Check new HubSpot contacts and companies for bad data

import re
from clickruntime import on_trigger, credentials, http, notify, state, report_fetched
API = "https://api.hubapi.com/crm/v3/objects"
@on_trigger
def run(event):
    h = {"Authorization": f"Bearer {credentials.secret('HUBSPOT_API_KEY')}"}
    since = state.get("since") or "2026-01-01T00:00:00Z"
    body = lambda props: {"filterGroups": [{"filters": [{"propertyName": "createdate", "operator": "GT", "value": since}]}],
                          "properties": props, "sorts": [{"propertyName": "createdate", "direction": "ASCENDING"}], "limit": 100}
    contacts = http.post(f"{API}/contacts/search", headers=h, json=body(["email", "createdate"])).json()["results"]
    companies = http.post(f"{API}/companies/search", headers=h, json=body(["name", "domain", "createdate"])).json()["results"]
    report_fetched(len(contacts) + len(companies))
    if not contacts and not companies:
        return {"checked": 0}
    bad = []
    for c in contacts:
        if not re.fullmatch(r"[^@\s]+@[^@\s]+\.[a-z]{2,}", (c["properties"].get("email") or "").lower()):
            bad.append(("contacts", c["id"], f"email {c['properties'].get('email')}"))
    for c in companies:
        try:
            ok = http.get(f"https://{c['properties'].get('domain')}", timeout=10).status_code < 400
        except Exception:
            ok = False
        if not ok:
            bad.append(("companies", c["id"], f"{c['properties'].get('name')} website"))
    for kind, rid, _ in bad:
        http.patch(f"{API}/{kind}/{rid}", headers=h, json={"properties": {"data_check": "failed"}})
    if bad:
        notify.slack("Data check failed:\n" + "\n".join(f"• {why}" for _, _, why in bad), channel="#crm")
    state.set("since", max(r["properties"]["createdate"] for r in contacts + companies))
    return {"checked": len(contacts) + len(companies), "flagged": len(bad)}