DingTalk Workspace CLI (dws) is DingTalk's open-source command-line client that puts the product suite (contacts, chat, calendar, todo, approvals, attendance, reports, AI Tables, docs, whiteboards, drive, meeting minutes, mail, sheets, wiki, and more) behind one binary, built for people and for AI agents alike. People get help text, a dry-run preview of every request, and table, JSON, or raw output. Agents get structured JSON responses, a machine-readable schema for each command, and Agent Skills that let Claude Code, Cursor, Codex, OpenCode, Qoder, and ZCode operate DingTalk through natural language.
Authentication is an OAuth device flow against an application the enterprise admin has authorized, so the CLI can only call APIs granted to that application, and every read and write passes through the DingTalk Open Platform's audit chain. Tokens are encrypted at rest and keyed to the device, bearer tokens go only to allow-listed domains, TLS is required, and client secrets stay in memory. A custom-app mode serves CI/CD and ISV integration.
An input-correction pipeline normalizes flag names (camelCase or snake_case to kebab-case), splits sticky arguments, fuzzy-matches typos, and normalizes booleans, numbers, dates, and enums, so an agent's imperfect parameters still resolve. Built-in jq filtering trims responses to the fields needed. Event consumption subscribes the logged-in user to a 28-event catalog (messages, reads and recalls, group lifecycle, OA approvals, todo changes, interactive-card callbacks) over a managed WebSocket and emits each event as one NDJSON line for event-driven agents. A raw API command calls any App Token-capable OpenAPI without an SDK, and the bot bridge connects a DingTalk robot to a local coding agent (Claude Code, Codex, OpenCode, Qoder, Gemini, Pi, or any command) so that an @-mention in a chat gets an answer from the local agent with per-conversation memory.
Features
- Twenty product services: contact, chat, calendar, todo, approval, attendance, ding, report, AI Tables, doc, whiteboard, drive, minutes, mail, sheet, wiki, dev docs, AI search, live, and raw API
- Human and agent output: table, JSON, or raw formats, a dry-run preview of any request, and built-in jq expressions for field selection
- Command schema: a compact machine-readable contract per command (parameters, constraints, risk, confirmation) for agent command selection, exportable in full for tooling and audits
- Agent Skills: per-product skills (multi) or one mono skill for Claude Code, Cursor, Codex, OpenCode, Qoder, and ZCode, written as Markdown with no arbitrary code execution
- Smart input correction: flag-name convention conversion, sticky-argument splitting, fuzzy flag matching, and value normalization for booleans, numbers, dates, and enums
- Personal event subscription: 28 public events streamed as NDJSON over a managed WebSocket, with shared connections, multi-event processes, and flattened business fields
- Raw API access: App Token-capable server-side OpenAPIs called directly, with managed token acquisition and refresh
- DingTalk bot bridge: connects a robot to a local coding agent (Claude Code, Codex, OpenCode, Qoder, Gemini, Pi, or any command) with per-conversation multi-turn memory and in-chat session commands
- Whiteboards: query, create, and update standalone or embedded whiteboards from OpenNodes sources, with diff preview, local SVG rendering, and personal, team, and public templates
- Security model: OAuth device-flow auth, least-privilege scoping to the authorized app, encrypted device-bound tokens, domain allow-listing, enforced TLS, and full-chain audit on the Open Platform
- Platforms: macOS, Linux, Windows, and an OpenHarmony build
