Add OpenStock agent CLI skill

skills/openstock-agent-cli/references/commands/api/call/guide.md

@@ -0,0 +1,19 @@
+# `openstock api call`
+
+Purpose: directly call a KIS GET endpoint with access-token headers.
+
+Usage:
+
+```bash
+openstock api call /uapi/... --param tr_id=... --param KEY=VALUE
+```
+
+Inputs: `endpoint`, repeated `--param KEY=VALUE`.
+
+Reads: KIS credentials and access token from config/env.
+
+External IO: KIS endpoint GET.
+
+Output fields: `broker`, `endpoint`, `params`, `request_semantics`, `response`, `response_semantics`.
+
+Agent rule: prefer typed commands; use this only for endpoints not yet implemented as stable commands.

skills/openstock-agent-cli/references/commands/api/guide.md

@@ -0,0 +1,91 @@
+# `openstock api`
+
+## Purpose
+
+Manage broker API metadata, KIS login, and raw endpoint calls.
+
+## Subcommands
+
+| Command | Purpose |
+| --- | --- |
+| `openstock api list` | Show registered broker APIs and their capabilities. |
+| `openstock api login [--appkey KEY] [--appsecret SECRET] [--force]` | Issue or reuse a KIS access token. |
+| `openstock api call <endpoint> --param KEY=VALUE` | Direct KIS GET endpoint call with token headers. |
+
+## `api list`
+
+### IO
+
+| Direction | Data |
+| --- | --- |
+| External IO | none |
+| File IO | none |
+| Side effect | none |
+
+### Output Fields
+
+| Field | Meaning |
+| --- | --- |
+| `count` | Number of registered broker APIs. |
+| `apis` | Broker metadata, credential requirements, capability catalog, IO contract, and side effects. |
+
+## `api login`
+
+### Usage
+
+```bash
+openstock api login
+openstock api login --force
+```
+
+### IO
+
+| Direction | Data |
+| --- | --- |
+| Env read | `KIS_APPKEY`, `KIS_APPSECRET`, `KIS_ACCESS_TOKEN`, `KIS_ACCESS_TOKEN_EXPIRED_AT` |
+| Config write | `~/.config/openstock/.env` auth state. |
+| External IO | KIS token endpoint only when token is missing, expired, or `--force` is used. |
+| Side effect | Writes auth token state. |
+
+### Output Fields
+
+| Field | Meaning |
+| --- | --- |
+| `broker` | Broker API used for login. |
+| `status` | Login result. |
+| `force` | Whether token refresh was forced. |
+| `credential_source` | Whether credentials came from CLI arguments or config. |
+| `token_storage` | Token storage path and env keys. |
+| `side_effect` | Auth-state write indicator. |
+
+## `api call`
+
+### Usage
+
+```bash
+openstock api call /uapi/... --param tr_id=... --param KEY=VALUE
+```
+
+### IO
+
+| Direction | Data |
+| --- | --- |
+| Env read | `KIS_ACCESS_TOKEN`, `KIS_APPKEY`, `KIS_APPSECRET` |
+| External IO | KIS endpoint GET. |
+| File IO | `~/.config/openstock/.env` read. |
+| Side effect | Endpoint dependent. |
+
+### Output Fields
+
+| Field | Meaning |
+| --- | --- |
+| `broker` | Broker used for the direct call. |
+| `endpoint` | Requested endpoint. |
+| `params` | Request parameters. |
+| `request_semantics` | How params map to headers/query. |
+| `response` | Parsed API response. |
+| `response_semantics` | Explanation of response meaning. |
+
+## Agent Notes
+
+Prefer typed commands. Use `api call` only for inspection or endpoints not yet bound as typed commands.

skills/openstock-agent-cli/references/commands/api/list/guide.md

@@ -0,0 +1,15 @@
+# `openstock api list`
+
+Purpose: return registered broker APIs, credential requirements, capabilities, IO contracts, and side-effect metadata.
+
+Usage:
+
+```bash
+openstock api list
+```
+
+Inputs: none.
+
+Output fields: `count`, `apis`.
+
+Agent rule: use this to discover broker capability metadata; it performs no external IO.

skills/openstock-agent-cli/references/commands/api/login/guide.md

@@ -0,0 +1,21 @@
+# `openstock api login`
+
+Purpose: issue or reuse a KIS live API access token.
+
+Usage:
+
+```bash
+openstock api login
+openstock api login --force
+openstock api login --appkey KEY --appsecret SECRET
+```
+
+Inputs: optional `--appkey`, `--appsecret`, `--force`.
+
+Reads: `KIS_APPKEY`, `KIS_APPSECRET`, existing token values.
+
+Writes: `~/.config/openstock/.env` token state.
+
+Output fields: `broker`, `status`, `force`, `credential_source`, `token_storage`, `side_effect`.
+
+Agent rule: do not force refresh unless the user asks or an API call fails because the token is invalid.