让 WorkBuddy 自己领积分：自动化「派猫猫旅行」绕过 JWT 误区、Cookie 鉴权与幂等状态机实战

GET  /activity/growth/buddy/travel/status   # 查当前状态
GET  /activity/growth/buddy/travel/config   # 查可去地点（可选）
POST /activity/growth/buddy/travel/depart   # 派出旅行
POST /activity/growth/buddy/travel/claim    # 领取积分

┌──────────────────────────────────────────────────────────┐
│  GET /status → 读 data.state                               │
│                                                            │
│  state == arrived        → POST /claim   （领积分，只一次） │
│  state == traveling      → 跳过           （绝不重复派）    │
│  daily_limit_reached     → 跳过           （今日已领满）    │
│  其他（idle）            → POST /depart  （随机派一地）     │
└──────────────────────────────────────────────────────────┘

# -*- coding: utf-8 -*-
"""派猫猫旅行自动化（cookie 鉴权版，纯标准库，可移植）。

用法：
  python travel_auto.py                # 正常执行一轮
  python travel_auto.py --dry-run      # 只查状态，不做任何写操作
  python travel_auto.py --location 2   # 指定派出地点 id（1咖啡馆 2商场 3健身房 4客栈）
"""
import os
import sys
import json
import time
import random
import argparse
import datetime
import urllib.request
import urllib.error

HERE = os.path.dirname(os.path.abspath(__file__))
COOKIE_FILE = os.path.join(HERE, 'wb_cookies.txt')
LOG_FILE = os.path.join(HERE, 'travel_auto.log')
STATE_FILE = os.path.join(HERE, 'travel_state.json')
BASE = 'https://www.workbuddy.cn/activity/growth/buddy/travel'

UA = ('Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 '
      '(KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36')
LOCATIONS = {1: '咖啡馆', 2: '商场店铺', 3: '健身房', 4: '古镇客栈'}
LOC_CODES = {1: 'coffee', 2: 'mall', 3: 'gym', 4: 'inn'}


def ts():
    return datetime.datetime.now().strftime('%Y-%m-%d %H:%M:%S')


def log(line):
    text = '[%s] %s' % (ts(), line)
    print(text)
    try:
        with open(LOG_FILE, 'a', encoding='utf-8') as fh:
            fh.write(text + '\n')
    except Exception:
        pass


def load_cookie():
    if not os.path.isfile(COOKIE_FILE):
        log('ERROR no_cookie 缺少 %s，请从浏览器 DevTools 复制 '
            'www.workbuddy.cn 的 cookie 请求头写入该文件' % COOKIE_FILE)
        return None
    with open(COOKIE_FILE, 'r', encoding='utf-8') as fh:
        raw = fh.read().strip()
    if not raw:
        log('ERROR no_cookie cookie 文件为空')
        return None
    return raw


def call(path, cookie, method='GET', payload=None, timeout=25):
    url = BASE + path
    data = None
    headers = {
        'accept': 'application/json, text/plain, */*',
        'accept-language': 'zh-CN,zh;q=0.9',
        'cookie': cookie,
        'referer': 'https://www.workbuddy.cn/profile/growth-center',
        'user-agent': UA,
        'x-client-platform': 'web',
        'origin': 'https://www.workbuddy.cn',
    }
    if payload is not None:
        data = json.dumps(payload).encode('utf-8')
        headers['content-type'] = 'application/json'
    req = urllib.request.Request(url, data=data, headers=headers, method=method)
    try:
        with urllib.request.urlopen(req, timeout=timeout) as resp:
            return resp.status, resp.read().decode('utf-8', 'replace')
    except urllib.error.HTTPError as e:
        return e.code, e.read().decode('utf-8', 'replace')
    except Exception as e:
        return -1, 'EXC: %r' % (e,)


def as_json(body):
    try:
        return json.loads(body)
    except Exception:
        return None


def get_status(cookie):
    code, body = call('/status', cookie)
    if code in (401, 403):
        log('ERROR auth_expired status HTTP %s —— cookie 已失效，'
            '请重新从浏览器复制 cookie 到 wb_cookies.txt' % code)
        return None
    if code != 200:
        log('ERROR status HTTP %s body=%s' % (code, body[:200]))
        return None
    obj = as_json(body)
    if not obj or obj.get('code') != 0:
        log('ERROR status 业务码异常 %s' % body[:200])
        return None
    return obj.get('data') or {}


def do_claim(cookie, record_id):
    attempts = []
    if record_id:
        attempts.append({'record_id': record_id})
        attempts.append({'recordId': record_id})
    attempts.append({})
    for payload in attempts:
        code, body = call('/claim', cookie, method='POST', payload=payload)
        obj = as_json(body)
        if code == 200 and obj and obj.get('code') == 0:
            return True, (obj.get('data') or {}), payload
        log('  claim 尝试 payload=%s -> HTTP %s %s'
            % (list(payload.keys()) or '空body', code, body[:160]))
        if code in (401, 403):
            break
    return False, {}, None


def do_depart(cookie, loc_id):
    attempts = [
        {'location_id': loc_id},
        {'locationId': loc_id},
        {'location': loc_id},
        {'location_code': LOC_CODES.get(loc_id)},
    ]
    for payload in attempts:
        code, body = call('/depart', cookie, method='POST', payload=payload)
        obj = as_json(body)
        if code == 200 and obj and obj.get('code') == 0:
            return True, (obj.get('data') or {}), payload
        log('  depart 尝试 payload=%s -> HTTP %s %s'
            % (payload, code, body[:160]))
        if code in (401, 403):
            break
    return False, {}, None


def main():
    ap = argparse.ArgumentParser()
    ap.add_argument('--dry-run', action='store_true', help='只查状态，不执行 depart/claim')
    ap.add_argument('--location', type=int, default=0,
                    help='派出地点 id（1咖啡馆 2商场 3健身房 4古镇客栈），0=随机')
    args = ap.parse_args()

    cookie = load_cookie()
    if not cookie:
        sys.exit(3)

    data = get_status(cookie)
    if data is None:
        sys.exit(4)

    state = (data.get('state') or '').lower()
    limit = bool(data.get('daily_limit_reached'))
    loc = (data.get('location') or {}).get('name') or '-'
    record_id = data.get('record_id')
    arrive_at = data.get('arrive_at')
    server_now = data.get('server_now') or int(time.time())
    reward = data.get('reward_credit')

    log('STATUS state=%s location=%s record_id=%s daily_limit=%s reward=%s'
        % (state, loc, record_id, limit, reward))

    if args.dry_run:
        log('DRY-RUN 仅查询，不执行任何写操作')
        return

    if state == 'arrived':
        ok, res, used = do_claim(cookie, record_id)
        if ok:
            got = res.get('reward_credit', reward)
            log('CLAIM 成功 +%s 积分 地点=%s payload=%s' % (got, loc, used))
        else:
            log('ERROR claim 全部尝试失败')

    elif state == 'traveling':
        remain = (arrive_at - server_now) if (arrive_at and server_now) else None
        log('SKIP 旅行中 地点=%s 剩余=%s（不重复派出）'
            % (loc, remain if remain is None else '%ds' % remain))

    elif limit:
        log('SKIP 今日已达上限（daily_limit_reached=true）')

    else:
        loc_id = args.location if args.location in LOCATIONS else random.choice(list(LOCATIONS))
        ok, res, used = do_depart(cookie, loc_id)
        if ok:
            log('DEPART 成功 地点=%s record_id=%s arrive_at=%s payload=%s'
                % (LOCATIONS[loc_id], res.get('record_id'), res.get('arrive_at'), used))
        else:
            log('ERROR depart 全部尝试失败 目标地点=%s' % LOCATIONS[loc_id])


if __name__ == '__main__':
    main()

paimao-travel/
├── travel_auto.py            # 主脚本（上文代码）
├── wb_cookies.txt            # 你的 cookie（每台电脑各自生成）
├── travel_auto.log           # 运行日志（自动生成）
└── travel_state.json         # 状态快照（自动生成）