docs: add Phase 10 — Agent Capabilities (real tool integrations)

.planning/REQUIREMENTS.md

@@ -100,6 +100,16 @@ Requirements for beta-ready release. Each maps to roadmap phases.
 - [x] **QA-06**: Empty states, error states, and loading states tested and rendered correctly
 - [x] **QA-07**: CI-ready test suite runnable in GitHub Actions / Gitea Actions pipeline
 
+### Agent Capabilities
+
+- [ ] **CAP-01**: Web search tool returns real results from a search provider (Brave Search, SerpAPI, or similar)
+- [ ] **CAP-02**: Knowledge base tool searches tenant-scoped documents that have been uploaded, chunked, and embedded in pgvector
+- [ ] **CAP-03**: Operators can upload documents (PDF, DOCX, TXT) to a tenant's knowledge base via the portal
+- [ ] **CAP-04**: HTTP request tool can call operator-configured URLs with response parsing and timeout handling
+- [ ] **CAP-05**: Calendar tool can check Google Calendar availability (read-only for v1)
+- [ ] **CAP-06**: Tool results are incorporated naturally into agent responses — no raw JSON or technical output shown to users
+- [ ] **CAP-07**: All tool invocations are logged in the audit trail with input parameters and output summary
+
 ## v2 Requirements
 
 Deferred to future release. Tracked but not in current roadmap.
@@ -209,6 +219,13 @@ Which phases cover which requirements. Updated during roadmap creation.
 | QA-05 | Phase 9 | Complete |
 | QA-06 | Phase 9 | Complete |
 | QA-07 | Phase 9 | Complete |
+| CAP-01 | Phase 10 | Pending |
+| CAP-02 | Phase 10 | Pending |
+| CAP-03 | Phase 10 | Pending |
+| CAP-04 | Phase 10 | Pending |
+| CAP-05 | Phase 10 | Pending |
+| CAP-06 | Phase 10 | Pending |
+| CAP-07 | Phase 10 | Pending |
 
 **Coverage:**
 - v1 requirements: 25 total (all complete)
@@ -217,7 +234,8 @@ Which phases cover which requirements. Updated during roadmap creation.
 - Web Chat requirements: 5 total (Phase 6, all complete)
 - Multilanguage requirements: 6 total (Phase 7, all complete)
 - Mobile + PWA requirements: 6 total (Phase 8, all complete)
-- Testing & QA requirements: 7 total (Phase 9)
+- Testing & QA requirements: 7 total (Phase 9, all complete)
+- Agent Capabilities requirements: 7 total (Phase 10)
 
 ---
 *Requirements defined: 2026-03-23*

.planning/ROADMAP.md

@@ -144,6 +144,7 @@ Phases execute in numeric order: 1 -> 2 -> 3 -> 4 -> 5 -> 6 -> 7 -> 8 -> 9
 | 7. Multilanguage | 4/4 | Complete    | 2026-03-25 |
 | 8. Mobile + PWA | 4/4 | Complete    | 2026-03-26 |
 | 9. Testing & QA | 3/3 | Complete    | 2026-03-26 |
+| 10. Agent Capabilities | 0/0 | Not started | - |
 
 ---
 
@@ -208,6 +209,23 @@ Plans:
 - [ ] 09-02-PLAN.md — Visual regression snapshots at 3 viewports, axe-core accessibility scans, Lighthouse CI score gating
 - [ ] 09-03-PLAN.md — Gitea Actions CI pipeline (backend lint+pytest, portal build+E2E+Lighthouse) + human verification
 
+### Phase 10: Agent Capabilities
+**Goal**: Connect the 4 built-in agent tools to real external services so AI Employees can actually search the web, query a knowledge base of uploaded documents, make HTTP API calls, and check calendar availability
+**Depends on**: Phase 9
+**Requirements**: CAP-01, CAP-02, CAP-03, CAP-04, CAP-05, CAP-06, CAP-07
+**Success Criteria** (what must be TRUE):
+  1. Web search tool returns real search results from a search provider (Brave, SerpAPI, or similar)
+  2. Knowledge base tool can search documents that operators have uploaded (PDF, DOCX, TXT) — documents are chunked, embedded, and stored in pgvector per tenant
+  3. Operators can upload documents to a tenant's knowledge base via the portal
+  4. HTTP request tool can call arbitrary URLs configured by the operator, with response parsing
+  5. Calendar tool can check availability on Google Calendar (read-only for v1)
+  6. Tool results are incorporated naturally into agent responses (no raw JSON dumps)
+  7. All tool invocations are logged in the audit trail with input/output
+**Plans**: 0 plans
+
+Plans:
+- [ ] TBD (run /gsd:plan-phase 10 to break down)
+
 ---
 *Roadmap created: 2026-03-23*
 *Coverage: 25/25 v1 requirements + 6 RBAC requirements + 5 Employee Design requirements + 5 Web Chat requirements + 6 Multilanguage requirements + 6 Mobile+PWA requirements + 7 Testing & QA requirements mapped*