1 files changed, 55 insertions, 0 deletions
diff --git a/scripts/publish-sandbox.js b/scripts/publish-sandbox.js
new file mode 100644
index 00000000..916089be
--- /dev/null
+++ b/scripts/publish-sandbox.js
@@ -0,0 +1,55 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+import { execSync } from 'child_process';
+
+const {
+  SANDBOX_IMAGE_REGISTRY,
+  SANDBOX_IMAGE_NAME,
+  npm_package_version,
+  DOCKER_DRY_RUN,
+} = process.env;
+
+if (!SANDBOX_IMAGE_REGISTRY) {
+  console.error(
+    'Error: SANDBOX_IMAGE_REGISTRY environment variable is not set.',
+  );
+  process.exit(1);
+}
+
+if (!SANDBOX_IMAGE_NAME) {
+  console.error('Error: SANDBOX_IMAGE_NAME environment variable is not set.');
+  process.exit(1);
+}
+
+if (!npm_package_version) {
+  console.error(
+    'Error: npm_package_version environment variable is not set (should be run via npm).',
+  );
+  process.exit(1);
+}
+
+const imageUri = `${SANDBOX_IMAGE_REGISTRY}/${SANDBOX_IMAGE_NAME}:${npm_package_version}`;
+
+if (DOCKER_DRY_RUN) {
+  console.log(`DRY RUN: Would execute: docker push "${imageUri}"`);
+} else {
+  console.log(`Executing: docker push "${imageUri}"`);
+  execSync(`docker push "${imageUri}"`, { stdio: 'inherit' });
+}