package host

import (
	"log"
	"os"
)

func RunSystemClaims(args []string) {
	if err := runSystemClaims(args, os.Stdout); err != nil {
		log.Fatal(err)
	}
}

const activationClaimsUsage = `usage: carlos system claims <command> [flags]

  inspect            --bucket B --aws-region R --public-key K
  run                --plan FILE --signing-key FILE --public-key K --aws-region R [--out FILE]
  evidence-key       --roster FILE --expect-revision N --bucket B --box BOX --enrollment E --public-key K
  fence-credentials  --source FILE --bucket B --aws-region R --role ARN
  console-config     --roster FILE --expect-revision N --bucket B --console-id ID --public-key K [--enable-console-runtime]
  console-report     --bucket B --aws-region R --expect-revision N --console-id ID --public-key K
  install-console    --identity FILE --source FILE --bucket B --aws-region R --public-key K [--upgrade --from SHA256]
  install-control

For commands that write, add --dry-run to validate and print the planned operation without writing.
Run signing phases on the trusted operator host. Run box installers as root.
The sign-policy and publish-identity phases write their file to --out, a new path. Pass it to guard-arm as it is.
`