oxvif 0.9.4

//! oxvif — live IPCam integration tests / usage examples
//!
//! Quick start (no .env needed):
//!
//! ```sh
//! cargo run --example camera -- healthcheck --ip 192.168.1.100 --auth admin/admin
//! ```
//!
//! Or copy `.env.example` to `.env`, fill in your camera details, then run:
//!
//! ```sh
//! cargo run --example camera -- full-workflow
//! cargo run --example camera -- device-info
//! cargo run --example camera -- device-management
//! cargo run --example camera -- stream-uris
//! cargo run --example camera -- snapshot-uris
//! cargo run --example camera -- system-datetime
//! cargo run --example camera -- ptz-presets
//! cargo run --example camera -- ptz-status
//! cargo run --example camera -- ptz-config
//! cargo run --example camera -- ptz-home
//! cargo run --example camera -- audio
//! cargo run --example camera -- imaging-focus
//! cargo run --example camera -- osd
//! cargo run --example camera -- video-config
//! cargo run --example camera -- video-config-media2
//! cargo run --example camera -- imaging
//! cargo run --example camera -- events
//! cargo run --example camera -- recording
//! cargo run --example camera -- recording-jobs
//! cargo run --example camera -- event-stream
//! cargo run --example camera -- discovery
//! cargo run --example camera -- error-handling
//! cargo run --example camera -- session
//! cargo run --example camera -- users
//! cargo run --example camera -- network-config
//! cargo run --example camera -- relay-outputs
//! cargo run --example camera -- storage
//! cargo run --example camera -- discovery-mode
//! ```

use std::time::Duration;

use futures::StreamExt as _;
use oxvif::{
    Capabilities, DeviceInfo, DiscoveryEvent, FocusMove, ImagingSettings, MediaProfile,
    OnvifClient, OnvifError, OnvifSession, OsdConfiguration, OsdPosition, OsdTextString,
    RecordingConfiguration, RecordingJobConfiguration, StorageConfiguration, SystemDateTime, User,
};
use std::env;

// ── Configuration ─────────────────────────────────────────────────────────────

struct Config {
    camera_url: String,
    username: String,
    password: String,
}

impl Config {
    /// Parse config from CLI flags, falling back to env vars / .env file.
    ///
    /// Supported flags (can appear anywhere in argv):
    ///   --ip <addr>          Camera IP or ONVIF URL
    ///   --auth <user/pass>   Credentials in "user/pass" format
    fn from_args() -> Self {
        let _ = dotenvy::dotenv();
        let args: Vec<String> = env::args().collect();

        let mut ip: Option<String> = None;
        let mut auth: Option<(String, String)> = None;

        let mut i = 0;
        while i < args.len() {
            match args[i].as_str() {
                "--ip" => {
                    i += 1;
                    if let Some(v) = args.get(i) {
                        ip = Some(v.clone());
                    }
                }
                "--auth" => {
                    i += 1;
                    if let Some(v) = args.get(i) {
                        if let Some((u, p)) = v.split_once('/') {
                            auth = Some((u.to_string(), p.to_string()));
                        } else {
                            auth = Some((v.clone(), String::new()));
                        }
                    }
                }
                _ => {}
            }
            i += 1;
        }

        // Resolve camera URL: --ip flag > ONVIF_URL env
        let camera_url = match ip {
            Some(addr) if addr.starts_with("http://") || addr.starts_with("https://") => addr,
            Some(addr) => format!("http://{addr}/onvif/device_service"),
            None => env::var("ONVIF_URL")
                .expect("Camera not specified. Use --ip <addr> or set ONVIF_URL in .env"),
        };

        let (username, password) = auth.unwrap_or_else(|| {
            let u = env::var("ONVIF_USERNAME").unwrap_or_else(|_| "admin".to_string());
            let p = env::var("ONVIF_PASSWORD").unwrap_or_else(|_| String::new());
            (u, p)
        });

        Self {
            camera_url,
            username,
            password,
        }
    }
}

// ── Entry point ───────────────────────────────────────────────────────────────

#[tokio::main]
async fn main() {
    // Find the subcommand: first positional arg that isn't a flag or flag value.
    let args: Vec<String> = env::args().skip(1).collect();
    let mut example = "help".to_string();
    let mut i = 0;
    while i < args.len() {
        if args[i] == "--ip" || args[i] == "--auth" {
            i += 2; // skip flag + value
            continue;
        }
        if !args[i].starts_with('-') {
            example = args[i].clone();
            break;
        }
        i += 1;
    }

    let cfg = Config::from_args();

    let result = match example.as_str() {
        "full-workflow" => full_workflow(&cfg).await,
        "device-info" => device_info_example(&cfg).await,
        "device-management" => device_management(&cfg).await,
        "stream-uris" => stream_uris(&cfg).await,
        "snapshot-uris" => snapshot_uris(&cfg).await,
        "system-datetime" => system_datetime(&cfg).await,
        "ptz-presets" => ptz_presets(&cfg).await,
        "ptz-status" => ptz_status(&cfg).await,
        "ptz-config" => ptz_config(&cfg).await,
        "ptz-home" => ptz_home_example(&cfg).await,
        "audio" => audio_example(&cfg).await,
        "imaging-focus" => imaging_focus(&cfg).await,
        "osd" => osd_example(&cfg).await,
        "video-config" => video_config(&cfg).await,
        "video-config-media2" => video_config_media2(&cfg).await,
        "imaging" => imaging(&cfg).await,
        "events" => events(&cfg).await,
        "event-stream" => event_stream_example(&cfg).await,
        "recording" => recording_example(&cfg).await,
        "recording-jobs" => recording_jobs_example(&cfg).await,
        "discovery" => discovery_example().await,
        "discovery-listen" => discovery_listen_example().await,
        "push-subscribe" => push_subscribe_example(&cfg).await,
        "error-handling" => error_handling_example(&cfg).await,
        "session" => session_example(&cfg).await,
        "users" => users_example(&cfg).await,
        "network-config" => network_config(&cfg).await,
        "relay-outputs" => relay_outputs_example(&cfg).await,
        "storage" => storage_example(&cfg).await,
        "discovery-mode" => discovery_mode_example(&cfg).await,
        "healthcheck" => healthcheck(&cfg).await,
        _ => {
            print_help();
            return;
        }
    };

    if let Err(e) = result {
        eprintln!("Error: {e}");
        std::process::exit(1);
    }
}

fn print_help() {
    println!("oxvif IPCam integration examples");
    println!();
    println!("USAGE:");
    println!("  cargo run --example camera -- <command> [--ip <addr>] [--auth <user/pass>]");
    println!();
    println!("OPTIONS:");
    println!("  --ip <addr>          Camera IP or full ONVIF URL (or set ONVIF_URL in .env)");
    println!("  --auth <user/pass>   Credentials (default: admin with no password)");
    println!();
    println!("QUICK START:");
    println!("  cargo run --example camera -- healthcheck --ip 192.168.1.100 --auth admin/admin");
    println!();
    println!("EXAMPLES:");
    println!("  full-workflow        All implemented operations end-to-end");
    println!("  device-info          Manufacturer, model, firmware");
    println!("  device-management    Hostname, NTP, GetServices");
    println!("  stream-uris          Tabular RTSP URI listing");
    println!("  snapshot-uris        Tabular HTTP snapshot URI listing");
    println!("  system-datetime      Device clock and UTC offset");
    println!("  ptz-presets          List all PTZ presets");
    println!("  ptz-status           Current PTZ pan/tilt/zoom position");
    println!("  ptz-config           PTZ configurations and nodes");
    println!("  ptz-home             Go to / set the PTZ home position");
    println!("  audio                Audio sources and encoder configurations");
    println!("  imaging-focus        Focus status, move options, move/stop");
    println!("  osd                  On-screen display elements (list, create, delete)");
    println!("  video-config         Video sources, encoder configs, options (Media1)");
    println!("  video-config-media2  Media2 profiles, H.265 encoder configs");
    println!("  imaging              Imaging settings and parameter ranges");
    println!("  events               Subscribe, pull, and unsubscribe ONVIF events");
    println!("  event-stream         Continuous event stream via event_stream()");
    println!("  recording            List recordings, search, and get replay URI");
    println!("  recording-jobs       Recording jobs: list, create, set mode, delete");
    println!("  discovery            WS-Discovery UDP multicast probe");
    println!("  discovery-listen     Passively listen for Hello/Bye announcements (30 s)");
    println!("  push-subscribe       WS-BaseNotification push subscribe (listen on :8899, 60 s)");
    println!("  error-handling       Typed error variant matching demo");
    println!("  session              Same workflow using OnvifSession convenience API");
    println!("  users                List, create, and delete device user accounts");
    println!("  network-config       Network interfaces, protocols, DNS, and gateway");
    println!("  relay-outputs        List relay outputs and trigger state change");
    println!("  storage              List storage configurations (SD/NAS)");
    println!("  discovery-mode       Show and toggle WS-Discovery mode");
    println!("  healthcheck          Run all read-only APIs and report pass/fail");
}

// ── Shared helpers ────────────────────────────────────────────────────────────

/// Create a clock-synced, authenticated client and return it with capabilities.
async fn connect(cfg: &Config) -> Result<(OnvifClient, Capabilities), OnvifError> {
    let base = OnvifClient::new(&cfg.camera_url);
    let utc_offset = base
        .get_system_date_and_time()
        .await
        .map(|dt| dt.utc_offset_secs())
        .unwrap_or(0);

    let client = OnvifClient::new(&cfg.camera_url)
        .with_credentials(&cfg.username, &cfg.password)
        .with_utc_offset(utc_offset);

    let caps = client.get_capabilities().await?;
    Ok((client, caps))
}

fn print_capabilities(caps: &Capabilities) {
    println!("\nCapabilities:");
    print_opt("  Device   ", &caps.device.url);
    print_opt("  Media    ", &caps.media.url);
    print_opt("  PTZ      ", &caps.ptz.url);
    print_opt("  Imaging  ", &caps.imaging.url);
    print_opt("  Events   ", &caps.events.url);
    print_opt("  Analytics", &caps.analytics.url);
    print_opt("  Media2   ", &caps.media2.url);
    if caps.media.streaming.rtp_rtsp_tcp {
        println!("  Streaming : RTSP/TCP");
    }
    if caps.media.streaming.rtp_multicast {
        println!("  Streaming : RTP Multicast");
    }
    if let Some(n) = caps.media.max_profiles {
        println!("  Max profiles: {n}");
    }
    if caps.events.ws_pull_point {
        println!("  Events    : WS-PullPoint");
    }
    if caps.device.security.username_token {
        println!("  Auth      : UsernameToken");
    }
    if caps.device.system.firmware_upgrade {
        println!("  System    : firmware upgrade supported");
    }
}

fn print_opt(label: &str, value: &Option<String>) {
    match value {
        Some(v) => println!("{label}: {v}"),
        None => println!("{label}: (not supported)"),
    }
}

fn section(title: &str) {
    println!("\n-- {title} --");
}

// ── Example 1: full workflow ──────────────────────────────────────────────────

/// End-to-end exercise of every implemented operation.
///
/// All write operations that alter device state are either skipped or paired
/// with a matching cleanup (e.g. CreateProfile → DeleteProfile) so the camera
/// is left in the same state it was found in.
async fn full_workflow(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Full workflow ===");
    println!("Connecting to {}", cfg.camera_url);

    // ── 1. Clock sync ─────────────────────────────────────────────────────────
    section("GetSystemDateAndTime");
    let base = OnvifClient::new(&cfg.camera_url);
    let utc_offset = match base.get_system_date_and_time().await {
        Ok(dt) => {
            let tz = if dt.timezone.is_empty() {
                "(none)".into()
            } else {
                dt.timezone.clone()
            };
            println!(
                "  Timezone: {tz}  DST: {}  UTC unix: {:?}",
                dt.daylight_savings, dt.utc_unix
            );
            let off = dt.utc_offset_secs();
            if off.abs() > 5 {
                println!("  Clock skew {off:+}s — applying offset");
            } else {
                println!("  Clocks in sync");
            }
            off
        }
        Err(e) => {
            println!("  (skipped — {e})");
            0
        }
    };

    let client = OnvifClient::new(&cfg.camera_url)
        .with_credentials(&cfg.username, &cfg.password)
        .with_utc_offset(utc_offset);

    // ── 2. Capabilities ───────────────────────────────────────────────────────
    section("GetCapabilities");
    let caps = client.get_capabilities().await?;
    print_capabilities(&caps);

    // ── 3. GetServices ────────────────────────────────────────────────────────
    // Store results so Media2 URL can be derived as a fallback later.
    section("GetServices");
    let services = match client.get_services().await {
        Ok(services) => {
            println!("  Found {} service(s)", services.len());
            for svc in &services {
                println!(
                    "  v{}.{}  {}",
                    svc.version_major, svc.version_minor, svc.url
                );
            }
            services
        }
        Err(e) => {
            println!("  (skipped — {e})");
            vec![]
        }
    };

    // ── 4. Device information ─────────────────────────────────────────────────
    section("GetDeviceInformation");
    match client.get_device_info().await {
        Ok(info) => println!(
            "  {}/{} fw:{} sn:{}",
            info.manufacturer, info.model, info.firmware_version, info.serial_number
        ),
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 5. Hostname ───────────────────────────────────────────────────────────
    section("GetHostname");
    match client.get_hostname().await {
        Ok(h) => {
            let src = if h.from_dhcp { "DHCP" } else { "static" };
            let name = h.name.as_deref().unwrap_or("(none)");
            println!("  Hostname: {name}  (source: {src})");
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 6. NTP ────────────────────────────────────────────────────────────────
    section("GetNTP");
    match client.get_ntp().await {
        Ok(ntp) => {
            let src = if ntp.from_dhcp { "DHCP" } else { "manual" };
            if ntp.servers.is_empty() {
                println!("  Source: {src}  Servers: (none configured)");
            } else {
                println!("  Source: {src}  Servers: {}", ntp.servers.join(", "));
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 7–9. Media ────────────────────────────────────────────────────────────
    let media_url = match &caps.media.url {
        Some(u) => u.clone(),
        None => {
            println!("\nDevice does not advertise a Media service — stopping.");
            return Ok(());
        }
    };

    section("GetProfiles");
    let profiles: Vec<MediaProfile> = client.get_profiles(&media_url).await?;
    println!("  Found {} profile(s)", profiles.len());
    for p in &profiles {
        println!(
            "  [{token}] '{name}'  fixed={fixed}",
            token = p.token,
            name = p.name,
            fixed = p.fixed
        );
    }

    // Single-profile lookup for the first profile
    if let Some(first) = profiles.first() {
        section(&format!("GetProfile [{}]", first.token));
        match client.get_profile(&media_url, &first.token).await {
            Ok(p) => println!(
                "  [{token}] '{name}'  fixed={fixed}",
                token = p.token,
                name = p.name,
                fixed = p.fixed
            ),
            Err(e) => println!("  (skipped — {e})"),
        }
    }

    section("GetStreamUri");
    for profile in &profiles {
        match client.get_stream_uri(&media_url, &profile.token).await {
            Ok(uri) => {
                print!("  '{}' → {}", profile.name, uri.uri);
                if uri.invalid_after_connect {
                    print!("  [one-time]");
                }
                if !uri.timeout.is_empty() && uri.timeout != "PT0S" {
                    print!("  [timeout:{}]", uri.timeout);
                }
                println!();
            }
            Err(e) => println!("  '{}' ERROR: {e}", profile.name),
        }
    }

    section("GetSnapshotUri");
    for profile in &profiles {
        match client.get_snapshot_uri(&media_url, &profile.token).await {
            Ok(snap) => println!("  '{}' → {}", profile.name, snap.uri),
            Err(e) => println!("  '{}' ERROR: {e}", profile.name),
        }
    }

    // ── 10. Video sources ─────────────────────────────────────────────────────
    section("GetVideoSources");
    let video_sources = match client.get_video_sources(&media_url).await {
        Ok(sources) => {
            println!("  Found {} source(s)", sources.len());
            for s in &sources {
                println!(
                    "  [{}]  {}  @ {:.0} fps",
                    s.token, s.resolution, s.framerate
                );
            }
            sources
        }
        Err(e) => {
            println!("  (skipped — {e})");
            vec![]
        }
    };

    // ── 11. Video source configurations ──────────────────────────────────────
    section("GetVideoSourceConfigurations");
    match client.get_video_source_configurations(&media_url).await {
        Ok(cfgs) => {
            println!("  Found {} config(s)", cfgs.len());
            for c in &cfgs {
                println!(
                    "  [{}] '{}' → source:{} bounds:{}x{}+{}+{}  use_count:{}",
                    c.token,
                    c.name,
                    c.source_token,
                    c.bounds.width,
                    c.bounds.height,
                    c.bounds.x,
                    c.bounds.y,
                    c.use_count,
                );
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 12. Video encoder configurations ─────────────────────────────────────
    section("GetVideoEncoderConfigurations");
    match client.get_video_encoder_configurations(&media_url).await {
        Ok(cfgs) => {
            println!("  Found {} config(s)", cfgs.len());
            for c in &cfgs {
                let rc = c.rate_control.as_ref();
                println!(
                    "  [{}] '{}' → {} {}  fps:{}  bitrate:{}kbps",
                    c.token,
                    c.name,
                    c.encoding,
                    c.resolution,
                    rc.map(|r| r.frame_rate_limit).unwrap_or(0),
                    rc.map(|r| r.bitrate_limit).unwrap_or(0),
                );
                if let Some(h) = &c.h264 {
                    println!("    H.264: profile={} gop={}", h.profile, h.gov_length);
                }
                if let Some(h) = &c.h265 {
                    println!("    H.265: profile={} gop={}", h.profile, h.gov_length);
                }
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 13. Imaging settings (first video source) ─────────────────────────────
    if let Some(imaging_url) = &caps.imaging.url {
        if let Some(vs) = video_sources.first() {
            section(&format!("GetImagingSettings [{}]", vs.token));
            match client.get_imaging_settings(imaging_url, &vs.token).await {
                Ok(s) => {
                    print_imaging_settings(&s);
                }
                Err(e) => println!("  (skipped — {e})"),
            }

            section(&format!("GetImagingOptions [{}]", vs.token));
            match client.get_imaging_options(imaging_url, &vs.token).await {
                Ok(opts) => {
                    if let Some(r) = opts.brightness {
                        println!("  Brightness: {:.0}–{:.0}", r.min, r.max);
                    }
                    if let Some(r) = opts.contrast {
                        println!("  Contrast  : {:.0}–{:.0}", r.min, r.max);
                    }
                    if !opts.ir_cut_filter_modes.is_empty() {
                        println!(
                            "  IR cut filter modes: {}",
                            opts.ir_cut_filter_modes.join(", ")
                        );
                    }
                    if !opts.white_balance_modes.is_empty() {
                        println!(
                            "  White balance modes: {}",
                            opts.white_balance_modes.join(", ")
                        );
                    }
                    if !opts.exposure_modes.is_empty() {
                        println!("  Exposure modes: {}", opts.exposure_modes.join(", "));
                    }
                }
                Err(e) => println!("  (skipped — {e})"),
            }
        }
    } else {
        println!("\n-- Imaging --");
        println!("  (no Imaging service URL in capabilities)");
    }

    // ── 14. PTZ ───────────────────────────────────────────────────────────────
    if let Some(ptz_url) = &caps.ptz.url {
        for profile in &profiles {
            section(&format!("PTZ GetStatus [{}]", profile.token));
            match client.ptz_get_status(ptz_url, &profile.token).await {
                Ok(status) => {
                    let pan = status.pan.map(|v| format!("{v:+.4}")).unwrap_or("—".into());
                    let tilt = status
                        .tilt
                        .map(|v| format!("{v:+.4}"))
                        .unwrap_or("—".into());
                    let zoom = status.zoom.map(|v| format!("{v:.4}")).unwrap_or("—".into());
                    println!(
                        "  pan:{pan}  tilt:{tilt}  zoom:{zoom}  \
                         move:{}/{}",
                        status.pan_tilt_status, status.zoom_status
                    );
                }
                Err(e) => println!("  (skipped — {e})"),
            }

            section(&format!("PTZ GetPresets [{}]", profile.token));
            match client.ptz_get_presets(ptz_url, &profile.token).await {
                Ok(presets) if presets.is_empty() => println!("  (no presets saved)"),
                Ok(presets) => {
                    println!("  {} preset(s)", presets.len());
                    for p in &presets {
                        let pt = p
                            .pan_tilt
                            .map(|(x, y)| format!("{x:+.3}/{y:+.3}"))
                            .unwrap_or_else(|| "—".into());
                        let z = p
                            .zoom
                            .map(|z| format!("{z:.3}"))
                            .unwrap_or_else(|| "—".into());
                        println!("    [{}] {}  pan/tilt={pt} zoom={z}", p.token, p.name);
                    }
                }
                Err(e) => println!("  (skipped — {e})"),
            }
        }
    } else {
        println!("\n-- PTZ --");
        println!("  (no PTZ service)");
    }

    // ── 15. Profile lifecycle test ────────────────────────────────────────────
    // Create a temporary profile then immediately delete it to verify the
    // complete profile management lifecycle without leaving state on the device.
    section("CreateProfile + DeleteProfile (lifecycle test)");
    match client
        .create_profile(&media_url, "oxvif-test-profile", None)
        .await
    {
        Ok(p) => {
            println!(
                "  Created  [{token}] '{name}'  fixed={fixed}",
                token = p.token,
                name = p.name,
                fixed = p.fixed
            );
            match client.delete_profile(&media_url, &p.token).await {
                Ok(()) => println!("  Deleted  [{}] — device state restored", p.token),
                Err(e) => println!("  Delete failed (manual cleanup needed): {e}"),
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 16. Media2 ────────────────────────────────────────────────────────────
    // GetCapabilities often omits Media2; fall back to the URL found via
    // GetServices (step 3) when that happens.
    let media2_url = caps.media2.url.clone().or_else(|| {
        services
            .iter()
            .find(|s| s.is_media2())
            .map(|s| s.url.clone())
    });

    if let Some(m2_url) = media2_url {
        section("GetProfiles (Media2)");
        match client.get_profiles_media2(&m2_url).await {
            Ok(profiles2) => {
                println!("  Found {} Media2 profile(s)", profiles2.len());
                for p in &profiles2 {
                    println!(
                        "  [{token}] '{name}'  fixed={fixed}  vsc={vsc:?}  vec={vec:?}",
                        token = p.token,
                        name = p.name,
                        fixed = p.fixed,
                        vsc = p.video_source_token,
                        vec = p.video_encoder_token,
                    );
                }
                // Stream + snapshot via Media2
                if let Some(p) = profiles2.first() {
                    match client.get_stream_uri_media2(&m2_url, &p.token).await {
                        Ok(uri) => println!("  Stream URI (Media2, first): {uri}"),
                        Err(e) => println!("  Stream URI (Media2): {e}"),
                    }
                }
            }
            Err(e) => println!("  (skipped — {e})"),
        }
    }

    // ── 17. Audio ─────────────────────────────────────────────────────────────
    let media_url = caps.media.url.as_deref().unwrap_or("").to_string();

    section("GetAudioSources");
    match client.get_audio_sources(&media_url).await {
        Ok(sources) => {
            println!("  Found {} audio source(s)", sources.len());
            for s in &sources {
                println!("  [{}] channels={}", s.token, s.channels);
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    section("GetAudioEncoderConfigurations");
    match client.get_audio_encoder_configurations(&media_url).await {
        Ok(cfgs) => {
            println!("  Found {} audio encoder config(s)", cfgs.len());
            for c in &cfgs {
                println!(
                    "  [{}] {} encoding={} bitrate={}kbps sample_rate={}kHz",
                    c.token, c.name, c.encoding, c.bitrate, c.sample_rate
                );
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 18. PTZ Configuration ─────────────────────────────────────────────────
    if let Some(ref ptz_url) = caps.ptz.url {
        section("GetNodes");
        match client.ptz_get_nodes(ptz_url).await {
            Ok(nodes) => {
                println!("  Found {} PTZ node(s)", nodes.len());
                for n in &nodes {
                    println!(
                        "  [{}] {} max_presets={} home_supported={}",
                        n.token, n.name, n.max_presets, n.home_supported
                    );
                }
            }
            Err(e) => println!("  (skipped — {e})"),
        }

        section("GetConfigurations (PTZ)");
        match client.ptz_get_configurations(ptz_url).await {
            Ok(cfgs) => {
                println!("  Found {} PTZ configuration(s)", cfgs.len());
                for c in &cfgs {
                    println!(
                        "  [{}] {} node={} timeout={:?}",
                        c.token, c.name, c.node_token, c.default_ptz_timeout
                    );
                }
            }
            Err(e) => println!("  (skipped — {e})"),
        }
    }

    // ── 19. Imaging Focus ─────────────────────────────────────────────────────
    if let (Some(ref imaging_url), Some(ref source_token)) = (caps.imaging.url.clone(), {
        let sources = client
            .get_video_sources(caps.media.url.as_deref().unwrap_or(""))
            .await
            .ok();
        sources.and_then(|v| v.into_iter().next().map(|s| s.token))
    }) {
        section("ImagingGetStatus");
        match client.imaging_get_status(imaging_url, source_token).await {
            Ok(s) => println!(
                "  focus={:?}  state={}",
                s.focus_position, s.focus_move_status
            ),
            Err(e) => println!("  (skipped — {e})"),
        }

        section("ImagingGetMoveOptions");
        match client
            .imaging_get_move_options(imaging_url, source_token)
            .await
        {
            Ok(opts) => {
                if let Some(r) = opts.absolute_position_range {
                    println!("  absolute position: {}–{}", r.min, r.max);
                }
                if let Some(r) = opts.continuous_speed_range {
                    println!("  continuous speed: {}–{}", r.min, r.max);
                }
            }
            Err(e) => println!("  (skipped — {e})"),
        }
    }

    // ── 20. OSD ───────────────────────────────────────────────────────────────
    section("GetOSDs");
    let media_url = caps.media.url.as_deref().unwrap_or("");
    match client.get_osds(media_url, None).await {
        Ok(osds) => {
            println!("  Found {} OSD element(s)", osds.len());
            for o in &osds {
                println!(
                    "  [{}] type={} position={}",
                    o.token, o.type_, o.position.type_
                );
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 21. GetScopes ─────────────────────────────────────────────────────────
    section("GetScopes");
    match client.get_scopes().await {
        Ok(scopes) => {
            println!("  Found {} scope(s)", scopes.len());
            for s in &scopes {
                println!("  {s}");
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 22. Recording / Search / Replay ───────────────────────────────────────
    let services = client.get_services().await.unwrap_or_default();
    let recording_url = services
        .iter()
        .find(|s| s.namespace.contains("recording"))
        .map(|s| s.url.clone());
    let search_url = services
        .iter()
        .find(|s| s.namespace.contains("search"))
        .map(|s| s.url.clone());
    let replay_url = services
        .iter()
        .find(|s| s.namespace.contains("replay"))
        .map(|s| s.url.clone());

    if let Some(ref rec_url) = recording_url {
        section("GetRecordings");
        match client.get_recordings(rec_url).await {
            Ok(recs) => {
                println!("  Found {} recording(s)", recs.len());
                for r in recs.iter().take(3) {
                    println!("  [{}] {} — {}", r.token, r.source.name, r.content);
                }
            }
            Err(e) => println!("  (skipped — {e})"),
        }
    }

    if let (Some(ref srch_url), Some(ref rpl_url)) = (search_url, replay_url) {
        section("FindRecordings + GetReplayUri");
        match client.find_recordings(srch_url, Some(5), "PT30S").await {
            Ok(token) => {
                println!("  Search token: {token}");
                match client
                    .get_recording_search_results(srch_url, &token, 5, "PT5S")
                    .await
                {
                    Ok(results) => {
                        println!(
                            "  State={} recordings={}",
                            results.search_state,
                            results.recording_information.len()
                        );
                        if let Some(first) = results.recording_information.first() {
                            match client
                                .get_replay_uri(
                                    rpl_url,
                                    &first.recording_token,
                                    "RTP-Unicast",
                                    "RTSP",
                                )
                                .await
                            {
                                Ok(uri) => println!("  Replay URI: {uri}"),
                                Err(e) => println!("  GetReplayUri skipped — {e}"),
                            }
                        }
                    }
                    Err(e) => println!("  GetRecordingSearchResults skipped — {e}"),
                }
                let _ = client.end_search(srch_url, &token).await;
            }
            Err(e) => println!("  (skipped — {e})"),
        }
    }

    // ── 23. Users ─────────────────────────────────────────────────────────────
    section("GetUsers");
    match client.get_users().await {
        Ok(users) => {
            println!("  Found {} user(s)", users.len());
            for u in &users {
                println!("  {} ({})", u.username, u.user_level);
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 24. Network config ────────────────────────────────────────────────────
    section("GetNetworkInterfaces");
    match client.get_network_interfaces().await {
        Ok(ifaces) => {
            println!("  Found {} interface(s)", ifaces.len());
            for i in &ifaces {
                println!(
                    "  [{}] {} hw={} ip={}/{} dhcp={}",
                    i.token,
                    i.name,
                    i.hw_address,
                    i.ipv4_address,
                    i.ipv4_prefix_length,
                    i.ipv4_from_dhcp
                );
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    section("GetNetworkProtocols");
    match client.get_network_protocols().await {
        Ok(protos) => {
            for p in &protos {
                let ports: Vec<String> = p.ports.iter().map(|n| n.to_string()).collect();
                println!(
                    "  {} enabled={} ports=[{}]",
                    p.name,
                    p.enabled,
                    ports.join(", ")
                );
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    section("GetDNS");
    match client.get_dns().await {
        Ok(dns) => {
            let src = if dns.from_dhcp { "DHCP" } else { "manual" };
            println!("  Source: {src}  Servers: {}", dns.servers.join(", "));
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    section("GetNetworkDefaultGateway");
    match client.get_network_default_gateway().await {
        Ok(gw) => {
            if !gw.ipv4_addresses.is_empty() {
                println!("  IPv4: {}", gw.ipv4_addresses.join(", "));
            }
            if !gw.ipv6_addresses.is_empty() {
                println!("  IPv6: {}", gw.ipv6_addresses.join(", "));
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 25. System log & relay outputs ────────────────────────────────────────
    section("GetSystemLog");
    match client.get_system_log("System").await {
        Ok(log) => {
            if let Some(text) = &log.string {
                let preview: String = text.lines().take(3).collect::<Vec<_>>().join(" | ");
                println!("  {preview}");
            } else {
                println!("  (no text log returned)");
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    section("GetRelayOutputs");
    match client.get_relay_outputs().await {
        Ok(relays) => {
            println!("  Found {} relay(s)", relays.len());
            for r in &relays {
                println!(
                    "  [{}] mode={} delay={} idle={}",
                    r.token, r.mode, r.delay_time, r.idle_state
                );
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 26. Storage configurations ────────────────────────────────────────────
    section("GetStorageConfigurations");
    match client.get_storage_configurations().await {
        Ok(configs) => {
            println!("  Found {} storage config(s)", configs.len());
            for c in &configs {
                println!(
                    "  [{}] type={} path={}",
                    c.token, c.storage_type, c.local_path
                );
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 27. System URIs ───────────────────────────────────────────────────────
    section("GetSystemUris");
    match client.get_system_uris().await {
        Ok(uris) => {
            if let Some(u) = &uris.system_log_uri {
                println!("  SysLog   : {u}");
            }
            if let Some(u) = &uris.support_info_uri {
                println!("  Support  : {u}");
            }
            if let Some(u) = &uris.system_backup_uri {
                println!("  Backup   : {u}");
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 28. Discovery mode ────────────────────────────────────────────────────
    section("GetDiscoveryMode");
    match client.get_discovery_mode().await {
        Ok(mode) => println!("  Mode: {mode}"),
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── 29. Recording jobs ────────────────────────────────────────────────────
    if let Some(ref rec_url) = recording_url {
        section("GetRecordingJobs");
        match client.get_recording_jobs(rec_url).await {
            Ok(jobs) => {
                println!("  {} job(s)", jobs.len());
                for j in jobs.iter().take(3) {
                    println!("  [{}] rec={} mode={}", j.token, j.recording_token, j.mode);
                }
            }
            Err(e) => println!("  (skipped — {e})"),
        }
    }

    // ── 30. Event stream (brief) ──────────────────────────────────────────────
    if let Some(ref ev_url) = caps.events.url {
        if caps.events.ws_pull_point {
            section("event_stream (3 s probe)");
            match client
                .create_pull_point_subscription(ev_url, None, Some("PT60S"))
                .await
            {
                Ok(sub) => {
                    let mut stream = client.event_stream(&sub.reference_url, "PT2S", 5);
                    let deadline = tokio::time::Instant::now() + Duration::from_secs(3);
                    let mut count = 0usize;
                    loop {
                        match tokio::time::timeout_at(deadline, stream.next()).await {
                            Ok(Some(Ok(msg))) => {
                                count += 1;
                                println!("  Event: {}", msg.topic);
                                if count >= 3 {
                                    break;
                                }
                            }
                            Ok(Some(Err(e))) => {
                                println!("  (stream error — {e})");
                                break;
                            }
                            Ok(None) | Err(_) => break,
                        }
                    }
                    if count == 0 {
                        println!("  No events in 3 s");
                    }
                    let _ = client.unsubscribe(&sub.reference_url).await;
                }
                Err(e) => println!("  (skipped — {e})"),
            }
        }
    }

    println!("\n=== Full workflow complete ===");
    Ok(())
}

// ── Example 2: device info ────────────────────────────────────────────────────

async fn device_info_example(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Device information ===");

    let info: DeviceInfo = match OnvifClient::new(&cfg.camera_url).get_device_info().await {
        Ok(info) => info,
        Err(_) => {
            println!("(unauthenticated request failed — retrying with credentials)");
            OnvifClient::new(&cfg.camera_url)
                .with_credentials(&cfg.username, &cfg.password)
                .get_device_info()
                .await?
        }
    };

    println!("Manufacturer : {}", info.manufacturer);
    println!("Model        : {}", info.model);
    println!("Firmware     : {}", info.firmware_version);
    println!("Serial       : {}", info.serial_number);
    println!("Hardware ID  : {}", info.hardware_id);

    Ok(())
}

// ── Example 3: device management ─────────────────────────────────────────────

/// Shows hostname, NTP configuration, and all service endpoints.
/// Read-only — does not modify the device.
async fn device_management(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Device management ===");

    let (client, caps) = connect(cfg).await?;

    // Services
    section("GetServices");
    match client.get_services().await {
        Ok(services) => {
            println!("  {:<8}  {:<40}  URL", "Version", "Namespace");
            println!("  {}", "-".repeat(80));
            for svc in &services {
                println!(
                    "  v{}.{:<5}  {:<40}  {}",
                    svc.version_major,
                    svc.version_minor,
                    // Truncate long namespaces
                    svc.namespace
                        .trim_start_matches("http://www.onvif.org/")
                        .trim_start_matches("http://"),
                    svc.url
                );
            }
        }
        Err(e) => println!("  ERROR: {e}"),
    }

    // Hostname
    section("GetHostname");
    match client.get_hostname().await {
        Ok(h) => {
            let src = if h.from_dhcp { "DHCP" } else { "static" };
            println!("  Hostname : {}", h.name.as_deref().unwrap_or("(not set)"));
            println!("  Source   : {src}");
        }
        Err(e) => println!("  ERROR: {e}"),
    }

    // NTP
    section("GetNTP");
    match client.get_ntp().await {
        Ok(ntp) => {
            let src = if ntp.from_dhcp { "DHCP" } else { "manual" };
            println!("  Source   : {src}");
            if ntp.servers.is_empty() {
                println!("  Servers  : (none configured)");
            } else {
                for (i, s) in ntp.servers.iter().enumerate() {
                    println!("  Server {i} : {s}");
                }
            }
        }
        Err(e) => println!("  ERROR: {e}"),
    }

    // Device security flags (from capabilities)
    section("Security capabilities");
    let sec = &caps.device.security;
    println!("  UsernameToken      : {}", sec.username_token);
    println!("  TLS 1.2            : {}", sec.tls_1_2);
    println!("  X.509 token        : {}", sec.x509_token);
    println!("  Onboard key gen    : {}", sec.onboard_key_generation);
    println!("  Access policy cfg  : {}", sec.access_policy_config);

    // Device system flags
    section("System capabilities");
    let sys = &caps.device.system;
    println!("  DiscoveryResolve   : {}", sys.discovery_resolve);
    println!("  RemoteDiscovery    : {}", sys.remote_discovery);
    println!("  FirmwareUpgrade    : {}", sys.firmware_upgrade);
    println!("  SystemLogging      : {}", sys.system_logging);
    println!("  SystemBackup       : {}", sys.system_backup);

    // ── Events ────────────────────────────────────────────────────────────────
    if let Some(events_url) = &caps.events.url {
        section("Events — GetEventProperties");
        match client.get_event_properties(events_url).await {
            Ok(props) => {
                println!("  {} topic(s) available", props.topics.len());
                for t in props.topics.iter().take(8) {
                    println!("  - {t}");
                }
                if props.topics.len() > 8 {
                    println!("  … ({} more)", props.topics.len() - 8);
                }
            }
            Err(e) => println!("  (skipped — {e})"),
        }

        if caps.events.ws_pull_point {
            section("Events — CreatePullPointSubscription / PullMessages / Unsubscribe");
            match client
                .create_pull_point_subscription(events_url, None, Some("PT30S"))
                .await
            {
                Ok(sub) => {
                    println!("  Subscription URL : {}", sub.reference_url);
                    println!("  Termination time : {}", sub.termination_time);
                    match client.pull_messages(&sub.reference_url, "PT2S", 10).await {
                        Ok(msgs) => {
                            if msgs.is_empty() {
                                println!("  No pending events");
                            } else {
                                println!("  {} event(s) received:", msgs.len());
                                for m in &msgs {
                                    println!(
                                        "  [{}] {}  src={:?}  data={:?}",
                                        m.utc_time, m.topic, m.source, m.data
                                    );
                                }
                            }
                        }
                        Err(e) => println!("  PullMessages skipped — {e}"),
                    }
                    if let Err(e) = client.unsubscribe(&sub.reference_url).await {
                        println!("  Unsubscribe skipped — {e}");
                    } else {
                        println!("  Unsubscribed successfully");
                    }
                }
                Err(e) => println!("  (skipped — {e})"),
            }
        }
    }

    Ok(())
}

// ── Example 4: stream URIs ────────────────────────────────────────────────────

async fn stream_uris(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Stream URIs ===");

    let (client, caps) = connect(cfg).await?;
    let media_url = caps
        .media
        .url
        .ok_or_else(|| oxvif::soap::SoapError::missing("Media service not found"))?;

    let profiles = client.get_profiles(&media_url).await?;
    if profiles.is_empty() {
        println!("No media profiles found.");
        return Ok(());
    }

    println!("{:<20} RTSP URI", "Profile");
    println!("{}", "-".repeat(80));
    for profile in &profiles {
        match client.get_stream_uri(&media_url, &profile.token).await {
            Ok(uri) => println!("{:<20} {}", profile.name, uri.uri),
            Err(e) => println!("{:<20} ERROR: {e}", profile.name),
        }
    }

    // Also try Media2 if available
    if let Some(m2_url) = &caps.media2.url {
        println!("\n{:<20} RTSP URI (Media2)", "Profile");
        println!("{}", "-".repeat(80));
        match client.get_profiles_media2(m2_url).await {
            Ok(profiles2) => {
                for p in &profiles2 {
                    match client.get_stream_uri_media2(m2_url, &p.token).await {
                        Ok(uri) => println!("{:<20} {}", p.name, uri),
                        Err(e) => println!("{:<20} ERROR: {e}", p.name),
                    }
                }
            }
            Err(e) => println!("Media2 profiles: ERROR: {e}"),
        }
    }

    Ok(())
}

// ── Example 5: snapshot URIs ──────────────────────────────────────────────────

async fn snapshot_uris(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Snapshot URIs ===");

    let (client, caps) = connect(cfg).await?;
    let media_url = caps
        .media
        .url
        .ok_or_else(|| oxvif::soap::SoapError::missing("Media service not found"))?;

    let profiles = client.get_profiles(&media_url).await?;
    if profiles.is_empty() {
        println!("No media profiles found.");
        return Ok(());
    }

    println!("{:<20} Snapshot URI", "Profile");
    println!("{}", "-".repeat(80));
    for profile in &profiles {
        match client.get_snapshot_uri(&media_url, &profile.token).await {
            Ok(snap) => {
                let flags = match (snap.invalid_after_connect, snap.invalid_after_reboot) {
                    (true, _) => " [one-time]",
                    (_, true) => " [reboot-reset]",
                    _ => "",
                };
                println!("{:<20} {}{}", profile.name, snap.uri, flags);
            }
            Err(e) => println!("{:<20} ERROR: {e}", profile.name),
        }
    }

    Ok(())
}

// ── Example 6: system date and time ──────────────────────────────────────────

async fn system_datetime(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== System date and time ===");

    let client = OnvifClient::new(&cfg.camera_url);
    let dt: SystemDateTime = match client.get_system_date_and_time().await {
        Ok(dt) => dt,
        Err(_) => {
            println!("(unauthenticated failed — retrying with credentials)");
            OnvifClient::new(&cfg.camera_url)
                .with_credentials(&cfg.username, &cfg.password)
                .get_system_date_and_time()
                .await?
        }
    };

    match dt.utc_unix {
        Some(unix) => {
            let secs = unix % 60;
            let mins = (unix / 60) % 60;
            let hours = (unix / 3600) % 24;
            let days = unix / 86_400;
            println!("Device UTC   : Unix {unix}  ({days}d {hours:02}:{mins:02}:{secs:02} UTC)");
        }
        None => println!("Device UTC   : (not returned by device)"),
    }

    let tz = if dt.timezone.is_empty() {
        "(none)".to_string()
    } else {
        dt.timezone.clone()
    };
    println!("Timezone     : {tz}");
    println!("DST active   : {}", dt.daylight_savings);

    let offset = dt.utc_offset_secs();
    println!("UTC offset   : {offset:+} seconds (device − local)");
    if offset.abs() > 5 {
        println!(
            "  ! Clock skew detected. Use .with_utc_offset({offset}) to keep WS-Security valid."
        );
    } else {
        println!("  Clocks are in sync — no offset needed.");
    }

    Ok(())
}

// ── Example 7: PTZ presets ────────────────────────────────────────────────────

async fn ptz_presets(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== PTZ presets ===");

    let (client, caps) = connect(cfg).await?;

    let ptz_url = match caps.ptz.url.clone() {
        Some(u) => {
            println!("PTZ service: {u}");
            u
        }
        None => {
            println!("Device does not advertise a PTZ service.");
            return Ok(());
        }
    };

    let media_url = match caps.media.url.clone() {
        Some(u) => u,
        None => {
            println!("No media service — cannot list profiles.");
            return Ok(());
        }
    };

    let profiles = client.get_profiles(&media_url).await?;
    if profiles.is_empty() {
        println!("No media profiles found.");
        return Ok(());
    }

    for profile in &profiles {
        println!("\nProfile '{}' (token: {}):", profile.name, profile.token);

        match client.ptz_get_presets(&ptz_url, &profile.token).await {
            Ok(presets) if presets.is_empty() => {
                println!("  (no presets saved)");
            }
            Ok(presets) => {
                println!(
                    "  {:<10} {:<24} {:>14}  {:>8}",
                    "Token", "Name", "Pan/Tilt", "Zoom"
                );
                println!("  {}", "-".repeat(60));
                for p in &presets {
                    let pt = match p.pan_tilt {
                        Some((x, y)) => format!("{x:+.4}/{y:+.4}"),
                        None => "—".to_string(),
                    };
                    let z = match p.zoom {
                        Some(z) => format!("{z:.4}"),
                        None => "—".to_string(),
                    };
                    println!("  {:<10} {:<24} {:>14}  {:>8}", p.token, p.name, pt, z);
                }
            }
            Err(e) => println!("  ERROR: {e}"),
        }
    }

    Ok(())
}

// ── Example 8: PTZ status ─────────────────────────────────────────────────────

/// Shows the current pan/tilt/zoom position and movement state for every
/// media profile. Reports "IDLE" / "MOVING" / "UNKNOWN" per axis.
async fn ptz_status(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== PTZ status ===");

    let (client, caps) = connect(cfg).await?;

    let ptz_url = match caps.ptz.url.clone() {
        Some(u) => {
            println!("PTZ service: {u}");
            u
        }
        None => {
            println!("Device does not advertise a PTZ service.");
            return Ok(());
        }
    };

    let media_url = match caps.media.url.clone() {
        Some(u) => u,
        None => {
            println!("No media service — cannot list profiles.");
            return Ok(());
        }
    };

    let profiles = client.get_profiles(&media_url).await?;
    if profiles.is_empty() {
        println!("No media profiles found.");
        return Ok(());
    }

    println!(
        "\n{:<20} {:>10}  {:>10}  {:>8}  {:>14}  {:>8}",
        "Profile", "Pan", "Tilt", "Zoom", "Pan/Tilt move", "Zoom move"
    );
    println!("{}", "-".repeat(80));

    for profile in &profiles {
        match client.ptz_get_status(&ptz_url, &profile.token).await {
            Ok(status) => {
                let pan = status.pan.map(|v| format!("{v:+.4}")).unwrap_or("—".into());
                let tilt = status
                    .tilt
                    .map(|v| format!("{v:+.4}"))
                    .unwrap_or("—".into());
                let zoom = status.zoom.map(|v| format!("{v:.4}")).unwrap_or("—".into());
                println!(
                    "{:<20} {:>10}  {:>10}  {:>8}  {:>14}  {:>8}",
                    profile.name, pan, tilt, zoom, status.pan_tilt_status, status.zoom_status,
                );
            }
            Err(e) => println!("{:<20} ERROR: {e}", profile.name),
        }
    }

    Ok(())
}

// ── Example 9: video configuration ───────────────────────────────────────────

async fn video_config(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Video configuration (Media1) ===");

    let (client, caps) = connect(cfg).await?;
    let media_url = match caps.media.url.clone() {
        Some(u) => u,
        None => {
            println!("No Media service advertised.");
            return Ok(());
        }
    };

    section("GetVideoSources");
    let video_sources = match client.get_video_sources(&media_url).await {
        Ok(sources) => {
            println!("  Found {} source(s)", sources.len());
            for s in &sources {
                println!(
                    "  [{}]  {}  @ {:.0} fps",
                    s.token, s.resolution, s.framerate
                );
            }
            sources
        }
        Err(e) => {
            println!("  ERROR: {e}");
            vec![]
        }
    };

    section("GetVideoSourceConfigurations");
    let vsc_list = match client.get_video_source_configurations(&media_url).await {
        Ok(cfgs) => {
            println!("  Found {} config(s)", cfgs.len());
            for c in &cfgs {
                println!(
                    "  [{}] '{}' → source:{} bounds:{}x{}+{}+{}",
                    c.token,
                    c.name,
                    c.source_token,
                    c.bounds.width,
                    c.bounds.height,
                    c.bounds.x,
                    c.bounds.y,
                );
            }
            cfgs
        }
        Err(e) => {
            println!("  ERROR: {e}");
            vec![]
        }
    };

    // Options for first config
    if let Some(first) = vsc_list.first() {
        section(&format!(
            "GetVideoSourceConfigurationOptions [{}]",
            first.token
        ));
        match client
            .get_video_source_configuration_options(&media_url, Some(&first.token))
            .await
        {
            Ok(opts) => {
                if let Some(br) = &opts.bounds_range {
                    println!(
                        "  Bounds range: w=[{}-{}] h=[{}-{}]",
                        br.width_range.min,
                        br.width_range.max,
                        br.height_range.min,
                        br.height_range.max,
                    );
                }
                if !opts.source_tokens.is_empty() {
                    println!("  Available sources: {}", opts.source_tokens.join(", "));
                }
            }
            Err(e) => println!("  ERROR: {e}"),
        }
    }

    section("GetVideoEncoderConfigurations");
    let enc_list = match client.get_video_encoder_configurations(&media_url).await {
        Ok(cfgs) => {
            println!("  Found {} config(s)", cfgs.len());
            for c in &cfgs {
                let rc = c.rate_control.as_ref();
                println!(
                    "  [{}] '{}' → {} {}  fps:{}  bitrate:{}kbps",
                    c.token,
                    c.name,
                    c.encoding,
                    c.resolution,
                    rc.map(|r| r.frame_rate_limit).unwrap_or(0),
                    rc.map(|r| r.bitrate_limit).unwrap_or(0),
                );
                if let Some(h) = &c.h264 {
                    println!("    H.264: profile={} gop={}", h.profile, h.gov_length);
                }
                if let Some(h) = &c.h265 {
                    println!("    H.265: profile={} gop={}", h.profile, h.gov_length);
                }
            }
            cfgs
        }
        Err(e) => {
            println!("  ERROR: {e}");
            vec![]
        }
    };

    if let Some(first) = enc_list.first() {
        section(&format!(
            "GetVideoEncoderConfigurationOptions [{}]",
            first.token
        ));
        match client
            .get_video_encoder_configuration_options(&media_url, Some(&first.token))
            .await
        {
            Ok(opts) => {
                if let Some(qr) = opts.quality_range {
                    println!("  Quality range: {:.0}–{:.0}", qr.min, qr.max);
                }
                for (label, codec_opts) in [
                    (
                        "H.264",
                        opts.h264.as_ref().map(|h| {
                            (
                                &h.resolutions[..],
                                &h.profiles[..],
                                h.frame_rate_range,
                                h.bitrate_range,
                            )
                        }),
                    ),
                    (
                        "H.265",
                        opts.h265.as_ref().map(|h| {
                            (
                                &h.resolutions[..],
                                &h.profiles[..],
                                h.frame_rate_range,
                                h.bitrate_range,
                            )
                        }),
                    ),
                    (
                        "JPEG",
                        opts.jpeg
                            .as_ref()
                            .map(|j| (&j.resolutions[..], &[][..], j.frame_rate_range, None)),
                    ),
                ] {
                    if let Some((res, profiles, fps_range, bps_range)) = codec_opts {
                        println!(
                            "  {label} resolutions: {}",
                            res.iter()
                                .map(|r| r.to_string())
                                .collect::<Vec<_>>()
                                .join(", ")
                        );
                        if !profiles.is_empty() {
                            println!("  {label} profiles: {}", profiles.join(", "));
                        }
                        if let Some(r) = fps_range {
                            println!("  {label} fps range: {}-{}", r.min, r.max);
                        }
                        if let Some(r) = bps_range {
                            println!("  {label} bitrate range: {}-{} kbps", r.min, r.max);
                        }
                    }
                }
            }
            Err(e) => println!("  ERROR: {e}"),
        }
    }

    // Profile management demo: create a new profile, bind configs, then clean up
    section("Profile management lifecycle");
    let profiles = client.get_profiles(&media_url).await?;
    match client
        .create_profile(&media_url, "oxvif-test-profile", None)
        .await
    {
        Ok(test_profile) => {
            println!(
                "  Created  [{}] '{}'",
                test_profile.token, test_profile.name
            );

            // Bind first video source config if available
            if let Some(vsc) = vsc_list.first() {
                match client
                    .add_video_source_configuration(&media_url, &test_profile.token, &vsc.token)
                    .await
                {
                    Ok(()) => println!(
                        "  Bound    VideoSourceConfig [{}] → profile [{}]",
                        vsc.token, test_profile.token
                    ),
                    Err(e) => println!("  AddVideoSourceConfiguration: {e}"),
                }
            }

            // Bind first video encoder config if available
            if let Some(venc) = enc_list.first() {
                match client
                    .add_video_encoder_configuration(&media_url, &test_profile.token, &venc.token)
                    .await
                {
                    Ok(()) => println!(
                        "  Bound    VideoEncoderConfig [{}] → profile [{}]",
                        venc.token, test_profile.token
                    ),
                    Err(e) => println!("  AddVideoEncoderConfiguration: {e}"),
                }
            }

            // Verify via GetProfile
            match client.get_profile(&media_url, &test_profile.token).await {
                Ok(p) => println!("  Verified [{}] '{}'  fixed={}", p.token, p.name, p.fixed),
                Err(e) => println!("  GetProfile: {e}"),
            }

            // Clean up
            match client.delete_profile(&media_url, &test_profile.token).await {
                Ok(()) => println!(
                    "  Deleted  [{}] — device state restored",
                    test_profile.token
                ),
                Err(e) => println!("  Delete failed (manual cleanup needed): {e}"),
            }
        }
        Err(e) => println!("  CreateProfile: {e}"),
    }

    let _ = (video_sources, profiles);
    Ok(())
}

// ── Example 10: Media2 video configuration ────────────────────────────────────

async fn video_config_media2(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Media2 video configuration ===");

    let (client, caps) = connect(cfg).await?;

    let media2_url = match caps.media2.url.clone() {
        Some(u) => {
            println!("Media2 URL (GetCapabilities): {u}");
            u
        }
        None => {
            println!("Media2 not in GetCapabilities — trying GetServices...");
            match client.get_services().await {
                Ok(services) => match services.into_iter().find(|s| s.is_media2()) {
                    Some(svc) => {
                        println!("Media2 URL (GetServices): {}", svc.url);
                        svc.url
                    }
                    None => {
                        println!("Device does not support Media2.");
                        return Ok(());
                    }
                },
                Err(e) => {
                    println!("GetServices failed: {e} — device does not support Media2.");
                    return Ok(());
                }
            }
        }
    };

    section("GetProfiles (Media2)");
    let profiles2 = match client.get_profiles_media2(&media2_url).await {
        Ok(p) => {
            println!("  Found {} profile(s)", p.len());
            for pr in &p {
                println!(
                    "  [{token}] '{name}'  fixed={fixed}  vsc={vsc:?}  vec={vec:?}",
                    token = pr.token,
                    name = pr.name,
                    fixed = pr.fixed,
                    vsc = pr.video_source_token,
                    vec = pr.video_encoder_token,
                );
            }
            p
        }
        Err(e) => {
            println!("  ERROR: {e}");
            vec![]
        }
    };

    // Stream + snapshot URIs
    if let Some(p) = profiles2.first() {
        section(&format!(
            "GetStreamUri / GetSnapshotUri (Media2) [{}]",
            p.token
        ));
        match client.get_stream_uri_media2(&media2_url, &p.token).await {
            Ok(uri) => println!("  Stream  : {uri}"),
            Err(e) => println!("  Stream  ERROR: {e}"),
        }
        match client.get_snapshot_uri_media2(&media2_url, &p.token).await {
            Ok(uri) => println!("  Snapshot: {uri}"),
            Err(e) => println!("  Snapshot ERROR: {e}"),
        }
    }

    section("GetVideoEncoderConfigurations (Media2)");
    let enc_cfgs2 = match client
        .get_video_encoder_configurations_media2(&media2_url)
        .await
    {
        Ok(cfgs) => {
            println!("  Found {} config(s)", cfgs.len());
            for c in &cfgs {
                let rc = c.rate_control.as_ref();
                println!(
                    "  [{}] '{}' → {} {}  fps:{}  bitrate:{}kbps  gop:{:?}  profile:{:?}",
                    c.token,
                    c.name,
                    c.encoding,
                    c.resolution,
                    rc.map(|r| r.frame_rate_limit).unwrap_or(0),
                    rc.map(|r| r.bitrate_limit).unwrap_or(0),
                    c.gov_length,
                    c.profile,
                );
            }
            cfgs
        }
        Err(e) => {
            println!("  ERROR: {e}");
            vec![]
        }
    };

    section("GetVideoEncoderConfigurationOptions (Media2)");
    match client
        .get_video_encoder_configuration_options_media2(&media2_url, None)
        .await
    {
        Ok(opts) => {
            println!("  Found {} option set(s)", opts.options.len());
            for opt in &opts.options {
                println!("  {}:", opt.encoding);
                if !opt.resolutions.is_empty() {
                    println!(
                        "    Resolutions: {}",
                        opt.resolutions
                            .iter()
                            .map(|r| r.to_string())
                            .collect::<Vec<_>>()
                            .join(", ")
                    );
                }
                if !opt.profiles.is_empty() {
                    println!("    Profiles: {}", opt.profiles.join(", "));
                }
                if let Some(br) = opt.bitrate_range {
                    println!("    Bitrate: {}-{} kbps", br.min, br.max);
                }
                if let Some(gr) = opt.gov_length_range {
                    println!("    GoP: {}-{}", gr.min, gr.max);
                }
                if let Some(fr) = opt.frame_rate_range {
                    println!("    FPS: {}-{}", fr.min, fr.max);
                }
            }
        }
        Err(e) => println!("  ERROR: {e}"),
    }

    section("GetVideoEncoderInstances (Media2)");
    let first_vsc = client
        .get_video_source_configurations_media2(&media2_url)
        .await
        .ok()
        .and_then(|cfgs| cfgs.into_iter().next().map(|c| c.token));

    if let Some(vsc_token) = first_vsc {
        match client
            .get_video_encoder_instances_media2(&media2_url, &vsc_token)
            .await
        {
            Ok(inst) => {
                println!("  Total instances: {}  (vsc={})", inst.total, vsc_token);
                for enc in &inst.encodings {
                    println!("    {}: {} instance(s)", enc.encoding, enc.number);
                }
            }
            Err(e) => println!("  ERROR: {e}"),
        }
    } else {
        println!("  (no video source configurations available)");
    }

    let _ = (profiles2, enc_cfgs2);
    Ok(())
}

// ── Example 11: imaging settings ─────────────────────────────────────────────

/// Reads and displays the imaging settings and valid ranges for every video
/// source. Read-only — does not modify the device.
async fn imaging(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Imaging settings ===");

    let (client, caps) = connect(cfg).await?;

    let imaging_url = match caps.imaging.url.clone() {
        Some(u) => {
            println!("Imaging service: {u}");
            u
        }
        None => {
            println!("Device does not advertise an Imaging service.");
            return Ok(());
        }
    };

    let media_url = match caps.media.url.clone() {
        Some(u) => u,
        None => {
            println!("No media service — cannot list video sources.");
            return Ok(());
        }
    };

    let sources = match client.get_video_sources(&media_url).await {
        Ok(s) if !s.is_empty() => s,
        Ok(_) => {
            println!("No video sources found.");
            return Ok(());
        }
        Err(e) => {
            println!("GetVideoSources ERROR: {e}");
            return Ok(());
        }
    };

    for source in &sources {
        println!(
            "\nVideo source: [{}]  {}  @ {:.0} fps",
            source.token, source.resolution, source.framerate
        );

        section(&format!("GetImagingSettings [{}]", source.token));
        match client
            .get_imaging_settings(&imaging_url, &source.token)
            .await
        {
            Ok(s) => print_imaging_settings(&s),
            Err(e) => println!("  ERROR: {e}"),
        }

        section(&format!("GetImagingOptions [{}]", source.token));
        match client
            .get_imaging_options(&imaging_url, &source.token)
            .await
        {
            Ok(opts) => {
                let ranges = [
                    ("Brightness    ", opts.brightness),
                    ("ColorSaturation", opts.color_saturation),
                    ("Contrast      ", opts.contrast),
                    ("Sharpness     ", opts.sharpness),
                ];
                for (label, range) in ranges {
                    if let Some(r) = range {
                        println!("  {label}: {:.0} – {:.0}", r.min, r.max);
                    }
                }
                if !opts.ir_cut_filter_modes.is_empty() {
                    println!("  IR cut filter  : {}", opts.ir_cut_filter_modes.join(", "));
                }
                if !opts.white_balance_modes.is_empty() {
                    println!("  White balance  : {}", opts.white_balance_modes.join(", "));
                }
                if !opts.exposure_modes.is_empty() {
                    println!("  Exposure       : {}", opts.exposure_modes.join(", "));
                }
            }
            Err(e) => println!("  ERROR: {e}"),
        }
    }

    Ok(())
}

fn print_imaging_settings(s: &ImagingSettings) {
    let fmt = |v: Option<f32>| v.map(|f| format!("{f:.1}")).unwrap_or_else(|| "—".into());
    println!("  Brightness      : {}", fmt(s.brightness));
    println!("  ColorSaturation : {}", fmt(s.color_saturation));
    println!("  Contrast        : {}", fmt(s.contrast));
    println!("  Sharpness       : {}", fmt(s.sharpness));
    println!(
        "  IR cut filter   : {}",
        s.ir_cut_filter.as_deref().unwrap_or("—")
    );
    println!(
        "  White balance   : {}",
        s.white_balance_mode.as_deref().unwrap_or("—")
    );
    println!(
        "  Exposure        : {}",
        s.exposure_mode.as_deref().unwrap_or("—")
    );
}

// ── Example 12: events ────────────────────────────────────────────────────────

async fn events(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Events ===");

    let (client, caps) = connect(cfg).await?;
    let events_url = caps
        .events
        .url
        .ok_or_else(|| oxvif::soap::SoapError::missing("Events service not found"))?;

    // GetEventProperties
    section("GetEventProperties");
    match client.get_event_properties(&events_url).await {
        Ok(props) => {
            println!("  {} topic(s) available", props.topics.len());
            for t in &props.topics {
                println!("  - {t}");
            }
        }
        Err(e) => println!("  ERROR: {e}"),
    }

    if !caps.events.ws_pull_point {
        println!("\nDevice does not support WS-PullPoint — skipping subscription.");
        return Ok(());
    }

    // CreatePullPointSubscription
    section("CreatePullPointSubscription");
    let sub = client
        .create_pull_point_subscription(&events_url, None, Some("PT60S"))
        .await?;
    println!("  Subscription URL : {}", sub.reference_url);
    println!("  Termination time : {}", sub.termination_time);

    // PullMessages
    section("PullMessages (PT5S timeout)");
    match client.pull_messages(&sub.reference_url, "PT5S", 50).await {
        Ok(msgs) => {
            if msgs.is_empty() {
                println!("  No pending events in 5 seconds");
            } else {
                println!("  {} event(s) received:", msgs.len());
                for m in &msgs {
                    println!("  Topic   : {}", m.topic);
                    println!("  UtcTime : {}", m.utc_time);
                    for (k, v) in &m.source {
                        println!("  Source  : {k} = {v}");
                    }
                    for (k, v) in &m.data {
                        println!("  Data    : {k} = {v}");
                    }
                    println!();
                }
            }
        }
        Err(e) => println!("  ERROR: {e}"),
    }

    // Renew
    section("Renew");
    match client.renew_subscription(&sub.reference_url, "PT60S").await {
        Ok(new_time) => println!("  New termination time: {new_time}"),
        Err(e) => println!("  (skipped — {e})"),
    }

    // Unsubscribe
    section("Unsubscribe");
    match client.unsubscribe(&sub.reference_url).await {
        Ok(()) => println!("  Unsubscribed successfully"),
        Err(e) => println!("  (skipped — {e})"),
    }

    Ok(())
}

// ── event-stream example ──────────────────────────────────────────────────────

/// Demonstrates [`OnvifClient::event_stream`]: wraps pull-point polling into
/// an infinite async `Stream`. This example listens for up to 10 seconds and
/// prints the first 5 messages received, then unsubscribes.
async fn event_stream_example(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== event_stream ===");

    let (client, caps) = connect(cfg).await?;
    let events_url = caps
        .events
        .url
        .ok_or_else(|| oxvif::soap::SoapError::missing("Events service not found"))?;

    if !caps.events.ws_pull_point {
        println!("Device does not support WS-PullPoint — skipping.");
        return Ok(());
    }

    section("CreatePullPointSubscription");
    let sub = client
        .create_pull_point_subscription(&events_url, None, Some("PT60S"))
        .await?;
    println!("  Subscription URL : {}", sub.reference_url);

    section("event_stream (10 s window, up to 5 messages)");
    let mut stream = client.event_stream(&sub.reference_url, "PT5S", 10);
    let deadline = tokio::time::Instant::now() + Duration::from_secs(10);
    let mut count = 0usize;

    loop {
        match tokio::time::timeout_at(deadline, stream.next()).await {
            Ok(Some(Ok(msg))) => {
                count += 1;
                println!("  [{}] {} — data={:?}", msg.utc_time, msg.topic, msg.data);
                if count >= 5 {
                    println!("  (limit reached, stopping)");
                    break;
                }
            }
            Ok(Some(Err(e))) => {
                println!("  Stream error: {e}");
                break;
            }
            Ok(None) => break,
            Err(_) => {
                println!("  10 s window elapsed");
                break;
            }
        }
    }

    if count == 0 {
        println!("  No events received in 10 seconds.");
    }

    section("Unsubscribe");
    match client.unsubscribe(&sub.reference_url).await {
        Ok(()) => println!("  Unsubscribed."),
        Err(e) => println!("  (skipped — {e})"),
    }

    Ok(())
}

// ── Example 13: WS-Discovery ──────────────────────────────────────────────────

async fn discovery_example() -> Result<(), OnvifError> {
    println!("=== WS-Discovery (3 second probe) ===");
    println!("Sending multicast Probe to 239.255.255.250:3702 ...");

    let devices = oxvif::discovery::probe(Duration::from_secs(3)).await;

    if devices.is_empty() {
        println!("No ONVIF devices found on local network.");
        println!("Tip: ensure the camera is on the same L2 segment and responds to WS-Discovery.");
    } else {
        println!("Found {} device(s):", devices.len());
        for (i, d) in devices.iter().enumerate() {
            println!("\n  [{i}] {}", d.endpoint);
            for addr in &d.xaddrs {
                println!("      XAddr : {addr}");
            }
            for scope in &d.scopes {
                if scope.contains("onvif.org") {
                    println!("      Scope : {scope}");
                }
            }
        }
    }

    Ok(())
}

async fn discovery_listen_example() -> Result<(), OnvifError> {
    let secs = 30u64;
    println!("=== WS-Discovery passive listen ({secs}s) ===");
    println!("Binding UDP port 3702 and joining multicast 239.255.255.250 ...");
    println!("Plug in or unplug ONVIF devices to see Hello / Bye events.\n");

    let events = oxvif::discovery::listen(Duration::from_secs(secs)).await;

    if events.is_empty() {
        println!("No Hello/Bye announcements received within {secs}s.");
        println!("Tip: some devices only send Hello on network join, not on power-on.");
    } else {
        println!("Received {} event(s):", events.len());
        for ev in &events {
            match ev {
                DiscoveryEvent::Hello(d) => {
                    println!("\n  [Hello] {}", d.endpoint);
                    for addr in &d.xaddrs {
                        println!("          XAddr : {addr}");
                    }
                }
                DiscoveryEvent::Bye { endpoint } => {
                    println!("\n  [Bye]   {endpoint}");
                }
            }
        }
    }

    Ok(())
}

async fn push_subscribe_example(cfg: &Config) -> Result<(), OnvifError> {
    use std::net::SocketAddr;

    let (client, caps) = connect(cfg).await?;
    let events_url = match caps.events.url {
        Some(u) => u,
        None => {
            println!("Camera does not advertise an Events service URL.");
            return Ok(());
        }
    };

    // Determine our local IP by peeking at an outbound connection.
    let local_ip = {
        let s = tokio::net::UdpSocket::bind("0.0.0.0:0").await.unwrap();
        s.connect("8.8.8.8:80").await.unwrap();
        s.local_addr().unwrap().ip()
    };
    let bind_addr: SocketAddr = format!("{local_ip}:8899").parse().unwrap();
    let consumer_url = format!("http://{bind_addr}/notify");

    println!("=== WS-BaseNotification Push Subscribe ===");
    println!("Local listener : {bind_addr}");
    println!("Consumer URL   : {consumer_url}");
    println!("Events URL     : {events_url}");
    println!();

    // Start the listener stream before subscribing so we don't miss early messages.
    let mut stream = oxvif::notification_listener(bind_addr);

    println!("Subscribing ...");
    match client
        .subscribe(&events_url, &consumer_url, None, Some("PT60S"))
        .await
    {
        Ok(sub) => {
            println!("  Subscription reference : {}", sub.subscription_reference);
            println!("  Expires                : {}", sub.termination_time);
            println!("\nWaiting for push events (60 s). Move camera or trigger motion ...\n");

            let deadline = tokio::time::Instant::now() + Duration::from_secs(60);
            loop {
                let remaining = deadline.saturating_duration_since(tokio::time::Instant::now());
                if remaining.is_zero() {
                    break;
                }
                match tokio::time::timeout(remaining, stream.next()).await {
                    Ok(Some(msg)) => {
                        println!("  [Push] topic={}", msg.topic);
                        if !msg.utc_time.is_empty() {
                            println!("         time ={}", msg.utc_time);
                        }
                        for (k, v) in &msg.data {
                            println!("         data : {k}={v}");
                        }
                    }
                    _ => break,
                }
            }

            println!("\nUnsubscribing ...");
            match client.unsubscribe(&sub.subscription_reference).await {
                Ok(()) => println!("  Unsubscribed."),
                Err(e) => println!("  Unsubscribe failed (device may have already expired): {e}"),
            }
        }
        Err(e) => {
            println!("  Subscribe failed: {e}");
            println!("  This camera may only support PullPoint (use 'event-stream' instead).");
        }
    }

    Ok(())
}

// ── Example 14: error handling ────────────────────────────────────────────────

async fn error_handling_example(cfg: &Config) -> Result<(), OnvifError> {
    use oxvif::error::OnvifError as Err_;
    use oxvif::soap::SoapError;
    use oxvif::transport::TransportError;

    println!("=== Error handling ===");
    println!("Connecting to {} ...", cfg.camera_url);

    let client = OnvifClient::new(&cfg.camera_url).with_credentials(&cfg.username, &cfg.password);

    match client.get_capabilities().await {
        Ok(caps) => {
            println!("Connected successfully.");
            print_capabilities(&caps);
        }
        Err(Err_::Transport(TransportError::Http(e))) => {
            eprintln!("Network error: {e}");
            eprintln!("Check that the camera is reachable at {}", cfg.camera_url);
        }
        Err(Err_::Transport(TransportError::HttpStatus { status, body })) => {
            eprintln!("HTTP {status} from device");
            if !body.is_empty() {
                eprintln!("Body: {body}");
            }
        }
        Err(Err_::Soap(SoapError::Fault { code, reason })) => {
            eprintln!("SOAP Fault [{code}]: {reason}");
            eprintln!("Tip: verify username / password.");
        }
        Err(e) => {
            eprintln!("Unexpected error: {e}");
        }
    }

    Ok(())
}

// ── PTZ Configuration ─────────────────────────────────────────────────────────

async fn ptz_config(cfg: &Config) -> Result<(), OnvifError> {
    let (client, caps) = connect(cfg).await?;
    let ptz_url = match &caps.ptz.url {
        Some(url) => url.clone(),
        None => {
            println!("PTZ service not available on this device.");
            return Ok(());
        }
    };

    println!("=== PTZ Nodes ===");
    match client.ptz_get_nodes(&ptz_url).await {
        Ok(nodes) => {
            for n in &nodes {
                println!(
                    "  [{}] {} — max_presets={} home_supported={}",
                    n.token, n.name, n.max_presets, n.home_supported
                );
            }
        }
        Err(e) => println!("  GetNodes not supported: {e}"),
    }

    println!("\n=== PTZ Configurations ===");
    let cfgs = client.ptz_get_configurations(&ptz_url).await?;
    for c in &cfgs {
        println!(
            "  [{}] {} — node={} timeout={:?}",
            c.token, c.name, c.node_token, c.default_ptz_timeout
        );
        if let Some(ref opts) = c.pan_tilt_limits {
            println!("    pan_tilt x={:?} y={:?}", opts.x_range, opts.y_range);
        }
    }

    if let Some(first) = cfgs.first() {
        println!("\n=== PTZ Configuration Options ({}) ===", first.token);
        match client
            .ptz_get_configuration_options(&ptz_url, &first.token)
            .await
        {
            Ok(opts) => println!(
                "  timeout min={:?} max={:?}",
                opts.ptz_timeout_min, opts.ptz_timeout_max
            ),
            Err(e) => println!("  GetConfigurationOptions not supported: {e}"),
        }
    }

    Ok(())
}

// ── Audio ─────────────────────────────────────────────────────────────────────

async fn audio_example(cfg: &Config) -> Result<(), OnvifError> {
    let (client, caps) = connect(cfg).await?;
    let media_url = caps.media.url.as_deref().unwrap_or("").to_string();

    println!("=== Audio Sources ===");
    match client.get_audio_sources(&media_url).await {
        Ok(sources) => {
            if sources.is_empty() {
                println!("  No audio sources found.");
            }
            for s in &sources {
                println!("  [{}] channels={}", s.token, s.channels);
            }
        }
        Err(e) => println!("  GetAudioSources not supported: {e}"),
    }

    println!("\n=== Audio Source Configurations ===");
    match client.get_audio_source_configurations(&media_url).await {
        Ok(cfgs) => {
            for c in &cfgs {
                println!("  [{}] {} — source={}", c.token, c.name, c.source_token);
            }
        }
        Err(e) => println!("  GetAudioSourceConfigurations not supported: {e}"),
    }

    println!("\n=== Audio Encoder Configurations ===");
    match client.get_audio_encoder_configurations(&media_url).await {
        Ok(cfgs) => {
            for c in &cfgs {
                println!(
                    "  [{}] {} — encoding={} bitrate={}kbps sample_rate={}kHz",
                    c.token, c.name, c.encoding, c.bitrate, c.sample_rate
                );
            }
            if let Some(first) = cfgs.first() {
                println!("\n=== Audio Encoder Options ({}) ===", first.token);
                match client
                    .get_audio_encoder_configuration_options(&media_url, &first.token)
                    .await
                {
                    Ok(opts) => {
                        for o in &opts.options {
                            println!(
                                "  {} bitrates={:?} sample_rates={:?}",
                                o.encoding, o.bitrate_list, o.sample_rate_list
                            );
                        }
                    }
                    Err(e) => println!("  GetAudioEncoderConfigurationOptions not supported: {e}"),
                }
            }
        }
        Err(e) => println!("  GetAudioEncoderConfigurations not supported: {e}"),
    }

    Ok(())
}

// ── PTZ Home ─────────────────────────────────────────────────────────────────

async fn ptz_home_example(cfg: &Config) -> Result<(), OnvifError> {
    let (client, caps) = connect(cfg).await?;
    let ptz_url = match caps.ptz.url.as_deref() {
        Some(u) => u.to_string(),
        None => {
            println!("PTZ service not available.");
            return Ok(());
        }
    };
    let media_url = caps.media.url.as_deref().unwrap_or("").to_string();
    let profiles = client.get_profiles(&media_url).await?;
    let profile = match profiles.first() {
        Some(p) => p.token.clone(),
        None => {
            println!("No profiles found.");
            return Ok(());
        }
    };

    println!("=== PTZ Home Position ===");
    println!("Profile: {profile}");

    println!("\nGotoHomePosition …");
    match client
        .ptz_goto_home_position(&ptz_url, &profile, None)
        .await
    {
        Ok(()) => println!("  Moved to home position."),
        Err(e) => println!("  (skipped — {e})"),
    }

    println!("\nSetHomePosition (saves current position as home) …");
    match client.ptz_set_home_position(&ptz_url, &profile).await {
        Ok(()) => println!("  Home position saved."),
        Err(e) => println!("  (skipped — {e})"),
    }

    Ok(())
}

// ── Imaging Focus ─────────────────────────────────────────────────────────────

async fn imaging_focus(cfg: &Config) -> Result<(), OnvifError> {
    let (client, caps) = connect(cfg).await?;
    let imaging_url = match caps.imaging.url.as_deref() {
        Some(u) => u.to_string(),
        None => {
            println!("Imaging service not available.");
            return Ok(());
        }
    };
    let media_url = caps.media.url.as_deref().unwrap_or("").to_string();
    let source_token = client
        .get_video_sources(&media_url)
        .await?
        .into_iter()
        .next()
        .map(|s| s.token)
        .unwrap_or_default();

    println!("=== Imaging Focus ===");
    println!("Source: {source_token}");

    println!("\n-- GetStatus --");
    match client.imaging_get_status(&imaging_url, &source_token).await {
        Ok(s) => println!(
            "  focus={:?}  state={}",
            s.focus_position, s.focus_move_status
        ),
        Err(e) => println!("  (skipped — {e})"),
    }

    println!("\n-- GetMoveOptions --");
    match client
        .imaging_get_move_options(&imaging_url, &source_token)
        .await
    {
        Ok(opts) => {
            if let Some(r) = opts.absolute_position_range {
                println!("  Absolute position: {}–{}", r.min, r.max);
            }
            if let Some(r) = opts.absolute_speed_range {
                println!("  Absolute speed   : {}–{}", r.min, r.max);
            }
            if let Some(r) = opts.relative_distance_range {
                println!("  Relative distance: {}–{}", r.min, r.max);
            }
            if let Some(r) = opts.continuous_speed_range {
                println!("  Continuous speed : {}–{}", r.min, r.max);
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    println!("\n-- Move (Continuous speed=0.2) then Stop --");
    match client
        .imaging_move(
            &imaging_url,
            &source_token,
            &FocusMove::Continuous { speed: 0.2 },
        )
        .await
    {
        Ok(()) => {
            tokio::time::sleep(Duration::from_millis(500)).await;
            match client.imaging_stop(&imaging_url, &source_token).await {
                Ok(()) => println!("  Moved and stopped."),
                Err(e) => println!("  Stop failed: {e}"),
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    Ok(())
}

// ── OSD ───────────────────────────────────────────────────────────────────────

async fn osd_example(cfg: &Config) -> Result<(), OnvifError> {
    let (client, caps) = connect(cfg).await?;
    let media_url = caps.media.url.as_deref().unwrap_or("").to_string();

    // Get video source config token for OSD binding
    let vsc_token = client
        .get_video_source_configurations(&media_url)
        .await
        .ok()
        .and_then(|v| v.into_iter().next().map(|c| c.token))
        .unwrap_or_default();

    println!("=== OSD ===");
    println!("Video source config: {vsc_token}");

    println!("\n-- GetOSDOptions --");
    match client.get_osd_options(&media_url, &vsc_token).await {
        Ok(opts) => {
            println!("  Max OSDs  : {}", opts.max_osd);
            println!("  Types     : {:?}", opts.types);
            println!("  Positions : {:?}", opts.position_types);
            println!("  Text types: {:?}", opts.text_types);
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    println!("\n-- GetOSDs --");
    let osds = match client.get_osds(&media_url, None).await {
        Ok(v) => {
            println!("  Found {} OSD element(s)", v.len());
            for o in &v {
                println!(
                    "  [{}] type={} position={}",
                    o.token, o.type_, o.position.type_
                );
                if let Some(ref ts) = o.text_string {
                    println!("    text_type={} plain={:?}", ts.type_, ts.plain_text);
                }
            }
            v
        }
        Err(e) => {
            println!("  (skipped — {e})");
            return Ok(());
        }
    };

    // Lifecycle test: create → verify → delete
    println!("\n-- CreateOSD + DeleteOSD (lifecycle test) --");
    let new_osd = OsdConfiguration {
        token: String::new(),
        video_source_config_token: vsc_token.clone(),
        type_: "Text".into(),
        position: OsdPosition {
            type_: "UpperLeft".into(),
            x: None,
            y: None,
        },
        text_string: Some(OsdTextString {
            type_: "DateAndTime".into(),
            plain_text: None,
            date_format: Some("MM/DD/YYYY".into()),
            time_format: Some("HH:mm:ss".into()),
            font_size: None,
            font_color: None,
            background_color: None,
            is_persistent_text: None,
        }),
        image_path: None,
    };

    match client.create_osd(&media_url, &new_osd).await {
        Ok(token) => {
            println!("  Created  [{token}] 'DateAndTime OSD'");
            match client.delete_osd(&media_url, &token).await {
                Ok(()) => println!("  Deleted  [{token}] — device state restored"),
                Err(e) => println!("  Delete failed: {e}"),
            }
        }
        Err(e) => println!("  CreateOSD not supported: {e}"),
    }

    let _ = osds;
    Ok(())
}

// ── Recording / Search / Replay ───────────────────────────────────────────────

async fn recording_example(cfg: &Config) -> Result<(), OnvifError> {
    let (client, _caps) = connect(cfg).await?;

    let services = client.get_services().await?;
    let recording_url = services
        .iter()
        .find(|s| s.namespace.contains("recording"))
        .map(|s| s.url.clone());
    let search_url = services
        .iter()
        .find(|s| s.namespace.contains("search"))
        .map(|s| s.url.clone());
    let replay_url = services
        .iter()
        .find(|s| s.namespace.contains("replay"))
        .map(|s| s.url.clone());

    // ── GetRecordings ──────────────────────────────────────────────────────
    if let Some(ref url) = recording_url {
        println!("=== GetRecordings ===");
        match client.get_recordings(url).await {
            Ok(recs) => {
                println!("  Found {} recording(s)", recs.len());
                for r in &recs {
                    println!(
                        "  [{}] source='{}' content={}",
                        r.token, r.source.name, r.content
                    );
                    for t in &r.tracks {
                        println!("    track [{}] type={}", t.token, t.track_type);
                    }
                }
            }
            Err(e) => println!("  Not supported: {e}"),
        }
    } else {
        println!("Recording service not found in GetServices response.");
    }

    // ── FindRecordings → GetRecordingSearchResults → EndSearch ────────────
    if let (Some(ref srch_url), Some(ref rpl_url)) = (search_url, replay_url) {
        println!("\n=== FindRecordings ===");
        match client.find_recordings(srch_url, Some(10), "PT60S").await {
            Ok(token) => {
                println!("  Search token: {token}");

                println!("\n=== GetRecordingSearchResults ===");
                match client
                    .get_recording_search_results(srch_url, &token, 10, "PT5S")
                    .await
                {
                    Ok(results) => {
                        println!("  State: {}", results.search_state);
                        println!("  Found {} result(s)", results.recording_information.len());
                        for ri in &results.recording_information {
                            println!(
                                "  [{}] '{}' {} → {}",
                                ri.recording_token,
                                ri.source_name,
                                ri.earliest_recording.as_deref().unwrap_or("?"),
                                ri.latest_recording.as_deref().unwrap_or("?")
                            );

                            println!("\n=== GetReplayUri [{}] ===", ri.recording_token);
                            match client
                                .get_replay_uri(rpl_url, &ri.recording_token, "RTP-Unicast", "RTSP")
                                .await
                            {
                                Ok(uri) => println!("  {uri}"),
                                Err(e) => println!("  Not supported: {e}"),
                            }
                        }
                    }
                    Err(e) => println!("  Not supported: {e}"),
                }

                println!("\n=== EndSearch ===");
                match client.end_search(srch_url, &token).await {
                    Ok(()) => println!("  Search session released."),
                    Err(e) => println!("  {e}"),
                }
            }
            Err(e) => println!("  Not supported: {e}"),
        }
    } else {
        println!("\nSearch/Replay services not found in GetServices response.");
    }

    Ok(())
}

// ── Recording jobs example ────────────────────────────────────────────────────

/// Demonstrates Profile G write operations: `create_recording`, `create_track`,
/// `create_recording_job`, `set_recording_job_mode`, then full cleanup.
async fn recording_jobs_example(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Recording Jobs ===");

    let (client, _caps) = connect(cfg).await?;
    let services = client.get_services().await?;
    let recording_url = match services
        .iter()
        .find(|s| s.namespace.contains("recording"))
        .map(|s| s.url.clone())
    {
        Some(u) => u,
        None => {
            println!(
                "Recording service not found in GetServices — device may not support Profile G."
            );
            return Ok(());
        }
    };

    // ── List existing jobs ─────────────────────────────────────────────────
    section("GetRecordingJobs");
    match client.get_recording_jobs(&recording_url).await {
        Ok(jobs) => {
            println!("  {} existing job(s)", jobs.len());
            for j in &jobs {
                println!(
                    "  [{}] rec={} mode={} priority={}",
                    j.token, j.recording_token, j.mode, j.priority
                );

                section(&format!("GetRecordingJobState [{}]", j.token));
                match client
                    .get_recording_job_state(&recording_url, &j.token)
                    .await
                {
                    Ok(state) => println!("  active_state={}", state.active_state),
                    Err(e) => println!("  (skipped — {e})"),
                }
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── Create → track → job → toggle → cleanup ────────────────────────────
    section("CreateRecording");
    let rec_token = match client
        .create_recording(
            &recording_url,
            &RecordingConfiguration {
                source_name: "oxvif-test".into(),
                source_id: "oxvif-src-1".into(),
                description: "Created by oxvif example".into(),
                ..Default::default()
            },
        )
        .await
    {
        Ok(t) => {
            println!("  token={t}");
            t
        }
        Err(e) => {
            println!("  Not supported or failed: {e}");
            return Ok(());
        }
    };

    section("CreateTrack (Video)");
    let track_token = match client
        .create_track(&recording_url, &rec_token, "Video", "Main video track")
        .await
    {
        Ok(t) => {
            println!("  track token={t}");
            t
        }
        Err(e) => {
            println!("  (skipped — {e})");
            String::new()
        }
    };

    section("CreateRecordingJob");
    let job_token = match client
        .create_recording_job(
            &recording_url,
            &RecordingJobConfiguration {
                recording_token: rec_token.clone(),
                mode: "Idle".into(),
                priority: 1,
                source_token: "VideoSourceToken_0".into(),
            },
        )
        .await
    {
        Ok(token) => {
            println!("  job token={token}");
            token
        }
        Err(e) => {
            println!("  (skipped — {e})");
            String::new()
        }
    };

    if !job_token.is_empty() {
        section("SetRecordingJobMode → Active");
        match client
            .set_recording_job_mode(&recording_url, &job_token, "Active")
            .await
        {
            Ok(()) => println!("  Mode set to Active"),
            Err(e) => println!("  (skipped — {e})"),
        }

        section("SetRecordingJobMode → Idle");
        match client
            .set_recording_job_mode(&recording_url, &job_token, "Idle")
            .await
        {
            Ok(()) => println!("  Mode set to Idle"),
            Err(e) => println!("  (skipped — {e})"),
        }

        section("DeleteRecordingJob (cleanup)");
        match client
            .delete_recording_job(&recording_url, &job_token)
            .await
        {
            Ok(()) => println!("  Job deleted"),
            Err(e) => println!("  (skipped — {e})"),
        }
    }

    if !track_token.is_empty() {
        section("DeleteTrack (cleanup)");
        match client
            .delete_track(&recording_url, &rec_token, &track_token)
            .await
        {
            Ok(()) => println!("  Track deleted"),
            Err(e) => println!("  (skipped — {e})"),
        }
    }

    section("DeleteRecording (cleanup)");
    match client.delete_recording(&recording_url, &rec_token).await {
        Ok(()) => println!("  Recording deleted"),
        Err(e) => println!("  (skipped — {e})"),
    }

    Ok(())
}

// ── Session example ───────────────────────────────────────────────────────────

/// Demonstrates [`OnvifSession`]: build once, call methods without URLs.
///
/// This covers the same device/media/PTZ/recording operations as the other
/// examples but uses the high-level session API instead of `OnvifClient`
/// directly, so service URLs never appear in application code.
async fn session_example(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== OnvifSession example ===");
    println!("Connecting to {} ...", cfg.camera_url);

    // ── Build session ─────────────────────────────────────────────────────────
    // with_clock_sync() calls GetSystemDateAndTime before GetCapabilities so
    // WS-Security timestamps stay in sync with the device clock.
    let session = OnvifSession::builder(&cfg.camera_url)
        .with_credentials(&cfg.username, &cfg.password)
        .with_clock_sync()
        .build()
        .await?;

    println!("Session ready.");

    // ── Capabilities (already cached, no extra round-trip) ────────────────────
    section("Cached Capabilities");
    print_capabilities(session.capabilities());

    // ── Device info ───────────────────────────────────────────────────────────
    section("GetDeviceInformation");
    match session.get_device_info().await {
        Ok(info) => println!(
            "  {}/{} fw:{} sn:{}",
            info.manufacturer, info.model, info.firmware_version, info.serial_number
        ),
        Err(e) => println!("  (skipped — {e})"),
    }

    // ── Media profiles ────────────────────────────────────────────────────────
    section("GetProfiles");
    let profiles = match session.get_profiles().await {
        Ok(p) => {
            println!("  {} profile(s)", p.len());
            for prof in &p {
                println!("  [{}] {}", prof.token, prof.name);
            }
            p
        }
        Err(e) => {
            println!("  (skipped — {e})");
            vec![]
        }
    };

    // ── RTSP stream URIs ──────────────────────────────────────────────────────
    section("GetStreamUri");
    for prof in &profiles {
        match session.get_stream_uri(&prof.token).await {
            Ok(uri) => println!("  [{}] {}", prof.token, uri.uri),
            Err(e) => println!("  [{}] skipped — {e}", prof.token),
        }
    }

    // ── PTZ status ────────────────────────────────────────────────────────────
    section("PTZ status (first profile)");
    if let Some(prof) = profiles.first() {
        match session.ptz_get_status(&prof.token).await {
            Ok(status) => {
                let pan = status.pan.map(|v| format!("{v:+.4}")).unwrap_or("—".into());
                let tilt = status
                    .tilt
                    .map(|v| format!("{v:+.4}"))
                    .unwrap_or("—".into());
                let zoom = status.zoom.map(|v| format!("{v:.4}")).unwrap_or("—".into());
                println!(
                    "  pan={pan}  tilt={tilt}  zoom={zoom}  pt_status={}  z_status={}",
                    status.pan_tilt_status, status.zoom_status,
                );
            }
            Err(e) => println!("  (skipped — {e})"),
        }
    }

    // ── Recordings ────────────────────────────────────────────────────────────
    section("GetRecordings");
    match session.get_recordings().await {
        Ok(recs) => {
            println!("  {} recording(s)", recs.len());
            for rec in recs.iter().take(3) {
                println!(
                    "  [{}] source='{}' content={}",
                    rec.token, rec.source.name, rec.content
                );
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    println!("\nDone.");
    Ok(())
}

// ── Example: users ────────────────────────────────────────────────────────────

/// List all device user accounts.
/// Creates and then immediately deletes a test account to exercise write paths.
async fn users_example(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== User management ===");

    let (client, _caps) = connect(cfg).await?;

    section("GetUsers");
    let users: Vec<User> = client.get_users().await?;
    println!("  Found {} user(s)", users.len());
    for u in &users {
        println!("  {} ({})", u.username, u.user_level);
    }

    // Create a temporary test user, then delete it to leave state unchanged.
    let test_user = "oxvif_test_user";
    section("CreateUsers (test)");
    match client
        .create_users(&[(test_user, "TestPass1!", "User")])
        .await
    {
        Ok(()) => {
            println!("  Created '{test_user}'");
            section("DeleteUsers (cleanup)");
            match client.delete_users(&[test_user]).await {
                Ok(()) => println!("  Deleted '{test_user}'"),
                Err(e) => println!("  Delete failed — {e}"),
            }
        }
        Err(e) => println!("  (skipped — {e})"),
    }

    Ok(())
}

// ── Example: network config ───────────────────────────────────────────────────

/// Show network interfaces, protocols, DNS configuration, and default gateway.
/// Read-only — does not modify the device.
async fn network_config(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Network configuration ===");

    let (client, _caps) = connect(cfg).await?;

    section("GetNetworkInterfaces");
    match client.get_network_interfaces().await {
        Ok(ifaces) => {
            println!(
                "  {:<12}  {:<18}  {:<20}  {:<18}  DHCP",
                "Token", "Name", "IP/Prefix", "MAC"
            );
            println!("  {}", "-".repeat(80));
            for i in &ifaces {
                println!(
                    "  {:<12}  {:<18}  {:<20}  {:<18}  {}",
                    i.token,
                    i.name,
                    format!("{}/{}", i.ipv4_address, i.ipv4_prefix_length),
                    i.hw_address,
                    i.ipv4_from_dhcp,
                );
            }
        }
        Err(e) => println!("  ERROR: {e}"),
    }

    section("GetNetworkProtocols");
    match client.get_network_protocols().await {
        Ok(protos) => {
            for p in &protos {
                let ports: Vec<String> = p.ports.iter().map(|n| n.to_string()).collect();
                println!(
                    "  {:<8}  enabled={:<5}  ports=[{}]",
                    p.name,
                    p.enabled,
                    ports.join(", ")
                );
            }
        }
        Err(e) => println!("  ERROR: {e}"),
    }

    section("GetDNS");
    match client.get_dns().await {
        Ok(dns) => {
            let src = if dns.from_dhcp { "DHCP" } else { "manual" };
            println!("  Source  : {src}");
            if dns.servers.is_empty() {
                println!("  Servers : (none configured)");
            } else {
                for (i, s) in dns.servers.iter().enumerate() {
                    println!("  Server {i}: {s}");
                }
            }
        }
        Err(e) => println!("  ERROR: {e}"),
    }

    section("GetNetworkDefaultGateway");
    match client.get_network_default_gateway().await {
        Ok(gw) => {
            if gw.ipv4_addresses.is_empty() && gw.ipv6_addresses.is_empty() {
                println!("  (no gateway configured)");
            }
            for addr in &gw.ipv4_addresses {
                println!("  IPv4: {addr}");
            }
            for addr in &gw.ipv6_addresses {
                println!("  IPv6: {addr}");
            }
        }
        Err(e) => println!("  ERROR: {e}"),
    }

    Ok(())
}

// ── Example: relay outputs ────────────────────────────────────────────────────

/// List all relay outputs and trigger the first one active then inactive.
async fn relay_outputs_example(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Relay outputs ===");

    let (client, _caps) = connect(cfg).await?;

    section("GetRelayOutputs");
    let relays = client.get_relay_outputs().await?;
    println!("  Found {} relay output(s)", relays.len());
    for r in &relays {
        println!(
            "  [{}] mode={} delay={} idle={}",
            r.token, r.mode, r.delay_time, r.idle_state
        );
    }

    if let Some(first) = relays.first() {
        section(&format!("SetRelayOutputState [{}] → active", first.token));
        match client.set_relay_output_state(&first.token, "active").await {
            Ok(()) => {
                println!("  Set active");
                section(&format!("SetRelayOutputState [{}] → inactive", first.token));
                match client
                    .set_relay_output_state(&first.token, "inactive")
                    .await
                {
                    Ok(()) => println!("  Reset to inactive"),
                    Err(e) => println!("  Reset failed — {e}"),
                }
            }
            Err(e) => println!("  (skipped — {e})"),
        }
    }

    Ok(())
}

// ── Example: storage ──────────────────────────────────────────────────────────

/// List storage configurations and exercise set_storage_configuration.
async fn storage_example(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== Storage configurations ===");

    let (client, _caps) = connect(cfg).await?;

    section("GetStorageConfigurations");
    let configs: Vec<StorageConfiguration> = client.get_storage_configurations().await?;
    if configs.is_empty() {
        println!("  (no storage configurations found)");
    } else {
        println!(
            "  {:<12}  {:<14}  {:<20}  User",
            "Token", "Type", "Local path"
        );
        println!("  {}", "-".repeat(65));
        for c in &configs {
            println!(
                "  {:<12}  {:<14}  {:<20}  {}",
                c.token,
                c.storage_type,
                c.local_path,
                if c.user.is_empty() { "(none)" } else { &c.user }
            );
        }
    }

    Ok(())
}

// ── Example: discovery mode ───────────────────────────────────────────────────

/// Show the current WS-Discovery mode and optionally toggle it.
/// Read-only by default — does not change the device.
async fn discovery_mode_example(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== WS-Discovery mode ===");

    let (client, _caps) = connect(cfg).await?;

    section("GetDiscoveryMode");
    let mode = client.get_discovery_mode().await?;
    println!("  Current mode: {mode}");

    Ok(())
}

// ── Healthcheck ──────────────────────────────────────────────────────────────

/// Run all read-only ONVIF APIs against a real camera and report pass/fail.
///
/// No write operations are performed — safe to run against production cameras.
async fn healthcheck(cfg: &Config) -> Result<(), OnvifError> {
    println!("=== oxvif Healthcheck ===");
    println!("Target: {}", cfg.camera_url);
    println!();

    let mut pass = 0u32;
    let mut fail = 0u32;
    let mut skip = 0u32;

    fn record<T>(
        label: &str,
        result: Result<T, impl std::fmt::Display>,
        pass: &mut u32,
        fail: &mut u32,
    ) -> Option<T> {
        match result {
            Ok(v) => {
                println!("  PASS  {label}");
                *pass += 1;
                Some(v)
            }
            Err(e) => {
                println!("  FAIL  {label}  — {e}");
                *fail += 1;
                None
            }
        }
    }

    // ── 1. Connect & capabilities ────────────────────────────────────────────

    println!("── Device Service ──");
    let base = OnvifClient::new(&cfg.camera_url);
    let dt = record(
        "GetSystemDateAndTime",
        base.get_system_date_and_time().await,
        &mut pass,
        &mut fail,
    );

    let utc_offset = dt.map(|d| d.utc_offset_secs()).unwrap_or(0);
    let client = OnvifClient::new(&cfg.camera_url)
        .with_credentials(&cfg.username, &cfg.password)
        .with_utc_offset(utc_offset);

    let caps = record(
        "GetCapabilities",
        client.get_capabilities().await,
        &mut pass,
        &mut fail,
    );
    let Some(caps) = caps else {
        println!("\nCannot continue without capabilities.");
        return Ok(());
    };

    record(
        "GetDeviceInformation",
        client.get_device_info().await,
        &mut pass,
        &mut fail,
    );
    record("GetScopes", client.get_scopes().await, &mut pass, &mut fail);
    record(
        "GetHostname",
        client.get_hostname().await,
        &mut pass,
        &mut fail,
    );
    record("GetDNS", client.get_dns().await, &mut pass, &mut fail);
    record("GetNTP", client.get_ntp().await, &mut pass, &mut fail);
    record(
        "GetNetworkInterfaces",
        client.get_network_interfaces().await,
        &mut pass,
        &mut fail,
    );
    record(
        "GetNetworkDefaultGateway",
        client.get_network_default_gateway().await,
        &mut pass,
        &mut fail,
    );
    record(
        "GetNetworkProtocols",
        client.get_network_protocols().await,
        &mut pass,
        &mut fail,
    );
    record("GetUsers", client.get_users().await, &mut pass, &mut fail);
    record(
        "GetDiscoveryMode",
        client.get_discovery_mode().await,
        &mut pass,
        &mut fail,
    );
    record(
        "GetServices",
        client.get_services().await,
        &mut pass,
        &mut fail,
    );
    record(
        "GetRelayOutputs",
        client.get_relay_outputs().await,
        &mut pass,
        &mut fail,
    );

    // ── 2. Media Service ─────────────────────────────────────────────────────

    println!("\n── Media Service ──");
    let profiles: Vec<MediaProfile> = if let Some(url) = caps.media.url.as_deref() {
        let p = record(
            "GetProfiles",
            client.get_profiles(url).await,
            &mut pass,
            &mut fail,
        );
        record(
            "GetVideoSources",
            client.get_video_sources(url).await,
            &mut pass,
            &mut fail,
        );
        record(
            "GetAudioSources",
            client.get_audio_sources(url).await,
            &mut pass,
            &mut fail,
        );
        record(
            "GetVideoEncoderConfigurations",
            client.get_video_encoder_configurations(url).await,
            &mut pass,
            &mut fail,
        );
        record(
            "GetVideoSourceConfigurations",
            client.get_video_source_configurations(url).await,
            &mut pass,
            &mut fail,
        );
        record(
            "GetAudioEncoderConfigurations",
            client.get_audio_encoder_configurations(url).await,
            &mut pass,
            &mut fail,
        );
        record(
            "GetAudioSourceConfigurations",
            client.get_audio_source_configurations(url).await,
            &mut pass,
            &mut fail,
        );

        let profiles = p.unwrap_or_default();
        if let Some(first) = profiles.first() {
            record(
                "GetStreamUri (profile 1)",
                client.get_stream_uri(url, &first.token).await,
                &mut pass,
                &mut fail,
            );
            record(
                "GetSnapshotUri (profile 1)",
                client.get_snapshot_uri(url, &first.token).await,
                &mut pass,
                &mut fail,
            );
        }
        profiles
    } else {
        println!("  SKIP  (Media service not available)");
        skip += 9;
        Vec::new()
    };

    // ── 3. Media2 Service ────────────────────────────────────────────────────

    println!("\n── Media2 Service ──");
    if let Some(url) = caps.media2.url.as_deref() {
        record(
            "GetProfiles (Media2)",
            client.get_profiles_media2(url).await,
            &mut pass,
            &mut fail,
        );
    } else {
        println!("  SKIP  (Media2 service not available)");
        skip += 1;
    }

    // ── 4. Imaging Service ───────────────────────────────────────────────────

    println!("\n── Imaging Service ──");
    let source_token = profiles
        .first()
        .and_then(|p| p.video_source_token.as_deref());
    match (caps.imaging.url.as_deref(), source_token) {
        (Some(url), Some(src)) => {
            record(
                "GetImagingSettings",
                client.get_imaging_settings(url, src).await,
                &mut pass,
                &mut fail,
            );
            record(
                "GetImagingOptions",
                client.get_imaging_options(url, src).await,
                &mut pass,
                &mut fail,
            );
            record(
                "GetImagingStatus",
                client.imaging_get_status(url, src).await,
                &mut pass,
                &mut fail,
            );
            record(
                "GetImagingMoveOptions",
                client.imaging_get_move_options(url, src).await,
                &mut pass,
                &mut fail,
            );
        }
        (None, _) => {
            println!("  SKIP  (Imaging service not available)");
            skip += 4;
        }
        (_, None) => {
            println!("  SKIP  (No video source token in profiles)");
            skip += 4;
        }
    }

    // ── 5. PTZ Service ───────────────────────────────────────────────────────

    println!("\n── PTZ Service ──");
    if let Some(url) = caps.ptz.url.as_deref() {
        record(
            "GetNodes",
            client.ptz_get_nodes(url).await,
            &mut pass,
            &mut fail,
        );
        record(
            "GetConfigurations",
            client.ptz_get_configurations(url).await,
            &mut pass,
            &mut fail,
        );
        if let Some(first) = profiles.first() {
            record(
                "GetPresets (profile 1)",
                client.ptz_get_presets(url, &first.token).await,
                &mut pass,
                &mut fail,
            );
            record(
                "GetStatus (profile 1)",
                client.ptz_get_status(url, &first.token).await,
                &mut pass,
                &mut fail,
            );
        }
    } else {
        println!("  SKIP  (PTZ service not available)");
        skip += 4;
    }

    // ── 6. Events Service ────────────────────────────────────────────────────

    println!("\n── Events Service ──");
    if let Some(url) = caps.events.url.as_deref() {
        record(
            "GetEventProperties",
            client.get_event_properties(url).await,
            &mut pass,
            &mut fail,
        );
    } else {
        println!("  SKIP  (Events service not available)");
        skip += 1;
    }

    // ── 7. Recording Service ─────────────────────────────────────────────────

    println!("\n── Recording Service ──");
    if let Some(url) = caps.recording.url.as_deref() {
        record(
            "GetRecordings",
            client.get_recordings(url).await,
            &mut pass,
            &mut fail,
        );
        record(
            "GetRecordingJobs",
            client.get_recording_jobs(url).await,
            &mut pass,
            &mut fail,
        );
    } else {
        println!("  SKIP  (Recording service not available)");
        skip += 2;
    }

    // ── Summary ──────────────────────────────────────────────────────────────

    let total = pass + fail + skip;
    println!();
    println!("════════════════════════════════════");
    println!("  PASS: {pass:3}");
    println!("  FAIL: {fail:3}");
    println!("  SKIP: {skip:3}");
    println!("  TOTAL:{total:3}");
    println!("════════════════════════════════════");

    if fail > 0 {
        println!("\nSome checks failed — review FAIL lines above.");
    } else {
        println!("\nAll checks passed!");
    }

    Ok(())
}