did

Decentralized identifiers (DIDs): the decentralized identity source that identifies a principal, counterpart to crypto's centralized JWT/JWKS. Supports did:key — offline and self-describing, encoding an Ed25519 public key directly in the identifier — and did:web, which is org/domain-anchored and resolves over an HTTPS seam. The module parses and inspects DID strings, produces DID documents, resolves them (offline or net-gated), and verifies a principal's proof-of-control.

did:key-create

[$did:key-create] -> string — Encode an Ed25519 public key as a self-describing did:key string.

did:peer-create

[$did:peer-create] -> string — Encode an Ed25519 public key as a did:peer numalgo-0 string — a pairwise identity resolved by the same offline synthesis as did:key but never published.

did:parse

[$did:parse] -> element — Parse a DID string into its structured components.

did:method

[$did:method] -> string — Extract the method name (e.g. key, web) from a DID string.

did:document

[$did:document] -> element — Build the DID document offline for self-describing methods such as did:key.

did:resolve

[$did:resolve] -> element — Resolve a DID to its document for any method, performing a net-gated HTTPS GET for did:web.

did:key-of

[$did:key-of] -> bytes — Recover the principal's public key bytes from a DID string.

did:verify-control

[$did:verify-control] -> bool — Verify proof-of-control: that the DID's key signed the given challenge, returning whether the signature is valid.