internal/

Package image holds pure operations over v1.Image / v1.ImageIndex values that stand on their own (multi-arch resolution, future diff helpers, ...).

Package imagefs reads the filesystem of an OCI/Docker image as the merged view that a running container would see, and extracts it to disk with path-traversal and absolute-symlink-rewrite protection.

Package imageio bridges v1.Image / v1.ImageIndex and the local filesystem: loading and saving tarballs (docker format) and OCI image layouts.

Package output renders imagefs data for `d8 cr fs` subcommands as human-readable text.

Package registry is the thin domain layer of `d8 cr` on top of go-containerregistry/pkg/v1/*.