rpk ai auth login

Run the OAuth 2.0 device authorization grant against Redpanda Cloud, persist the resulting credentials, and prompt to select an environment whose AI Gateway URL becomes the active profile’s dataplane URL.

Credentials are stored in the rpk ai credentials file with 0600 permissions, keyed by organization.

A successful login rewrites the config in the current schema, so running rpk ai auth login is also how you migrate a config left over from an older version of the plugin.

If the current environment’s organization still holds valid credentials, login is a no-op and prints "Already logged in". Run rpk ai auth logout first to re-authenticate, or rpk ai auth logout --all for a full clean slate.