Global flags

Same flags on every command — learn them once.

Flag	Meaning
--json	Emit { ok, data?, error? }
--dry-run	Plan only — no mutations
--profile	AWS profile
--yes / -y	Skip confirmation prompts
--region	Region override

Dry-run nuance

• create — no AWS writes
• share — may read tags; does not sign a URL
• destroy — may read tags and object versions to list planned deletes; does not delete
• logs — no CloudWatch calls when --dry-run

Command-specific

Flag	Commands	Meaning
--force	destroy, share, secret get	Allow other utopia-tagged projects
--public-site	create bucket	Allow public access (confirm required)
--public	create fn	Public Function URL (confirm required)
--src	create fn / deploy fn	Source directory to zip
--fn / --name	create cron	Target function + rule short name
--expires	bucket share	30m / 1h / 24h
--since	logs	Lookback window (1h, 30m, …)
--follow / -f	logs	Stream until Ctrl+C
--reveal	secret get	Show plaintext value
--value	create secret	Pass secret in scripts (never logged)
--all	list	Show tagged resources across all projects