diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..1b015ce
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,11 @@
+; pnpm settings — kept here (rather than in pnpm-workspace.yaml or
+; package.json#pnpm) because .npmrc is honored by every pnpm version we
+; run across CI (pnpm 10 via pnpm/action-setup) and Docker builds (pnpm 9
+; via corepack). The pnpm 10 migration moved onlyBuiltDependencies out of
+; package.json, but .npmrc remains supported and avoids the mismatch.
+only-built-dependencies[]=@nestjs/core
+only-built-dependencies[]=@prisma/client
+only-built-dependencies[]=@prisma/engines
+only-built-dependencies[]=msw
+only-built-dependencies[]=prisma
+only-built-dependencies[]=unrs-resolver