src/_Get-CciGetDefaultConfig.ps1

function _Get-CciGetDefaultConfig {
    [CmdletBinding()]
    param()

    # Baked tenant registry (module distribution v2). Feed URLs and Entra tenant
    # IDs are configuration, not secrets - the only gate is Entra auth at the
    # feed itself. Adding a tenant or changing a URL is a one-line edit here
    # plus a tagged PSGallery release; Update-Module propagates it.
    #
    # registryUrl is the designed-in remote-refresh hook: when set (via user
    # config), Connect-CciGet fetches a replacement registry from it. It ships
    # UNBOUND - binding a URL makes it a trust anchor and needs a hosting
    # commitment worth that surface (see the distribution-v2 design, D3).
    #
    # Per-tenant fields:
    # prefix - module-name prefix stamped by that tenant's pipelines
    # (cciit.vmware); used for short-name resolution sugar.
    # tenantNum - the tenant's number in 4-segment versions
    # (major.minor.<tenantNum>.<run>), design decision D5.
    [pscustomobject]@{
        defaultFeed = 'cciit'
        registryUrl = $null
        feeds       = @(
            [pscustomobject]@{
                name        = 'cciit'
                url         = 'https://pkgs.dev.azure.com/cciplatform/_packaging/feed-modules-cciit/nuget/v2'
                tenantId    = 'cc031f5b-17b0-4714-a0e7-b1bd593b3933'
                prefix      = 'cciit'
                tenantNum   = 1
                description = 'cciit tenant module feed (distribution v2: tenant-prefixed cciit.* modules).'
                enabled     = $true
            }
        )
    }
}