angular/build:application' ||
         targets.build.executor === '@nx/angular:application';
-    if (options.serverRouting === undefined && isUsingApplicationBuilder) {
-        const { major: angularMajorVersion } = (0, version_utils_1.getInstalledAngularVersionInfo)(tree);
-        if (angularMajorVersion === 19) {
-            options.serverRouting = await (0, internal_1.promptWhenInteractive)({
-                type: 'confirm',
-                name: 'serverRouting',
-                message: 'Would you like to use the Server Routing and App Engine APIs (Developer Preview) for this server application?',
-                initial: false,
-            }, { serverRouting: false }).then(({ serverRouting }) => serverRouting);
-        }
-        else {
-            options.serverRouting = true;
-        }
-    }
     const isStandaloneApp = (0, ast_utils_1.isNgStandaloneApp)(tree, options.project);
     return {
         project: options.project,
@@ -36,7 +20,6 @@ async function normalizeOptions(tree, options) {
         skipFormat: options.skipFormat ?? false,
         standalone: options.standalone ?? isStandaloneApp,
         hydration: options.hydration ?? true,
-        serverRouting: options.serverRouting,
         isUsingApplicationBuilder,
         buildTargetTsConfigPath: targets.build.options?.tsConfig ??
             (0, devkit_1.joinPathFragments)(root, 'tsconfig.app.json'),

package/dist/src/generators/setup-ssr/lib/update-project-config.js

@@ -35,12 +35,7 @@ function updateProjectConfigForApplicationBuilder(tree, options) {
     buildTarget.options.ssr = {
         entry: (0, devkit_1.joinPathFragments)(sourceRoot, options.serverFileName),
     };
-    if (options.serverRouting) {
-        buildTarget.options.outputMode = 'server';
-    }
-    else {
-        buildTarget.options.prerender = true;
-    }
+    buildTarget.options.outputMode = 'server';
     (0, devkit_1.updateProjectConfiguration)(tree, options.project, project);
 }
 function updateProjectConfigForBrowserBuilder(tree, options) {

package/dist/src/generators/setup-ssr/lib/validate-options.js

@@ -3,23 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateOptions = validateOptions;
 const devkit_1 = require("@nx/devkit");
 const validations_1 = require("../../utils/validations");
-const version_utils_1 = require("../../utils/version-utils");
 function validateOptions(tree, options) {
     validateProject(tree, options.project);
     validateBuildTarget(tree, options.project);
-    const { major: angularMajorVersion, version: angularVersion } = (0, version_utils_1.getInstalledAngularVersionInfo)(tree);
-    if (angularMajorVersion !== 19 && options.serverRouting !== undefined) {
-        throw new Error(`The "serverRouting" option is only supported in Angular versions 19.x.x. You are using Angular ${angularVersion}.`);
-    }
-    if (options.serverRouting) {
-        const { targets } = (0, devkit_1.readProjectConfiguration)(tree, options.project);
-        const isUsingApplicationBuilder = targets.build.executor === '@angular-devkit/build-angular:application' ||
-            targets.build.executor === '@angular/build:application' ||
-            targets.build.executor === '@nx/angular:application';
-        if (!isUsingApplicationBuilder) {
-            throw new Error('Server routing APIs can only be added to a project using the "application" builder.');
-        }
-    }
 }
 function validateProject(tree, project) {
     (0, validations_1.validateProject)(tree, project);

package/dist/src/generators/setup-ssr/schema.d.ts

@@ -8,7 +8,6 @@ export interface Schema {
   rootModuleClassName?: string;
   standalone?: boolean;
   hydration?: boolean;
-  serverRouting?: boolean;
   skipFormat?: boolean;
   skipPackageJson?: boolean;
 }

package/dist/src/generators/setup-ssr/schema.json

@@ -52,10 +52,6 @@
       "description": "Set up Hydration for the SSR application.",
       "default": true
     },
-    "serverRouting": {
-      "description": "Creates a server application using the Server Routing and App Engine APIs for application using the `application` builder (Developer Preview). _Note: this is only supported in Angular versions 19.x.x_. From Angular 20 onwards, SSR will always enable server routing when using the `application` builder.",
-      "type": "boolean"
-    },
     "skipFormat": {
       "type": "boolean",
       "description": "Skip formatting the workspace after the generator completes.",

package/dist/src/generators/utils/app-components-info.js

@@ -5,7 +5,6 @@ exports.getNxWelcomeComponentInfo = getNxWelcomeComponentInfo;
 const devkit_1 = require("@nx/devkit");
 const internal_1 = require("@nx/js/internal");
 const node_path_1 = require("node:path");
-const version_utils_1 = require("./version-utils");
 function getAppComponentInfo(tree, componentFileSuffix, project) {
     return getComponentInfo(tree, 'app', componentFileSuffix, project);
 }
@@ -25,10 +24,7 @@ function getComponentInfo(tree, component, componentFileSuffix, project) {
         }
     }
     if (!tree.exists(componentPath)) {
-        const { major: angularMajorVersion } = (0, version_utils_1.getInstalledAngularVersionInfo)(tree);
-        componentPath = (0, devkit_1.joinPathFragments)(sourceRoot, angularMajorVersion >= 20
-            ? `app/${component}.ts`
-            : `app/${component}.component.ts`);
+        componentPath = (0, devkit_1.joinPathFragments)(sourceRoot, `app/${component}.ts`);
     }
     const fileName = (0, node_path_1.basename)(componentPath);
     const extensionlessFileName = fileName.slice(0, -3);

package/dist/src/generators/utils/artifact-types.js

@@ -3,17 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getComponentType = getComponentType;
 exports.getModuleTypeSeparator = getModuleTypeSeparator;
 const devkit_1 = require("@nx/devkit");
-const version_utils_1 = require("./version-utils");
 function getComponentType(tree) {
     const nxJson = (0, devkit_1.readNxJson)(tree);
-    let componentType = nxJson.generators?.['@nx/angular:component']?.type ??
+    const componentType = nxJson.generators?.['@nx/angular:component']?.type ??
         nxJson.generators?.['@nx/angular']?.component?.type;
-    if (!componentType) {
-        const { major: angularMajorVersion } = (0, version_utils_1.getInstalledAngularVersionInfo)(tree);
-        if (angularMajorVersion < 20) {
-            componentType = 'component';
-        }
-    }
     return componentType;
 }
 function getModuleTypeSeparator(tree) {
@@ -26,8 +19,7 @@ function getModuleTypeSeparator(tree) {
         nxJson.generators?.['@schematics/angular:module']?.typeSeparator ??
         nxJson.generators?.['@schematics/angular']?.module?.typeSeparator;
     if (!typeSeparator) {
-        const { major: angularMajorVersion } = (0, version_utils_1.getInstalledAngularVersionInfo)(tree);
-        typeSeparator = angularMajorVersion >= 20 ? '-' : '.';
+        typeSeparator = '-';
     }
     return typeSeparator;
 }

package/dist/src/generators/utils/ensure-angular-dependencies.js

@@ -50,10 +50,5 @@ function ensureAngularDependencies(tree, zoneless) {
     const angularDevkitVersion = installedAngularDevkitVersion ?? pkgVersions.angularDevkitVersion;
     devDependencies['@angular-devkit/schematics'] = angularDevkitVersion;
     devDependencies['@schematics/angular'] = angularDevkitVersion;
-    const { major: angularMajorVersion } = (0, version_utils_1.getInstalledAngularVersionInfo)(tree);
-    if (angularMajorVersion < 20) {
-        devDependencies['@angular/build'] = angularDevkitVersion;
-        devDependencies['@angular-devkit/build-angular'] = angularDevkitVersion;
-    }
     return (0, devkit_1.addDependenciesToPackageJson)(tree, dependencies, devDependencies, undefined, true);
 }

package/dist/src/generators/utils/update-project-root-tsconfig.js

@@ -3,16 +3,16 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.extractTsConfigBase = void 0;
 exports.updateProjectRootTsConfig = updateProjectRootTsConfig;
 const devkit_1 = require("@nx/devkit");
-const js_1 = require("@nx/js");
-var js_2 = require("@nx/js");
-Object.defineProperty(exports, "extractTsConfigBase", { enumerable: true, get: function () { return js_2.extractTsConfigBase; } });
+const internal_1 = require("@nx/js/internal");
+var js_1 = require("@nx/js");
+Object.defineProperty(exports, "extractTsConfigBase", { enumerable: true, get: function () { return js_1.extractTsConfigBase; } });
 function updateProjectRootTsConfig(host, projectRoot, relativePathToRootTsConfig, isRootProject) {
     (0, devkit_1.updateJson)(host, `${projectRoot}/tsconfig.json`, (json) => {
         if (isRootProject) {
             // inline tsconfig.base.json into the project
             json.compileOnSave = false;
             json.compilerOptions = {
-                ...js_1.tsConfigBaseOptions,
+                ...(0, internal_1.getTsConfigBaseOptions)(host),
                 ...json.compilerOptions,
             };
             json.exclude = ['node_modules', 'tmp'];

package/dist/src/generators/utils/version-utils.d.ts

@@ -15,11 +15,6 @@ export declare function versions(tree: Tree): PackageCompatVersions;
 export declare function versions<V extends SupportedVersion>(tree: Tree, options: {
     minAngularMajorVersion: V;
 }): MinVersionReturnType<V>;
-/**
- * Temporary helper to abstract away the version of angular-rspack to be installed
- * until we stop supporting Angular 19.
- */
-export declare function getAngularRspackVersion(tree: Tree): string;
 type TakeUntil<Arr extends readonly any[], Target> = Arr extends readonly [
     infer Head,
     ...infer Rest

package/dist/src/generators/utils/version-utils.js

@@ -6,7 +6,6 @@ exports.getInstalledAngularMajorVersion = getInstalledAngularMajorVersion;
 exports.getInstalledAngularVersionInfo = getInstalledAngularVersionInfo;
 exports.getInstalledPackageVersionInfo = getInstalledPackageVersionInfo;
 exports.versions = versions;
-exports.getAngularRspackVersion = getAngularRspackVersion;
 const tslib_1 = require("tslib");
 const devkit_1 = require("@nx/devkit");
 const internal_1 = require("@nx/devkit/internal");
@@ -43,15 +42,3 @@ function versions(tree, options) {
     }
     return backward_compatible_versions_1.backwardCompatibleVersions[majorAngularVersion] ?? latestVersions;
 }
-/**
- * Temporary helper to abstract away the version of angular-rspack to be installed
- * until we stop supporting Angular 19.
- */
-function getAngularRspackVersion(tree) {
-    const majorAngularVersion = getInstalledAngularMajorVersion(tree);
-    // Starting with Angular 20, we can use an Angular Rspack version that is
-    // aligned with the Nx version
-    return majorAngularVersion === 19
-        ? backward_compatible_versions_1.backwardCompatibleVersions[19].angularRspackVersion
-        : latestVersions.nxVersion;
-}

package/dist/src/migrations/update-23-1-0/add-istanbul-instrumenter.d.ts

@@ -0,0 +1,2 @@
+import { type Tree } from '@nx/devkit';
+export default function (tree: Tree): Promise<import("@nx/devkit").GeneratorCallback>;

package/dist/src/migrations/update-23-1-0/add-istanbul-instrumenter.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = default_1;
+const devkit_1 = require("@nx/devkit");
+const targets_1 = require("../../utils/targets");
+// In v22 `istanbul-lib-instrument` is an optional peer dependency of
+// `@angular/build` used to instrument code for Karma coverage. Optional peers
+// are not installed automatically, so it must be added when Karma is in use.
+// Inlined here (not in `versions.ts`) because no generator installs it; only
+// this migration does. Mirrors Angular's `add-istanbul-instrumenter`.
+const istanbulLibInstrumentVersion = '^6.0.3';
+const karmaBuilders = [
+    '@angular-devkit/build-angular:karma',
+    '@angular/build:karma',
+];
+const unitTestBuilders = ['@angular/build:unit-test', '@nx/angular:unit-test'];
+// A target uses Karma when its builder is a Karma builder, or it's a unit-test
+// builder with `runner: karma` (in options or any configuration). `executors`
+// holds the candidate executor ids: a target's own executor, or those a project
+// `test` target inherits from an nx.json targetDefault (keyed by target name or
+// by executor).
+function usesKarma(executors, target) {
+    if (executors.some((e) => karmaBuilders.includes(e))) {
+        return true;
+    }
+    if (executors.some((e) => unitTestBuilders.includes(e))) {
+        for (const [, options] of (0, targets_1.allTargetOptions)(target)) {
+            if (options?.runner === 'karma') {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+async function default_1(tree) {
+    let needsInstrumenter = false;
+    // project.json targets
+    for (const [, project] of (0, devkit_1.getProjects)(tree)) {
+        needsInstrumenter = Object.values(project.targets ?? {}).some((target) => usesKarma([target.executor], target));
+        if (needsInstrumenter) {
+            break;
+        }
+    }
+    // nx.json targetDefaults: a project's empty `test` target can inherit a Karma
+    // executor/runner from a default.
+    if (!needsInstrumenter) {
+        const targetDefaults = (0, devkit_1.readNxJson)(tree)?.targetDefaults;
+        if (targetDefaults) {
+            needsInstrumenter = Object.entries(targetDefaults).some(([targetOrExecutor, config]) => usesKarma([targetOrExecutor, config.executor], config));
+        }
+    }
+    if (!needsInstrumenter) {
+        return;
+    }
+    return (0, devkit_1.addDependenciesToPackageJson)(tree, {}, { 'istanbul-lib-instrument': istanbulLibInstrumentVersion }, undefined, true);
+}

package/dist/src/migrations/update-23-1-0/add-istanbul-instrumenter.md

@@ -0,0 +1,65 @@
+#### Add `istanbul-lib-instrument` for Karma Coverage
+
+Angular v22 makes `istanbul-lib-instrument` an optional peer dependency of `@angular/build`, used to instrument code for Karma coverage. Since optional peers are not installed automatically, this migration adds `istanbul-lib-instrument` to `devDependencies` when the workspace has a project that runs unit tests with Karma, so Karma coverage keeps working. An existing version is preserved.
+
+Karma usage is detected on any target using the `@angular-devkit/build-angular:karma` or `@angular/build:karma` builders, or the `@angular/build:unit-test` / `@nx/angular:unit-test` executors with the `runner` option set to `karma`. Targets that inherit their executor or `runner` from an `nx.json` `targetDefaults` entry are detected too.
+
+#### Examples
+
+##### `project.json`
+
+Before:
+
+```jsonc {5}
+// project.json
+{
+  "targets": {
+    "test": {
+      "executor": "@nx/angular:unit-test",
+      "options": {
+        "runner": "karma",
+      },
+    },
+  },
+}
+```
+
+After (`package.json`):
+
+```jsonc {4}
+// package.json
+{
+  "devDependencies": {
+    "istanbul-lib-instrument": "^6.0.3",
+  },
+}
+```
+
+##### `nx.json` (`targetDefaults`)
+
+A project whose `test` target inherits its executor and `runner` from an `nx.json` `targetDefaults` entry is also detected:
+
+```jsonc {7}
+// nx.json
+{
+  "targetDefaults": {
+    "test": {
+      "executor": "@nx/angular:unit-test",
+      "options": {
+        "runner": "karma",
+      },
+    },
+  },
+}
+```
+
+```jsonc
+// apps/app1/project.json
+{
+  "targets": {
+    "test": {},
+  },
+}
+```
+
+`istanbul-lib-instrument` is added to `package.json` as shown above.

package/dist/src/migrations/update-23-1-0/add-trust-proxy-headers.d.ts

@@ -0,0 +1,2 @@
+import { type Tree } from '@nx/devkit';
+export default function (tree: Tree): Promise<void>;

package/dist/src/migrations/update-23-1-0/add-trust-proxy-headers.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = default_1;
+const tslib_1 = require("tslib");
+const devkit_1 = require("@nx/devkit");
+const ts = tslib_1.__importStar(require("typescript"));
+const file_change_recorder_1 = require("../../utils/file-change-recorder");
+const projects_1 = require("../utils/projects");
+const TODO_COMMENT = '// TODO: This is a security-sensitive option. Remove if not needed. ' +
+    'For more information, see https://angular.dev/best-practices/security#configuring-trusted-proxy-headers';
+const TRUST_PROXY_HEADERS = `trustProxyHeaders: ['x-forwarded-host', 'x-forwarded-proto'],`;
+async function default_1(tree) {
+    const projects = await (0, projects_1.getProjectsFilteredByDependencies)([
+        'npm:@angular/ssr',
+    ]);
+    for (const graphNode of projects) {
+        (0, devkit_1.visitNotIgnoredFiles)(tree, graphNode.data.root, (path) => {
+            if (!path.endsWith('.ts') || path.endsWith('.d.ts')) {
+                return;
+            }
+            const content = tree.read(path, 'utf-8');
+            // Skip already-migrated files and files not instantiating an SSR engine.
+            if (content.includes(TODO_COMMENT) ||
+                (!content.includes('AngularNodeAppEngine') &&
+                    !content.includes('AngularAppEngine'))) {
+                return;
+            }
+            const sourceFile = ts.createSourceFile(path, content, ts.ScriptTarget.Latest, true);
+            let recorder;
+            const visit = (node) => {
+                if (ts.isNewExpression(node) &&
+                    ts.isIdentifier(node.expression) &&
+                    (node.expression.text === 'AngularNodeAppEngine' ||
+                        node.expression.text === 'AngularAppEngine')) {
+                    if (!node.arguments || node.arguments.length === 0) {
+                        // No options object: insert one before the closing parenthesis.
+                        recorder ??= new file_change_recorder_1.FileChangeRecorder(tree, path);
+                        recorder.insertRight(node.end - 1, `{\n  ${TODO_COMMENT}\n  ${TRUST_PROXY_HEADERS}\n}`);
+                    }
+                    else if (ts.isObjectLiteralExpression(node.arguments[0])) {
+                        const optionsArg = node.arguments[0];
+                        const hasTrustProxyHeaders = optionsArg.properties.some((prop) => ts.isPropertyAssignment(prop) &&
+                            (ts.isIdentifier(prop.name) || ts.isStringLiteral(prop.name)) &&
+                            prop.name.text === 'trustProxyHeaders');
+                        if (!hasTrustProxyHeaders) {
+                            // Insert right after the opening brace of the options object.
+                            recorder ??= new file_change_recorder_1.FileChangeRecorder(tree, path);
+                            recorder.insertRight(optionsArg.getStart() + 1, `\n  ${TODO_COMMENT}\n  ${TRUST_PROXY_HEADERS}`);
+                        }
+                    }
+                }
+                ts.forEachChild(node, visit);
+            };
+            visit(sourceFile);
+            if (recorder) {
+                recorder.applyChanges();
+            }
+        });
+    }
+    await (0, devkit_1.formatFiles)(tree);
+}

package/dist/src/migrations/update-23-1-0/add-trust-proxy-headers.md

@@ -0,0 +1,48 @@
+#### Add `trustProxyHeaders` to SSR Engines
+
+Angular v22 adds a `trustProxyHeaders` option to `AngularNodeAppEngine` and `AngularAppEngine` that controls whether the `X-Forwarded-*` headers are trusted when resolving the incoming request URL. This migration adds the option to existing engine instantiations in SSR server files so the behavior is explicit, along with a TODO comment flagging it as security-sensitive. Instantiations that already set `trustProxyHeaders` are left unchanged.
+
+The migration scans the source files of projects that depend on `@angular/ssr` for `new AngularNodeAppEngine(...)` and `new AngularAppEngine(...)` expressions.
+
+#### Examples
+
+##### `server.ts`
+
+Before:
+
+```ts
+import { AngularNodeAppEngine } from '@angular/ssr/node';
+
+const angularApp = new AngularNodeAppEngine();
+```
+
+After:
+
+```ts
+import { AngularNodeAppEngine } from '@angular/ssr/node';
+
+const angularApp = new AngularNodeAppEngine({
+  // TODO: This is a security-sensitive option. Remove if not needed. For more information, see https://angular.dev/best-practices/security#configuring-trusted-proxy-headers
+  trustProxyHeaders: ['x-forwarded-host', 'x-forwarded-proto'],
+});
+```
+
+An existing options object is preserved, with `trustProxyHeaders` added alongside the current options:
+
+Before:
+
+```ts
+const angularApp = new AngularAppEngine({
+  allowedHosts: ['example.com'],
+});
+```
+
+After:
+
+```ts
+const angularApp = new AngularAppEngine({
+  // TODO: This is a security-sensitive option. Remove if not needed. For more information, see https://angular.dev/best-practices/security#configuring-trusted-proxy-headers
+  trustProxyHeaders: ['x-forwarded-host', 'x-forwarded-proto'],
+  allowedHosts: ['example.com'],
+});
+```

package/dist/src/migrations/update-23-1-0/rename-ssr-experimental-platform.d.ts

@@ -0,0 +1,2 @@
+import { type Tree } from '@nx/devkit';
+export default function (tree: Tree): Promise<void>;

package/dist/src/migrations/update-23-1-0/rename-ssr-experimental-platform.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = default_1;
+const devkit_1 = require("@nx/devkit");
+const targets_1 = require("../../utils/targets");
+// Application builders whose SSR `experimentalPlatform` option Angular v22
+// renamed to `platform`. This mirrors Angular's `update-workspace-config`
+// migration (which targets the upstream `@angular/build:application` and
+// `@angular-devkit/build-angular:application` builders) and additionally covers
+// the `@nx/angular:application` executor that wraps them, since Nx does not run
+// Angular's own ng-update migrations.
+const ssrApplicationExecutors = [
+    '@angular/build:application',
+    '@angular-devkit/build-angular:application',
+    '@nx/angular:application',
+];
+function renameSsrPlatform(target) {
+    let isUpdated = false;
+    for (const [, options] of (0, targets_1.allTargetOptions)(target)) {
+        const ssr = options.ssr;
+        if (!ssr || typeof ssr !== 'object') {
+            continue;
+        }
+        const platform = ssr.experimentalPlatform;
+        if (platform) {
+            ssr.platform = platform;
+            delete ssr.experimentalPlatform;
+            isUpdated = true;
+        }
+    }
+    return isUpdated;
+}
+async function default_1(tree) {
+    // project.json target options and configurations
+    for (const [projectName, project] of (0, devkit_1.getProjects)(tree)) {
+        if (project.projectType !== 'application') {
+            continue;
+        }
+        let isUpdated = false;
+        for (const target of Object.values(project.targets ?? {})) {
+            if (!ssrApplicationExecutors.includes(target.executor)) {
+                continue;
+            }
+            if (renameSsrPlatform(target)) {
+                isUpdated = true;
+            }
+        }
+        if (isUpdated) {
+            (0, devkit_1.updateProjectConfiguration)(tree, projectName, project);
+        }
+    }
+    // nx.json targetDefaults
+    const nxJson = (0, devkit_1.readNxJson)(tree);
+    if (nxJson?.targetDefaults) {
+        let isUpdated = false;
+        for (const [targetOrExecutor, targetConfig] of Object.entries(nxJson.targetDefaults)) {
+            if (!ssrApplicationExecutors.includes(targetOrExecutor) &&
+                !ssrApplicationExecutors.includes(targetConfig.executor)) {
+                continue;
+            }
+            if (renameSsrPlatform(targetConfig)) {
+                isUpdated = true;
+            }
+        }
+        if (isUpdated) {
+            (0, devkit_1.updateNxJson)(tree, nxJson);
+        }
+    }
+    await (0, devkit_1.formatFiles)(tree);
+}