Dockerfile

@@ -0,0 +1,17 @@
+FROM node:22-alpine
+
+RUN corepack enable && corepack prepare pnpm@11.4.0 --activate
+
+WORKDIR /app
+
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
+RUN pnpm install --prod
+
+COPY src ./src
+COPY tsconfig.json ./
+
+ENV NODE_ENV=production
+ENV PORT=3000
+EXPOSE 3000
+
+CMD ["node", "--import", "tsx/esm", "src/index.ts"]

README.md

@@ -20,11 +20,20 @@ Set `NODE_ENV=test-local` in `.env` to bypass JWT expiry verification during loc
 
 ## Production
 
+Runs TypeScript directly via `tsx` (no compile step).
+
 ```bash
-pnpm install --omit=dev
+pnpm install --prod
 pnpm start
 ```
 
+Or with Docker:
+
+```bash
+docker build -t notification-wakeup-service .
+docker run -e FIREBASE_SERVICE_ACCOUNT_JSON='...' -p 3000:3000 notification-wakeup-service
+```
+
 Required environment variables:
 
 | Variable | Description |

package.json

@@ -3,26 +3,28 @@
   "version": "0.1.0",
   "private": true,
   "type": "module",
+  "packageManager": "pnpm@11.4.0",
   "scripts": {
     "dev": "tsx watch src/index.ts",
     "start": "tsx src/index.ts",
     "build": "tsc"
   },
   "dependencies": {
-    "@peculiar/asn1-ecc": "^2.3.8",
-    "@peculiar/asn1-schema": "^2.3.8",
-    "cbor-x": "^1.5.9",
+    "@peculiar/asn1-ecc": "^2.7.0",
+    "@peculiar/asn1-schema": "^2.7.0",
+    "cbor-x": "^1.6.4",
     "cors": "^2.8.6",
     "did-jwt": "^7.4.7",
     "did-resolver": "^4.1.0",
-    "express": "^5.1.0",
-    "firebase-admin": "^13.9.0"
+    "express": "^5.2.1",
+    "firebase-admin": "^13.10.0",
+    "tsx": "^4.22.3"
   },
   "devDependencies": {
+    "@types/express": "^5.0.6",
+    "@types/node": "^22.19.19",
     "@types/cors": "^2.8.19",
-    "@types/express": "^5.0.0",
-    "@types/node": "^22.10.0",
     "tsx": "^4.19.2",
-    "typescript": "^5.7.2"
+    "typescript": "^5.9.3"
   }
 }

pkgx.yaml

@@ -0,0 +1,2 @@
+dependencies:
+  pnpm.io: ^11

pnpm-workspace.yaml

@@ -0,0 +1,11 @@
+strictDepBuilds: false
+onlyBuiltDependencies:
+  - "@firebase/util"
+  - cbor-extract
+  - esbuild
+  - protobufjs
+allowBuilds:
+  '@firebase/util': set this to true or false
+  cbor-extract: set this to true or false
+  esbuild: set this to true or false
+  protobufjs: set this to true or false