From 54658526f7a877998cf27052cbd69f4bab492776 Mon Sep 17 00:00:00 2001
From: Amaury Chamayou <amchamay@microsoft.com>
Date: Fri, 4 Sep 2026 11:17:42 +0100
Subject: [PATCH] Enforce acyclic component dependencies

Extend the source dependency allowlist to every component that is currently outside the cyclic core.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 scripts/source-dependencies.json | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/scripts/source-dependencies.json b/scripts/source-dependencies.json
index 12607c73b9b..658749b2abb 100644
--- a/scripts/source-dependencies.json
+++ b/scripts/source-dependencies.json
@@ -22,8 +22,16 @@
     "src/node/gov/api_schema.h"
   ],
   "allowed_internal_dependencies": {
+    "apps": ["ccf-api", "js"],
+    "cose": [],
     "crypto": ["cose", "ds"],
     "ds": [],
-    "pal": ["crypto", "ds"]
+    "msgpack": [],
+    "pal": ["crypto", "ds"],
+    "tasks": ["ds"],
+    "tcp": ["ds"],
+    "threading": [],
+    "tls": ["crypto", "ds"],
+    "udp": ["ds"]
   }
 }