fix: normalize hashInput to use resolved StrongRefs instead of raw params

- Use locationRef (resolved StrongRef) instead of params.location which may be Blob
- Use contributorsData (processed canonical format) instead of params.contributions
- Extract image CID string instead of full imageBlobRef object
- Use canonical rights object with only {name, type, description}

This ensures sha256Hash() receives only JSON-serializable values and produces
deterministic rKeys regardless of input format (Blob vs URI vs StrongRef).

Author: s-adamantine

.changeset/wise-papayas-sing.md

@@ -3,3 +3,6 @@
 ---
 
 feat: implement pre-generation of rKeys for activity claims using deterministic content hashing (SHA-256).
+
+fix: normalize hashInput in `createHypercertRecord()` to use resolved StrongRefs (`locationRef`, `contributorsData`)
+instead of raw params which may contain non-serializable Blobs or inconsistent formats, ensuring stable rKey generation.

packages/sdk-core/src/repository/HypercertOperationsImpl.ts

@@ -315,23 +315,36 @@ export class HypercertOperationsImpl extends EventEmitter<HypercertEvents> imple
     }
 
     // Generate rKey from stable content hash (idempotency)
-    // Hash the complete claim record including all StrongRefs and embedded data
-    // These define the claim's identity per the lexicon.
+    // Use NORMALIZED values (already resolved StrongRefs and processed data)
+    // to ensure JSON-serializability and deterministic hashing.
+    // Raw params.location can contain non-serializable Blobs (GeoJSON),
+    // and params.contributions can have arbitrary/inconsistent props.
     const hashInput = {
       title: params.title,
       description: params.description,
       shortDescription: params.shortDescription,
       workScope: params.workScope,
       startDate: params.startDate,
       endDate: params.endDate,
-      // Image blob reference (CID-based, stable)
-      imageRecord: imageBlobRef,
-      // Rights definition (what the user specified, not the generated CID)
-      rightsData: typeof params.rights === "object" ? params.rights : undefined,
-      // Location StrongRef - part of claim identity per lexicon
-      location: params.location,
-      // Contributors - part of claim identity per lexicon
-      contributors: params.contributions ? params.contributions : undefined,
+      // Image: extract CID string from blob ref (stable content hash)
+      // JsonBlobRef can have ref.$link (upload result) or cid (existing record)
+      imageRef: imageBlobRef
+        ? "ref" in imageBlobRef && imageBlobRef.ref
+          ? imageBlobRef.ref.$link
+          : "cid" in imageBlobRef
+            ? imageBlobRef.cid
+            : undefined
+        : undefined,
+      // Rights: canonical object with only known fields
+      rights: {
+        name: params.rights.name,
+        type: params.rights.type,
+        description: params.rights.description,
+      },
+      // Location: use resolved StrongRef (uri+cid), not raw params which may be Blob
+      locationRef: locationRef ? { uri: locationRef.uri, cid: locationRef.cid } : undefined,
+      // Contributors: use already-processed canonical format from processContributors()
+      contributors: contributorsData,
     };
 
     const contentHash = await sha256Hash(hashInput);