@quonfig/cli 0.0.71 → 0.0.73

package/README.md

@@ -17,7 +17,7 @@ $ npm install -g @quonfig/cli
 $ qfg COMMAND
 running command...
 $ qfg (--version)
-@quonfig/cli/0.0.71 linux-x64 node-v24.4.1
+@quonfig/cli/0.0.73 linux-x64 node-v24.4.1
 $ qfg --help [COMMAND]
 USAGE
   $ qfg COMMAND
@@ -201,7 +201,7 @@ EXAMPLES
   $ qfg activity restore my.flag --yes
 ```
 
-_See code: [src/commands/activity.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/activity.ts)_
+_See code: [src/commands/activity.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/activity.ts)_
 
 ## `qfg activity deleted`
 
@@ -230,7 +230,7 @@ EXAMPLES
   $ qfg activity deleted --json
 ```
 
-_See code: [src/commands/activity/deleted.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/activity/deleted.ts)_
+_See code: [src/commands/activity/deleted.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/activity/deleted.ts)_
 
 ## `qfg activity feed`
 
@@ -265,7 +265,7 @@ EXAMPLES
   $ qfg activity feed --json
 ```
 
-_See code: [src/commands/activity/feed.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/activity/feed.ts)_
+_See code: [src/commands/activity/feed.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/activity/feed.ts)_
 
 ## `qfg activity history [NAME]`
 
@@ -299,7 +299,7 @@ EXAMPLES
   $ qfg activity history request.timeout --json
 ```
 
-_See code: [src/commands/activity/history.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/activity/history.ts)_
+_See code: [src/commands/activity/history.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/activity/history.ts)_
 
 ## `qfg activity restore [NAME]`
 
@@ -338,7 +338,7 @@ EXAMPLES
   $ qfg activity restore request.timeout --type config --yes
 ```
 
-_See code: [src/commands/activity/restore.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/activity/restore.ts)_
+_See code: [src/commands/activity/restore.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/activity/restore.ts)_
 
 ## `qfg audit-log [NAME]`
 
@@ -366,7 +366,7 @@ EXAMPLES
   $ qfg audit-log my.flag
 ```
 
-_See code: [src/commands/audit-log.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/audit-log.ts)_
+_See code: [src/commands/audit-log.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/audit-log.ts)_
 
 ## `qfg cleanup`
 
@@ -407,7 +407,7 @@ EXAMPLES
   $ qfg cleanup status my.flag.key
 ```
 
-_See code: [src/commands/cleanup.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/cleanup.ts)_
+_See code: [src/commands/cleanup.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/cleanup.ts)_
 
 ## `qfg cleanup list`
 
@@ -453,7 +453,7 @@ EXAMPLES
   $ qfg cleanup list --json
 ```
 
-_See code: [src/commands/cleanup/list.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/cleanup/list.ts)_
+_See code: [src/commands/cleanup/list.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/cleanup/list.ts)_
 
 ## `qfg cleanup remove [NAME]`
 
@@ -498,7 +498,7 @@ EXAMPLES
   $ qfg cleanup remove my.flag.key --json
 ```
 
-_See code: [src/commands/cleanup/remove.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/cleanup/remove.ts)_
+_See code: [src/commands/cleanup/remove.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/cleanup/remove.ts)_
 
 ## `qfg cleanup status [NAME]`
 
@@ -538,7 +538,7 @@ EXAMPLES
   $ qfg cleanup status my.flag.key --json
 ```
 
-_See code: [src/commands/cleanup/status.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/cleanup/status.ts)_
+_See code: [src/commands/cleanup/status.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/cleanup/status.ts)_
 
 ## `qfg cleanup verify [NAME]`
 
@@ -584,7 +584,7 @@ EXAMPLES
   $ qfg cleanup verify my.flag.key && qfg delete my.flag.key
 ```
 
-_See code: [src/commands/cleanup/verify.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/cleanup/verify.ts)_
+_See code: [src/commands/cleanup/verify.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/cleanup/verify.ts)_
 
 ## `qfg config-schema`
 
@@ -613,7 +613,7 @@ EXAMPLES
   $ qfg config-schema --json-schema    # full JSON Schema document (copy into your editor)
 ```
 
-_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/config-schema.ts)_
+_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/config-schema.ts)_
 
 ## `qfg create NAME`
 
@@ -700,7 +700,7 @@ EXAMPLES
   $ qfg set-rollout my.new.flag --environment production --true-percent 20
 ```
 
-_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/create.ts)_
+_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/create.ts)_
 
 ## `qfg delete NAME`
 
@@ -746,7 +746,7 @@ EXAMPLES
   $ qfg delete my.config --yes
 ```
 
-_See code: [src/commands/delete.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/delete.ts)_
+_See code: [src/commands/delete.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/delete.ts)_
 
 ## `qfg flag info [NAME]`
 
@@ -950,7 +950,7 @@ EXAMPLES
   $ qfg generate --targets node-ts -o ./dist # combine with targets
 ```
 
-_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/generate.ts)_
+_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/generate.ts)_
 
 ## `qfg generate-new-hex-key`
 
@@ -973,7 +973,7 @@ EXAMPLES
   $ qfg generate-new-hex-key
 ```
 
-_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/generate-new-hex-key.ts)_
+_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/generate-new-hex-key.ts)_
 
 ## `qfg get [NAME]`
 
@@ -1005,7 +1005,7 @@ EXAMPLES
   $ qfg get my.config.name --environment=production
 ```
 
-_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/get.ts)_
+_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/get.ts)_
 
 ## `qfg history NAME`
 
@@ -1031,7 +1031,7 @@ EXAMPLES
   $ qfg history my.flag
 ```
 
-_See code: [src/commands/history.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/history.ts)_
+_See code: [src/commands/history.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/history.ts)_
 
 ## `qfg info [NAME]`
 
@@ -1079,7 +1079,7 @@ EXAMPLES
   $ qfg info my.config.name --exclude-evaluations   # skip 24h stats
 ```
 
-_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/info.ts)_
+_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/info.ts)_
 
 ## `qfg init [DIRECTORY]`
 
@@ -1119,7 +1119,7 @@ EXAMPLES
   $ qfg init --dry-run
 ```
 
-_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/init.ts)_
+_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/init.ts)_
 
 ## `qfg interactive`
 
@@ -1149,7 +1149,7 @@ EXAMPLES
   $ qfg
 ```
 
-_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/interactive.ts)_
+_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/interactive.ts)_
 
 ## `qfg list`
 
@@ -1189,7 +1189,7 @@ EXAMPLES
   $ qfg list --feature-flags
 ```
 
-_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/list.ts)_
+_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/list.ts)_
 
 ## `qfg log`
 
@@ -1214,7 +1214,7 @@ EXAMPLES
   $ qfg log --limit 5
 ```
 
-_See code: [src/commands/log.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/log.ts)_
+_See code: [src/commands/log.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/log.ts)_
 
 ## `qfg log-level NAME`
 
@@ -1279,7 +1279,7 @@ EXAMPLES
   $ qfg log-level log-level.my-app --target=Chatty --value=INFO --environment=production
 ```
 
-_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/log-level.ts)_
+_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/log-level.ts)_
 
 ## `qfg login`
 
@@ -1304,7 +1304,7 @@ EXAMPLES
   $ qfg login --profile myprofile
 ```
 
-_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/login.ts)_
 
 ## `qfg logout`
 
@@ -1327,7 +1327,7 @@ EXAMPLES
   $ qfg logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/logout.ts)_
 
 ## `qfg migrate`
 
@@ -1392,7 +1392,7 @@ EXAMPLES
   $ qfg migrate --from launch --source-api-key $LAUNCH_API_KEY --dir ./quonfig-repo --staging
 ```
 
-_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/migrate.ts)_
+_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/migrate.ts)_
 
 ## `qfg migrate doctor`
 
@@ -1430,7 +1430,7 @@ EXAMPLES
   $ qfg migrate doctor --json
 ```
 
-_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/migrate/doctor.ts)_
+_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/migrate/doctor.ts)_
 
 ## `qfg migrate my-code`
 
@@ -1462,7 +1462,7 @@ EXAMPLES
   $ qfg migrate my-code --dry-run
 ```
 
-_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/migrate/my-code.ts)_
+_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/migrate/my-code.ts)_
 
 ## `qfg migrate status`
 
@@ -1493,7 +1493,7 @@ EXAMPLES
   $ qfg migrate status --json
 ```
 
-_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/migrate/status.ts)_
+_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/migrate/status.ts)_
 
 ## `qfg override [NAME] [VALUE]`
 
@@ -1548,7 +1548,7 @@ EXAMPLES
   $ qfg override my.flag true --env=staging
 ```
 
-_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/override.ts)_
+_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/override.ts)_
 
 ## `qfg pull`
 
@@ -1595,7 +1595,7 @@ EXAMPLES
   $ qfg pull  # uses QUONFIG_DIR env var
 ```
 
-_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/pull.ts)_
+_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/pull.ts)_
 
 ## `qfg push`
 
@@ -1644,7 +1644,7 @@ EXAMPLES
   $ qfg push --dir ./our-config --yes
 ```
 
-_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/push.ts)_
+_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/push.ts)_
 
 ## `qfg run [COMMAND]`
 
@@ -1695,7 +1695,7 @@ EXAMPLES
   $ qfg run --env DATABASE_URL=db.url --preserve-env --environment=staging -- npm test
 ```
 
-_See code: [src/commands/run.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/run.ts)_
+_See code: [src/commands/run.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/run.ts)_
 
 ## `qfg schema NAME`
 
@@ -1733,7 +1733,7 @@ EXAMPLES
   $ qfg schema my-schema --set-json-schema=@schemas/my-schema.json --protected
 ```
 
-_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/schema.ts)_
+_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/schema.ts)_
 
 ## `qfg sdk-key`
 
@@ -1760,7 +1760,7 @@ EXAMPLES
   $ qfg sdk-key revoke <key-id>
 ```
 
-_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/sdk-key.ts)_
+_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/sdk-key.ts)_
 
 ## `qfg sdk-key create`
 
@@ -1792,7 +1792,7 @@ EXAMPLES
   $ qfg sdk-key create --environment staging --type browser
 ```
 
-_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/sdk-key/create.ts)_
+_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/sdk-key/create.ts)_
 
 ## `qfg sdk-key list`
 
@@ -1821,7 +1821,7 @@ EXAMPLES
   $ qfg sdk-key list --environment production
 ```
 
-_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/sdk-key/list.ts)_
+_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/sdk-key/list.ts)_
 
 ## `qfg sdk-key revoke KEYID`
 
@@ -1848,7 +1848,7 @@ EXAMPLES
   $ qfg sdk-key revoke a1b2c3d4-e5f6-7890-abcd-ef1234567890
 ```
 
-_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/sdk-key/revoke.ts)_
+_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/sdk-key/revoke.ts)_
 
 ## `qfg serve`
 
@@ -1905,16 +1905,17 @@ EXAMPLES
   $ qfg serve --port 6581 --frontend-sdk-key PUBLIC_KEY
 ```
 
-_See code: [src/commands/serve.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/serve.ts)_
+_See code: [src/commands/serve.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/serve.ts)_
 
 ## `qfg set-default [NAME]`
 
-Set the unconditional fallback value for a flag or config in a specific environment.
+Set the fallback value for a flag or config in one environment.
 
 ```
 USAGE
   $ qfg set-default [NAME] [--json] [--interactive] [--no-color] [--verbose] [-w <value>] [--confidential]
-    [--env-var <value>] [--environment <value>] [--value <value>] [--confirm] [--secret] [--secret-key-name <value>]
+    [--env-var <value>] [--environment <value>] [--replace-targeting] [--value <value>] [--confirm] [--secret]
+    [--secret-key-name <value>]
 
 ARGUMENTS
   NAME  config/feature-flag/etc. name
@@ -1924,6 +1925,8 @@ FLAGS
   --confirm                  confirm without prompt
   --env-var=<value>          environment variable to use as default value
   --environment=<value>      environment to change
+  --replace-targeting        set the value for EVERYONE: delete this environment's targeting rules instead of keeping
+                             them (they stay in git history)
   --secret                   encrypt the value of this item
   --secret-key-name=<value>  [default: quonfig.secrets.encryption.key] name of the secret key to use for
                              encryption/decryption
@@ -1937,15 +1940,17 @@ GLOBAL FLAGS
       --verbose            Verbose output
 
 DESCRIPTION
-  Set the unconditional fallback value for a flag or config in a specific environment.
+  Set the fallback value for a flag or config in one environment.
 
-  This updates the catch-all rule — the value users receive when NO targeting rule matches.
-  Any targeting rules or percentage rollouts you have configured are NOT affected; they
-  continue to fire before this fallback is evaluated.
+  The fallback is the unconditional rule at the end of the environment's rule
+  list: what users receive when no targeting rule matches. Targeting rules and
+  percentage rollouts above it are kept, and the command tells you how many.
+  If the environment has no rules of its own yet, they are copied from the
+  flag's default rules first, so inherited targeting is kept too.
 
-  "Other rules still apply" means: if you have rules targeting specific users, segments,
-  or properties, those rules still take priority. This command only changes what everyone
-  else sees.
+  To turn a flag on or off for EVERYONE, including users matched by targeting
+  rules, add --replace-targeting. This deletes the environment's targeting
+  rules (they stay in git history).
 
   To set a percentage rollout (gradual rollout / A/B test / canary deploy) instead:
   qfg set-rollout my.flag --environment production --true-percent 20
@@ -1961,7 +1966,7 @@ EXAMPLES
 
   $ qfg set-default my.flag.name --value=true --environment=staging
 
-  $ qfg set-default my.flag.name --value=false --environment=production   # kill-switch: turn off for everyone
+  $ qfg set-default my.flag.name --value=false --environment=production --replace-targeting   # kill-switch: off for everyone
 
   $ qfg set-default my.flag.name --value=true --secret
 
@@ -1976,7 +1981,7 @@ EXAMPLES
   $ qfg pull && qfg config-schema
 ```
 
-_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/set-default.ts)_
+_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/set-default.ts)_
 
 ## `qfg set-rollout [NAME]`
 
@@ -1985,7 +1990,7 @@ Configure a percentage rollout (gradual rollout / A/B test / canary deploy) for
 ```
 USAGE
   $ qfg set-rollout [NAME] [--json] [--interactive] [--no-color] [--verbose] [-w <value>] [--environment <value>]
-    [--hash-by <value>] [--true-percent <value>] [--weights <value>] [--confirm]
+    [--hash-by <value>] [--true-percent <value>] [--replace-targeting] [--weights <value>] [--confirm]
 
 ARGUMENTS
   NAME  config/feature-flag/etc. name
@@ -1994,6 +1999,8 @@ FLAGS
   --confirm               skip the interactive confirmation prompt (useful for scripts and agents)
   --environment=<value>   environment to update (e.g. production, staging)
   --hash-by=<value>       [default: user.key] user property used to assign buckets (default: user.key)
+  --replace-targeting     roll out to EVERYONE: delete this environment's targeting rules instead of keeping them (they
+                          stay in git history)
   --true-percent=<value>  percentage of users that receive true (0–100). Remaining users receive false. Boolean flags
                           only.
   --weights=<value>       comma-separated "value:percent" pairs that must sum to 100 (e.g. "true:20,false:80" or
@@ -2026,6 +2033,16 @@ DESCRIPTION
   Use --hash-by to change which property drives the bucket assignment:
   qfg set-rollout my.flag --environment production --true-percent 10 --hash-by user.id
 
+  The rollout becomes the environment's fallback: the unconditional rule at the end
+  of its rule list, what users receive when no targeting rule matches. Targeting
+  rules above it are kept, and the command tells you how many. If the environment
+  has no rules of its own yet, they are copied from the flag's default rules first,
+  so inherited targeting is kept too.
+
+  To roll out to EVERYONE, including users matched by targeting rules, add
+  --replace-targeting. This deletes the environment's targeting rules (they stay in
+  git history).
+
   For scripted / agent use, add --confirm to skip the interactive confirmation prompt.
 
   To combine a rollout with segment targeting (e.g. beta ON, holdout OFF, everyone else 50/50),
@@ -2034,7 +2051,7 @@ DESCRIPTION
   qfg pull --dir ./config     # clone workspace to edit
 
   To revert to a single value for everyone, use:
-  qfg set-default my.flag --environment production --value false
+  qfg set-default my.flag --environment production --value false --replace-targeting
 
   To inspect the current rollout:
   qfg info my.flag
@@ -2046,14 +2063,16 @@ EXAMPLES
 
   $ qfg set-rollout my.feature.flag --environment production --true-percent 100  # full rollout
 
-  $ qfg set-rollout my.feature.flag --environment production --true-percent 0    # kill switch (all false)
+  # For a kill switch — false for EVERYONE, including targeted users — use set-default:
+
+  $ qfg set-default my.feature.flag --value=false --environment=production --replace-targeting
 
   $ qfg set-rollout my.variant.flag --environment production --weights "control:50,treatment:50"
 
   $ qfg set-rollout my.variant.flag --environment production --weights "a:33,b:33,c:34" --hash-by user.id
 ```
 
-_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/set-rollout.ts)_
+_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/set-rollout.ts)_
 
 ## `qfg sync`
 
@@ -2085,16 +2104,17 @@ EXAMPLES
   $ qfg sync --watch --dir ./our-config --interval 30
 ```
 
-_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/sync.ts)_
+_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/sync.ts)_
 
 ## `qfg toggle [NAME]`
 
-Set the unconditional fallback value for a flag or config in a specific environment.
+Set the fallback value for a flag or config in one environment.
 
 ```
 USAGE
   $ qfg toggle [NAME] [--json] [--interactive] [--no-color] [--verbose] [-w <value>] [--confidential]
-    [--env-var <value>] [--environment <value>] [--value <value>] [--confirm] [--secret] [--secret-key-name <value>]
+    [--env-var <value>] [--environment <value>] [--replace-targeting] [--value <value>] [--confirm] [--secret]
+    [--secret-key-name <value>]
 
 ARGUMENTS
   NAME  config/feature-flag/etc. name
@@ -2104,6 +2124,8 @@ FLAGS
   --confirm                  confirm without prompt
   --env-var=<value>          environment variable to use as default value
   --environment=<value>      environment to change
+  --replace-targeting        set the value for EVERYONE: delete this environment's targeting rules instead of keeping
+                             them (they stay in git history)
   --secret                   encrypt the value of this item
   --secret-key-name=<value>  [default: quonfig.secrets.encryption.key] name of the secret key to use for
                              encryption/decryption
@@ -2117,15 +2139,17 @@ GLOBAL FLAGS
       --verbose            Verbose output
 
 DESCRIPTION
-  Set the unconditional fallback value for a flag or config in a specific environment.
+  Set the fallback value for a flag or config in one environment.
 
-  This updates the catch-all rule — the value users receive when NO targeting rule matches.
-  Any targeting rules or percentage rollouts you have configured are NOT affected; they
-  continue to fire before this fallback is evaluated.
+  The fallback is the unconditional rule at the end of the environment's rule
+  list: what users receive when no targeting rule matches. Targeting rules and
+  percentage rollouts above it are kept, and the command tells you how many.
+  If the environment has no rules of its own yet, they are copied from the
+  flag's default rules first, so inherited targeting is kept too.
 
-  "Other rules still apply" means: if you have rules targeting specific users, segments,
-  or properties, those rules still take priority. This command only changes what everyone
-  else sees.
+  To turn a flag on or off for EVERYONE, including users matched by targeting
+  rules, add --replace-targeting. This deletes the environment's targeting
+  rules (they stay in git history).
 
   To set a percentage rollout (gradual rollout / A/B test / canary deploy) instead:
   qfg set-rollout my.flag --environment production --true-percent 20
@@ -2141,7 +2165,7 @@ EXAMPLES
 
   $ qfg toggle my.flag.name --value=true --environment=staging
 
-  $ qfg toggle my.flag.name --value=false --environment=production   # kill-switch: turn off for everyone
+  $ qfg toggle my.flag.name --value=false --environment=production --replace-targeting   # kill-switch: off for everyone
 
   $ qfg toggle my.flag.name --value=true --secret
 
@@ -2187,7 +2211,7 @@ EXAMPLES
   $ qfg verify --json
 ```
 
-_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/verify.ts)_
+_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/verify.ts)_
 
 ## `qfg whoami`
 
@@ -2210,7 +2234,7 @@ EXAMPLES
   $ qfg whoami
 ```
 
-_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/whoami.ts)_
+_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/whoami.ts)_
 
 ## `qfg workspace`
 
@@ -2233,7 +2257,7 @@ EXAMPLES
   $ qfg workspace
 ```
 
-_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/workspace.ts)_
+_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/workspace.ts)_
 
 ## `qfg workspace bootstrap`
 
@@ -2266,7 +2290,7 @@ EXAMPLES
   $ qfg workspace bootstrap --dir ./our-config --skip-validate
 ```
 
-_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/workspace/bootstrap.ts)_
+_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/workspace/bootstrap.ts)_
 
 ## `qfg workspace create SLUG`
 
@@ -2300,7 +2324,7 @@ EXAMPLES
   $ qfg workspace create my-team --org 11111111-1111-1111-1111-111111111111
 ```
 
-_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/workspace/create.ts)_
+_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/workspace/create.ts)_
 
 ## `qfg workspace switch [SLUG]`
 
@@ -2328,7 +2352,7 @@ EXAMPLES
   $ qfg workspace switch acme/production
 ```
 
-_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.71/src/commands/workspace/switch.ts)_
+_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.73/src/commands/workspace/switch.ts)_
 <!-- commandsstop -->
 
 ## Local Development

package/dist/commands/cleanup/status.js

@@ -1,6 +1,7 @@
 import { Flags } from '@oclif/core';
 import { APICommand } from '../../index.js';
 import nameArg from '../../util/name-arg.js';
+import { isCatchAllRule } from '../../util/rules.js';
 function startOfDayUtcMs(date) {
     return Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), date.getUTCDate());
 }
@@ -26,7 +27,10 @@ function formatRuleValue(value) {
 function summarizeRules(rules) {
     if (!rules || rules.length === 0)
         return '[inherit default]';
-    const fallback = rules.find((r) => r.criteria && r.criteria.length === 1 && r.criteria[0].operator === 'ALWAYS_TRUE');
+    // Both catch-all spellings count as the fallback (qfg-9kr8): a strict
+    // single-ALWAYS_TRUE find reported a targeting rule's value as the fallback
+    // for every scope written by an older `qfg set-default`.
+    const fallback = rules.find((r) => isCatchAllRule(r));
     const overrides = rules.filter((r) => r !== fallback);
     const fallbackStr = fallback ? formatRuleValue(fallback.value) : formatRuleValue(rules[0].value);
     if (overrides.length === 0)

package/dist/commands/config-schema.js

@@ -17,8 +17,13 @@ RULE EVALUATION
 ────────────────────────────────────────────────────────────
 Rules are evaluated in ORDER — the FIRST matching rule wins.
 Put specific rules (user lists, segments) BEFORE catch-all rules.
-  criteria: []   means "match everyone" (unconditional / catch-all)
+  criteria: [{"operator": "ALWAYS_TRUE"}]
+                 means "match everyone" (unconditional / catch-all).
+                 This is the canonical spelling — write this one.
+  criteria: []   also accepted, and treated as unconditional. Older
+                 "qfg set-default" / "qfg set-rollout" writes use it.
   criteria: [..] multiple entries in one rule are ANDed together
+  criteria       is REQUIRED on every rule — omitting the key is invalid.
 
 ────────────────────────────────────────────────────────────
 EXAMPLE: complex targeting + rollout in production
@@ -34,7 +39,7 @@ Four rules in order:
     "type": "feature_flag",
     "valueType": "bool",
     "default": {
-      "rules": [{ "criteria": [], "value": { "type": "bool", "value": false } }]
+      "rules": [{ "criteria": [{ "operator": "ALWAYS_TRUE" }], "value": { "type": "bool", "value": false } }]
     },
     "environments": [{
       "id": "production",
@@ -62,7 +67,7 @@ Four rules in order:
           "value": { "type": "bool", "value": false }
         },
         {
-          "criteria": [],
+          "criteria": [{ "operator": "ALWAYS_TRUE" }],
           "value": {
             "type": "weighted_values",
             "value": {