"""
OAuth authentication module for Arcade CLI.

Implements OAuth 2.0 Authorization Code flow with PKCE for secure CLI authentication.
Uses authlib for OAuth protocol handling.
"""

import logging
import os
import secrets
import socketserver
import subprocess
import sys
import threading
import uuid
import webbrowser
from collections.abc import Generator
from contextlib import contextmanager
from dataclasses import dataclass
from datetime import datetime, timedelta
from http.server import BaseHTTPRequestHandler, HTTPServer
from pathlib import Path
from typing import Any, Callable
from urllib.parse import parse_qs

import httpx
import yaml
from arcade_core.auth_tokens import (
    CLIConfig,
    TokenResponse,
    fetch_cli_config,
    get_valid_access_token,
)
from arcade_core.config_model import AuthConfig, Config, ContextConfig, UserConfig
from arcade_core.constants import ARCADE_CONFIG_PATH, CREDENTIALS_FILE_PATH
from arcade_core.subprocess_utils import build_windows_hidden_startupinfo
from authlib.integrations.httpx_client import OAuth2Client
from jinja2 import Environment, FileSystemLoader
from pydantic import AliasChoices, BaseModel, Field

from arcade_cli.console import console

logger = logging.getLogger(__name__)

# Set up Jinja2 templates
_TEMPLATES_DIR = Path(__file__).parent / "templates"
_jinja_env = Environment(loader=FileSystemLoader(_TEMPLATES_DIR), autoescape=True)


def _render_template(template_name: str, **context: Any) -> bytes:
    """Render a Jinja2 template and return as bytes."""
    template = _jinja_env.get_template(template_name)
    return template.render(**context).encode("utf-8")


# OAuth constants
DEFAULT_SCOPES = "openid offline_access"
LOCAL_CALLBACK_HOST = "127.0.0.1"
LOCAL_CALLBACK_PORT = 9905
_DEFAULT_OAUTH_TIMEOUT_FALLBACK_SECONDS = 600


def _get_default_oauth_timeout_seconds() -> int:
    value = os.environ.get(
        "ARCADE_LOGIN_TIMEOUT_SECONDS", str(_DEFAULT_OAUTH_TIMEOUT_FALLBACK_SECONDS)
    )
    try:
        parsed = int(value)
    except ValueError:
        return _DEFAULT_OAUTH_TIMEOUT_FALLBACK_SECONDS
    else:
        return parsed if parsed > 0 else _DEFAULT_OAUTH_TIMEOUT_FALLBACK_SECONDS


DEFAULT_OAUTH_TIMEOUT_SECONDS = _get_default_oauth_timeout_seconds()


def create_oauth_client(cli_config: CLIConfig) -> OAuth2Client:
    """
    Create an authlib OAuth2Client configured for the CLI.

    Args:
        cli_config: OAuth configuration from Coordinator

    Returns:
        Configured OAuth2Client with PKCE support
    """
    return OAuth2Client(
        client_id=cli_config.client_id,
        token_endpoint=cli_config.token_endpoint,
        code_challenge_method="S256",
    )


def generate_authorization_url(
    client: OAuth2Client,
    cli_config: CLIConfig,
    redirect_uri: str,
    state: str,
) -> tuple[str, str]:
    """
    Generate OAuth authorization URL with PKCE.

    Args:
        client: OAuth2Client instance
        cli_config: OAuth configuration from Coordinator
        redirect_uri: Callback URL for the authorization response
        state: Random state for CSRF protection

    Returns:
        Tuple of (authorization_url, code_verifier)
    """
    # Generate PKCE code verifier
    code_verifier = secrets.token_urlsafe(64)

    url, _ = client.create_authorization_url(
        cli_config.authorization_endpoint,
        redirect_uri=redirect_uri,
        scope=DEFAULT_SCOPES,
        state=state,
        code_verifier=code_verifier,
    )
    return url, code_verifier


def exchange_code_for_tokens(
    client: OAuth2Client,
    code: str,
    redirect_uri: str,
    code_verifier: str,
) -> TokenResponse:
    """
    Exchange authorization code for tokens using authlib.

    Args:
        client: OAuth2Client instance
        code: Authorization code from callback
        redirect_uri: Same redirect URI used in authorization request
        code_verifier: PKCE code verifier from authorization request

    Returns:
        TokenResponse with access and refresh tokens
    """
    token = client.fetch_token(
        client.session.metadata["token_endpoint"],
        grant_type="authorization_code",
        code=code,
        redirect_uri=redirect_uri,
        code_verifier=code_verifier,
    )

    return TokenResponse(
        access_token=token["access_token"],
        refresh_token=token["refresh_token"],
        expires_in=token["expires_in"],
        token_type=token["token_type"],
    )


class OrgInfo(BaseModel):
    """Organization info from Coordinator."""

    org_id: str = Field(validation_alias=AliasChoices("org_id", "organization_id"))
    name: str
    is_default: bool = False


class ProjectInfo(BaseModel):
    """Project info from Coordinator."""

    project_id: str
    name: str
    is_default: bool = False


def select_default_org(orgs: list[OrgInfo]) -> OrgInfo | None:
    """
    Select the default organization.

    Args:
        orgs: List of organizations

    Returns:
        Default org, or first org, or None if empty
    """
    if not orgs:
        return None
    for org in orgs:
        if org.is_default:
            return org
    return orgs[0]


def select_default_project(projects: list[ProjectInfo]) -> ProjectInfo | None:
    """
    Select the default project.

    Args:
        projects: List of projects

    Returns:
        Default project, or first project, or None if empty
    """
    if not projects:
        return None
    for project in projects:
        if project.is_default:
            return project
    return projects[0]


class WhoAmIResponse(BaseModel):
    """Response from Coordinator /whoami endpoint."""

    account_id: str
    email: str
    organizations: list[OrgInfo] = []
    projects: list[ProjectInfo] = []

    def get_selected_org(self) -> OrgInfo | None:
        """Get the org to use: default if available, otherwise first in list."""
        return select_default_org(self.organizations)

    def get_selected_project(self) -> ProjectInfo | None:
        """Get the project to use: default if available, otherwise first in list."""
        return select_default_project(self.projects)


def fetch_whoami(coordinator_url: str, access_token: str) -> WhoAmIResponse:
    """
    Fetch user info and all orgs/projects from the Coordinator.

    This is the preferred way to get user info after OAuth login, as it:
    - Only accepts short-lived access tokens (not API keys)
    - Returns user email and account ID
    - Returns all orgs and projects the user has access to

    Args:
        coordinator_url: Base URL of the Coordinator
        access_token: Valid OAuth access token

    Returns:
        WhoAmIResponse with account info and all orgs/projects
    """
    url = f"{coordinator_url}/api/v1/auth/whoami"
    response = httpx.get(
        url,
        headers={"Authorization": f"Bearer {access_token}"},
        timeout=30,
    )
    response.raise_for_status()
    data = response.json().get("data", {})

    return WhoAmIResponse.model_validate(data)


def fetch_organizations(coordinator_url: str) -> list[OrgInfo]:
    """
    Fetch organizations the user belongs to.

    Args:
        coordinator_url: Base URL of the Coordinator
        access_token: Valid access token

    Returns:
        List of organizations
    """
    url = f"{coordinator_url}/api/v1/orgs"
    access_token = get_valid_access_token(coordinator_url)
    response = httpx.get(
        url,
        headers={"Authorization": f"Bearer {access_token}"},
        timeout=30,
    )
    response.raise_for_status()
    data = response.json()

    return [OrgInfo.model_validate(item) for item in data.get("data", {}).get("items", [])]


def fetch_projects(coordinator_url: str, org_id: str) -> list[ProjectInfo]:
    """
    Fetch projects in an organization.

    Args:
        coordinator_url: Base URL of the Coordinator
        access_token: Valid access token
        org_id: Organization ID

    Returns:
        List of projects
    """
    url = f"{coordinator_url}/api/v1/orgs/{org_id}/projects"
    access_token = get_valid_access_token(coordinator_url)
    response = httpx.get(
        url,
        headers={"Authorization": f"Bearer {access_token}"},
        timeout=30,
    )
    response.raise_for_status()
    data = response.json()

    return [ProjectInfo.model_validate(item) for item in data.get("data", {}).get("items", [])]


class _LoopbackHTTPServer(HTTPServer):
    """HTTPServer that skips the potentially slow ``getfqdn()`` reverse-DNS
    lookup in ``server_bind()``.

    ``HTTPServer.server_bind()`` calls ``socket.getfqdn(host)`` which invokes
    ``gethostbyaddr("127.0.0.1")`` via the system resolver.  On macOS CI
    runners (Apple Silicon / macOS 14) the mDNSResponder can take 5-30 s to
    resolve the loopback PTR record when the DNS cache is cold, causing the
    daemon thread to block inside the constructor and ``ready_event`` to never
    fire within the timeout window.

    We only listen on ``127.0.0.1`` for the OAuth callback, so we hard-set
    ``server_name`` to ``"127.0.0.1"`` and skip the DNS round-trip entirely.
    """

    def server_bind(self) -> None:
        socketserver.TCPServer.server_bind(self)
        host, port = self.server_address[:2]
        self.server_name = host if isinstance(host, str) else host.decode()
        self.server_port = port


class OAuthCallbackHandler(BaseHTTPRequestHandler):
    """HTTP request handler for OAuth callback."""

    def __init__(
        self,
        *args: Any,
        state: str,
        result_holder: dict,
        result_event: threading.Event,
        **kwargs: Any,
    ):
        self.state = state
        self.result_holder = result_holder
        self.result_event = result_event
        # Store error details for template rendering
        self._error: str | None = None
        self._error_description: str | None = None
        self._returned_state: str | None = None
        super().__init__(*args, **kwargs)

    def log_message(self, format: str, *args: Any) -> None:  # noqa: A002
        # Suppress logging to stdout
        pass

    def do_GET(self) -> None:
        """Handle GET request (OAuth callback)."""
        query_string = self.path.split("?", 1)[-1] if "?" in self.path else ""
        params = parse_qs(query_string)

        self._returned_state = params.get("state", [None])[0]
        code = params.get("code", [None])[0]
        self._error = params.get("error", [None])[0]
        self._error_description = params.get("error_description", [None])[0]

        if self._returned_state != self.state:
            self.result_holder["error"] = "Invalid state parameter. Possible CSRF attack."
            self._send_error_response(
                message="Invalid state parameter. This may be a security issue."
            )
            return

        if self._error:
            self.result_holder["error"] = self._error_description or self._error
            self._send_error_response()
            return

        if not code:
            self.result_holder["error"] = "No authorization code received."
            self._send_error_response(message="No authorization code was received from the server.")
            return

        self.result_holder["code"] = code
        self._send_success_response()

    def _send_success_response(self) -> None:
        self.send_response(200)
        self.send_header("Content-Type", "text/html; charset=utf-8")
        self.end_headers()
        self.wfile.write(_render_template("cli_login_success.jinja"))
        self.result_event.set()
        threading.Thread(target=self.server.shutdown).start()

    def _send_error_response(self, message: str | None = None) -> None:
        self.send_response(400)
        self.send_header("Content-Type", "text/html; charset=utf-8")
        self.end_headers()
        self.wfile.write(
            _render_template(
                "cli_login_failed.jinja",
                message=message,
                error=self._error,
                error_description=self._error_description,
                state=self._returned_state,
            )
        )
        self.result_event.set()
        threading.Thread(target=self.server.shutdown).start()


class OAuthCallbackServer:
    """Local HTTP server for OAuth callback."""

    def __init__(self, state: str, port: int = LOCAL_CALLBACK_PORT):
        self.state = state
        self.port = port
        self.httpd: HTTPServer | None = None
        self.result: dict[str, Any] = {}

        # Threading events used on *all* platforms (not Windows-specific).
        # result_event: signalled by the HTTP handler once the OAuth callback
        #   has been processed (success or error).  Callers block on this via
        #   wait_for_result() instead of polling.
        # ready_event: signalled by run_server() once the HTTPServer is bound
        #   and listening.  Callers block on this via wait_until_ready() so
        #   they don't race the browser redirect against server startup.
        self.result_event = threading.Event()
        self.ready_event = threading.Event()

    def run_server(self) -> None:
        """Start the callback server.

        Binds to 127.0.0.1 (loopback only) rather than 0.0.0.0 to avoid
        Windows Firewall prompts and keep the redirect URI host aligned
        with the actual bind host.
        """
        server_address = (LOCAL_CALLBACK_HOST, self.port)
        handler = lambda *args, **kwargs: OAuthCallbackHandler(
            *args,
            state=self.state,
            result_holder=self.result,
            result_event=self.result_event,
            **kwargs,
        )
        self.httpd = _LoopbackHTTPServer(server_address, handler)
        self.port = self.httpd.server_port
        self.ready_event.set()
        self.httpd.serve_forever()

    def shutdown_server(self) -> None:
        """Shut down the callback server."""
        if self.httpd:
            self.httpd.shutdown()

    def wait_until_ready(self, timeout: float | None = 2.0) -> bool:
        """Wait for the server to start listening."""
        return self.ready_event.wait(timeout=timeout)

    def wait_for_result(self, timeout: float | None) -> bool:
        """Wait for the OAuth callback to complete."""
        if self.result_event.wait(timeout=timeout):
            return True

        timeout_desc = f"{int(timeout)}s" if timeout else "the configured timeout"
        self.result["error"] = (
            f"Timed out waiting for the login callback after {timeout_desc}. "
            "If your browser completed login, check firewall/antivirus settings "
            "and re-run 'arcade login' (you can increase --timeout if needed)."
        )
        self.shutdown_server()
        return False

    def get_redirect_uri(self) -> str:
        """Get the redirect URI for this server."""
        return f"http://{LOCAL_CALLBACK_HOST}:{self.port}/callback"


def save_credentials_from_whoami(
    tokens: TokenResponse,
    whoami: WhoAmIResponse,
    coordinator_url: str,
) -> None:
    """
    Save OAuth credentials to the config file using WhoAmI response.

    Picks the org/project marked as default, or falls back to the first one
    in the list if none are marked as default.

    Args:
        tokens: OAuth tokens
        whoami: Response from /whoami endpoint with user and orgs/projects
    """
    # Ensure config directory exists
    os.makedirs(ARCADE_CONFIG_PATH, exist_ok=True)

    expires_at = datetime.now() + timedelta(seconds=tokens.expires_in)

    context = None
    selected_org = whoami.get_selected_org()
    selected_project = whoami.get_selected_project()

    if selected_org and selected_project:
        context = ContextConfig(
            org_id=selected_org.org_id,
            org_name=selected_org.name,
            project_id=selected_project.project_id,
            project_name=selected_project.name,
        )

    config = Config(
        coordinator_url=coordinator_url,
        auth=AuthConfig(
            access_token=tokens.access_token,
            refresh_token=tokens.refresh_token,
            expires_at=expires_at,
        ),
        user=UserConfig(email=whoami.email),
        context=context,
    )

    config.save_to_file()


def get_active_context() -> tuple[str, str]:
    """
    Get the active org and project IDs.

    Returns:
        Tuple of (org_id, project_id)

    Raises:
        ValueError: If not logged in or no context set
    """
    try:
        config = Config.load_from_file()
    except FileNotFoundError:
        raise ValueError("Not logged in. Please run 'arcade login' first.")

    if not config.context:
        raise ValueError("No active organization/project. Please run 'arcade login' first.")

    return config.context.org_id, config.context.project_id


# =============================================================================
# High-level OAuth login flow
# =============================================================================


def _open_browser(url: str) -> bool:
    """Open a URL in the default browser without flashing a CMD window on Windows.

    On Windows, both ``webbrowser.open`` and ``os.startfile`` call
    ``ShellExecuteW`` under the hood which can briefly flash a console window
    depending on how the default-browser handler is registered.

    This helper uses a tiered approach on Windows:

    1. **ctypes ShellExecuteW** — calls the Win32 API directly so we can
       pass ``SW_SHOWNORMAL`` explicitly.  No intermediate ``cmd.exe``
       involved, so no console window should appear.
    2. **rundll32 url.dll** — a well-known Windows technique to open URLs
       via a pure-GUI helper DLL.  ``rundll32.exe`` is a GUI subsystem
       binary so it never allocates a console.  Used as a fallback when
       ctypes is unavailable or ShellExecuteW returns an error code.
    3. **webbrowser.open** — stdlib last-resort fallback.

    ``os.startfile`` is intentionally omitted: it is another thin wrapper
    around ``ShellExecuteExW`` and therefore redundant with attempt 1.

    On non-Windows platforms this simply delegates to ``webbrowser.open``.
    """
    if sys.platform != "win32":
        try:
            return webbrowser.open(url)
        except Exception:
            return False

    # --- Windows path ---

    # Attempt 1: ctypes ShellExecuteW — most direct, avoids any console.
    try:
        import ctypes

        SW_SHOWNORMAL = 1
        result = ctypes.windll.shell32.ShellExecuteW(
            None,  # hwnd
            "open",  # operation
            url,  # file/URL
            None,  # parameters
            None,  # directory
            SW_SHOWNORMAL,
        )
        # ShellExecuteW returns > 32 on success.
        if result > 32:
            return True
    except Exception as exc:
        logger.debug("_open_browser: ShellExecuteW failed: %s", exc)

    # Attempt 2: rundll32 url.dll — a GUI-subsystem binary, no console.
    try:
        startupinfo = build_windows_hidden_startupinfo()
        popen_kwargs: dict[str, Any] = {
            "stdout": subprocess.DEVNULL,
            "stderr": subprocess.DEVNULL,
        }
        if startupinfo is not None:
            popen_kwargs["startupinfo"] = startupinfo

        subprocess.Popen(["rundll32", "url.dll,FileProtocolHandler", url], **popen_kwargs)  # noqa: S607
    except Exception as exc:
        logger.debug("_open_browser: rundll32 fallback failed: %s", exc)
    else:
        return True

    # Attempt 3: stdlib fallback.
    try:
        return webbrowser.open(url)
    except Exception:
        return False


class OAuthLoginError(Exception):
    """Error during OAuth login flow."""

    pass


@dataclass
class OAuthLoginResult:
    """Result of a successful OAuth login flow."""

    tokens: TokenResponse
    whoami: WhoAmIResponse

    @property
    def email(self) -> str:
        return self.whoami.email

    @property
    def selected_org(self) -> OrgInfo | None:
        return self.whoami.get_selected_org()

    @property
    def selected_project(self) -> ProjectInfo | None:
        return self.whoami.get_selected_project()


def build_coordinator_url(host: str, port: int | None) -> str:
    """
    Build the Coordinator URL from host and optional port.

    Args:
        host: The Arcade Coordinator host
        port: Optional port (used for local development)

    Returns:
        Full coordinator URL (e.g., https://api.arcade.dev)
    """
    if port:
        scheme = "http" if host == "localhost" else "https"
        return f"{scheme}://{host}:{port}"
    else:
        scheme = "http" if host == "localhost" else "https"
        default_port = ":8000" if host == "localhost" else ""
        return f"{scheme}://{host}{default_port}"


@contextmanager
def oauth_callback_server(
    state: str, port: int = LOCAL_CALLBACK_PORT
) -> Generator[OAuthCallbackServer, None, None]:
    """
    Context manager for the OAuth callback server.

    Ensures the server is properly shut down even if an error occurs.
    The caller is responsible for waiting on the callback result.

    Usage:
        with oauth_callback_server(state) as server:
            # server is running and waiting for callback
            ...
        # After the with block, the server has been shut down
    """
    server = OAuthCallbackServer(state, port=port)
    # daemon=True ensures the thread is killed automatically when the main
    # process exits (e.g. user presses Ctrl-C during login).  Without it the
    # blocking serve_forever() call would keep the process alive until the
    # HTTP timeout expires, even after the CLI has printed an error.
    server_thread = threading.Thread(target=server.run_server, daemon=True)
    server_thread.start()
    # Give slower CI runners enough time to schedule the server thread and bind.
    if not server.wait_until_ready(timeout=5.0):
        server.shutdown_server()
        server_thread.join(timeout=2)
        raise RuntimeError("Failed to start local callback server.")
    try:
        yield server
    finally:
        server.shutdown_server()
        server_thread.join(timeout=2)


def perform_oauth_login(
    coordinator_url: str,
    on_status: Callable[[str], None] | None = None,
    callback_timeout_seconds: int | None = None,
) -> OAuthLoginResult:
    """
    Perform the complete OAuth login flow.

    This function:
    1. Fetches OAuth config from the Coordinator
    2. Starts a local callback server
    3. Opens browser for user authentication
    4. Exchanges authorization code for tokens
    5. Fetches user info and validates org/project

    Args:
        coordinator_url: Base URL of the Coordinator
        on_status: Optional callback for status messages (e.g., console.print)
        callback_timeout_seconds: Optional timeout for the local callback server

    Returns:
        OAuthLoginResult with tokens and user info

    Raises:
        OAuthLoginError: If any step of the login flow fails
    """

    def status(msg: str) -> None:
        if on_status:
            on_status(msg)

    # Step 1: Fetch OAuth config
    try:
        cli_config = fetch_cli_config(coordinator_url)
    except Exception as e:
        raise OAuthLoginError(f"Could not connect to Arcade at {coordinator_url}") from e

    # Step 2: Create OAuth client and prepare PKCE
    oauth_client = create_oauth_client(cli_config)
    state = str(uuid.uuid4())

    timeout_seconds = (
        callback_timeout_seconds
        if callback_timeout_seconds is not None
        else DEFAULT_OAUTH_TIMEOUT_SECONDS
    )
    if timeout_seconds <= 0:
        timeout_seconds = DEFAULT_OAUTH_TIMEOUT_SECONDS

    # Step 3: Start local callback server and run browser auth
    try:
        with oauth_callback_server(state) as server:
            redirect_uri = server.get_redirect_uri()

            # Step 4: Generate authorization URL and open browser
            auth_url, code_verifier = generate_authorization_url(
                oauth_client, cli_config, redirect_uri, state
            )

            status("Opening a browser to log you in...")
            browser_opened = _open_browser(auth_url)

            if not browser_opened:
                status(
                    "Could not open a browser automatically.\n"
                    f"Open this link to log in:\n{auth_url}"
                )

            status(f"Waiting for login to complete (timeout: {timeout_seconds}s)...")
            server.wait_for_result(timeout_seconds)
    except OAuthLoginError:
        raise
    except Exception as e:
        raise OAuthLoginError(str(e)) from e

    # Check for errors from callback
    if "error" in server.result:
        raise OAuthLoginError(f"Login failed: {server.result['error']}")

    if "code" not in server.result:
        raise OAuthLoginError("No authorization code received")

    # Step 6: Exchange code for tokens
    code = server.result["code"]
    tokens = exchange_code_for_tokens(oauth_client, code, redirect_uri, code_verifier)

    # Step 7: Fetch user info
    whoami = fetch_whoami(coordinator_url, tokens.access_token)

    # Validate org/project exist
    if not whoami.get_selected_org():
        raise OAuthLoginError(
            "No organizations found for your account. "
            "Please contact support@arcade.dev for assistance."
        )

    if not whoami.get_selected_project():
        org_name = whoami.get_selected_org().name  # type: ignore[union-attr]
        raise OAuthLoginError(
            f"No projects found in organization '{org_name}'. "
            "Please contact support@arcade.dev for assistance."
        )

    return OAuthLoginResult(tokens=tokens, whoami=whoami)


def _credentials_file_contains_legacy() -> bool:
    """
    Detect legacy (API key) credentials in the credentials file.
    """
    try:
        with open(CREDENTIALS_FILE_PATH, encoding="utf-8") as f:
            data = yaml.safe_load(f) or {}
            cloud = data.get("cloud", {})
            return isinstance(cloud, dict) and "api" in cloud
    except Exception:
        return False


def check_existing_login(suppress_message: bool = False) -> bool:
    """
    Check if the user is already logged in.

    Args:
        suppress_message: If True, suppress the logged in message.

    Returns:
        True if the user is already logged in, False otherwise.
    """
    if not os.path.exists(CREDENTIALS_FILE_PATH):
        return False

    try:
        with open(CREDENTIALS_FILE_PATH, encoding="utf-8") as f:
            config_data: dict[str, Any] = yaml.safe_load(f)

        cloud_config = config_data.get("cloud", {}) if isinstance(config_data, dict) else {}

        auth = cloud_config.get("auth", {})
        if auth.get("access_token"):
            email = cloud_config.get("user", {}).get("email", "unknown")
            context = cloud_config.get("context", {})
            org_name = context.get("org_name", "unknown")
            project_name = context.get("project_name", "unknown")

            if not suppress_message:
                console.print(f"You're already logged in as {email}.", style="bold green")
                console.print(f"Active: {org_name} / {project_name}", style="dim")
            return True

    except yaml.YAMLError:
        console.print(
            f"Error: Invalid configuration file at {CREDENTIALS_FILE_PATH}", style="bold red"
        )
    except Exception as e:
        console.print(f"Error: Unable to read configuration file: {e!s}", style="bold red")

    return False