type: reference title: "Basemap development bundle evidence" description: "Reproducible installed-package measurements for the free basemap implementation." resource: "https://www.npmjs.com/package/@honua/sdk-js"

Basemap development bundle evidence

The optimized source is 97c6bb6e60c32bdf61edca6e5b77c72c7d2e083a, measured from a clean worktree with a verified prepared SDK build. The installed consumer receipt and consumer lock retain the complete measurement. This is packed-development evidence, not published-release certification.

All 121 non-SDK dependency identities remain fixed against the historical lock, including MapLibre 6.13.0 and its integrity. Runtime, worker and stylesheet resolve inside the isolated consumer; the bundle contains one MapLibre runtime.

Renderer protocol loading now preserves tree shaking, basemap private state is consolidated, and generated map-package required checks are compacted with diagnostic-equivalence regressions. First Map saves 37,412 raw and 8,459 gzip bytes against the historical measurement without changing those ceilings. The separate runtime entrypoint exceeded its old 184,699-byte gzip ceiling by 186 bytes; its approved reset follows the repository policy ceil(actual * 1.1). The canonical report is regenerated in docs/bundle-sizes.md.

The same receipt preserves a failed local CPU-profile check: this WSL Intel Core Ultra 7 host has no ubuntu24 runner-image identity and is not the calibrated GitHub Actions AMD EPYC runner. Its three cold-context, 4x-throttled measurements have medians of 465.364 ms script CPU and 161.633 ms parse/compile, above the calibrated limits of 175/110 ms. The receipt's overall failed status must not be presented as a CPU pass. The PR's calibrated CI execution lane supplies that separate required verdict; the local emitted-byte and installed-peer checks pass.

The packed starter receipt records both vanilla and React templates typechecking and building under default peer resolution against the development tarball and published SDK 0.1.14. The older SDK executes the actionable upgrade-message path. Both the deterministic basemap browser test and the opt-in live OpenFreeMap availability test passed on this implementation.

Calibrated CI and current renderer

CI run 38156018856, artifact 11708705909, measured the same clean source on the calibrated Linux/Chromium 145 profile. Its raw receipt and consumer lock preserve the fresh registry resolution. The only changed non-SDK dependency is MapLibre 6.14.0, replacing 6.13.0.

The emitted JavaScript measures 1,968,771 raw / 524,289 gzip bytes. CPU passes at 93.110 ms script / 54.858 ms parse-compile, within the unchanged 175/110 ms limits. The receipt correctly retains its overall failed status because gzip exceeded the then-current 524,000 ceiling by 289 bytes.

With the bundle optimized and the renderer change isolated, the approved gzip ceiling is now 525,000 bytes, an explicit 1,000-byte adjustment leaving 711 bytes of headroom for this measurement. The 1,990,000 raw-byte limit, CPU limits, installed-peer identity, and measured chunk scope are unchanged. Subsequent CI must enforce the updated canonical budget; this historical receipt has not been rewritten to claim a pass.

CI run 38157129023, artifact 11709755929, subsequently passed on clean source fea7b41fccda160f43ad558dfe81da8baf519ecb. Its unmodified passing receipt and consumer lock record 1,968,771 raw / 524,289 gzip bytes and calibrated CPU medians of 139.768 ms script / 82.224 ms parse-compile. The overall result passes the approved byte ceilings, unchanged CPU limits, and installed-peer identity checks. This remains a packed-development benchmark, not certification of a published release.

Historical failed measurement

Source 5d64e59832e0174a071170843c05dfb288d017e8 was also measured from a clean worktree. Its SDK build was admitted from producer run 38141546837, artifact 11703565016, with source and build-input identities verified.

The historical First Map receipt and consumer lock preserve that failed packed-development measurement. They do not certify a published release.