Integration and API Spec

Integration and API Spec

Document Retention and Archiving

Used by Agent 1 (Document Classification Agent) to read incoming documents from monitored upload folders, write structured metadata fields onto files, and move files to the correct archive folder path. Also polled by Agent 2 (Retention Schedule Monitor) to confirm file location during destruction-alert construction.

// Input
Webhook change notification: { siteId, listId, itemId, changeType }
// Output (metadata write)
PATCH /sites/{SHAREPOINT_SITE_ID}/lists/{SHAREPOINT_LIBRARY_ID}/items/{itemId}/fields
{ DocumentType, RetentionEndDate, MatterReference, ResponsibleParty, DestructionStatus }

The retention register is maintained as an Excel workbook hosted in SharePoint, accessed via the Microsoft Graph API. Agent 1 appends a new row on each document ingestion. Agent 2 reads the full register daily to identify documents with RetentionEndDate on or before today, and writes the destruction outcome row after legal manager approval.

// Input (Agent 2 daily poll)
GET /sites/{SHAREPOINT_SITE_ID}/drives/{driveId}/items/{RETENTION_REGISTER_WORKBOOK_ID}/workbook/tables/{RETENTION_REGISTER_TABLE_NAME}/rows
// Filter client-side: row.RetentionEndDate <= today AND row.DestructionStatus == 'Active'
// Output (Agent 1 append)
POST /workbook/tables/{RETENTION_REGISTER_TABLE_NAME}/rows/add
{ values: [[ DocumentName, DocumentType, FileLocation, MatterReference, RetentionEndDate, ResponsibleParty, 'Active', '', '' ]] }

Acts as a secondary trigger source for Agent 1. When a DocuSign envelope reaches Completed status, the automation platform receives a Connect webhook event, downloads the signed document, and passes it to the Classification Agent alongside extracted envelope metadata.

// Input (Connect webhook payload, abbreviated)
{ envelopeId, status: 'completed', sender: { email, name }, envelopeSummary: { ... } }
// After HMAC validation:
GET /accounts/{DOCUSIGN_ACCOUNT_ID}/envelopes/{envelopeId}/documents/combined
// -> binary PDF passed to Classification Agent
// Metadata extracted from envelope:
{ envelopeId, senderEmail, senderName, completedDateTime, subjectLine }

Used exclusively by Agent 2 (Retention Schedule Monitor) to deliver destruction-alert messages to the responsible legal manager. Each alert includes document details, retention period served, and a structured approval prompt. Slack is not used for any ingestion or classification steps.

// Output (destruction alert message)
POST https://slack.com/api/chat.postMessage
{
  channel: SLACK_LEGAL_MANAGER_CHANNEL_ID,
  text: 'Destruction review required: {{document_name}}',
  blocks: [
    { type: 'section', text: { type: 'mrkdwn', text: '*Document:* {{document_name}}\n*Type:* {{document_type}}\n*Matter:* {{matter_reference}}\n*Retention end:* {{retention_end_date}}' } },
    { type: 'actions', elements: [ { type: 'button', text: 'Approve Destruction', action_id: 'approve_destruction', value: '{{register_row_id}}' }, { type: 'button', text: 'Defer', action_id: 'defer_destruction', value: '{{register_row_id}}' } ] }
  ]
}

Used by Agent 1 as a secondary archive destination. After classification, documents sourced from Dropbox or designated for Dropbox storage are moved to the correct folder path. SharePoint remains the primary store; Dropbox routing is applied only where the classification ruleset specifies it.

// Inbound trigger (if Dropbox is a monitored source)
POST {automation_inbound_url}/dropbox-webhook  <- Dropbox notification
GET https://api.dropboxapi.com/2/files/list_folder/continue  { cursor: DROPBOX_CURSOR }
// -> returns list of changed entries, filter for files only
// File move to archive
POST https://api.dropboxapi.com/2/files/move_v2
{ from_path: '/Incoming/{{filename}}', to_path: '{{DROPBOX_ARCHIVE_ROOT_PATH}}/{{document_type}}/{{matter_reference}}/{{filename}}' }

// CREDENTIAL STORE CONTENTS
// Microsoft Entra ID (SharePoint + Microsoft 365)
ENTRA_TENANT_ID              = '<tenant-guid>'
ENTRA_CLIENT_ID              = '<app-registration-client-id>'
ENTRA_CLIENT_SECRET          = '<app-registration-client-secret>'

// SharePoint
SHAREPOINT_SITE_ID           = '<site-guid>'
SHAREPOINT_LIBRARY_ID        = '<library-guid>'
SHAREPOINT_WEBHOOK_SECRET    = '<webhook-validation-token>'

// Microsoft 365 / Excel
RETENTION_REGISTER_WORKBOOK_ID = '<workbook-item-guid>'

// DocuSign
DOCUSIGN_INTEGRATION_KEY     = '<integration-key-guid>'
DOCUSIGN_PRIVATE_KEY         = '<RSA-private-key-PEM>'
DOCUSIGN_IMPERSONATION_USER_GUID = '<user-guid>'
DOCUSIGN_ACCOUNT_ID          = '<account-guid>'
DOCUSIGN_BASE_URI            = 'https://na4.docusign.net'
DOCUSIGN_CONNECT_HMAC_KEY    = '<connect-hmac-secret>'

// Slack
SLACK_BOT_TOKEN              = 'xoxb-<token>'
SLACK_SIGNING_SECRET         = '<signing-secret>'

// Dropbox Business
DROPBOX_APP_KEY              = '<app-key>'
DROPBOX_APP_SECRET           = '<app-secret>'
DROPBOX_REFRESH_TOKEN        = '<refresh-token>'
DROPBOX_CURSOR               = '<latest-list-folder-cursor>'

// Orchestration config (non-secret, stored separately in platform config)
SLACK_LEGAL_MANAGER_CHANNEL_ID = 'C0XXXXXXXXX'
RETENTION_REGISTER_TABLE_NAME  = 'RetentionRegister'
DROPBOX_ARCHIVE_ROOT_PATH      = '/LegalArchive'
FALLBACK_POLL_INTERVAL_MINUTES = 15
DAILY_MONITOR_CRON             = '0 7 * * *'  // 07:00 UTC