chore: revert enabling on-demand on packages api

Signed-off-by: Mouad BANI <mouad-mb@outlook.com>

Author: mbani01

backend/src/api/public/v1/packages/getPackage.ts

@@ -1,4 +1,3 @@
-import { createHash } from 'crypto'
 import type { Request, Response } from 'express'
 
 import { NotFoundError } from '@crowd/common'
@@ -9,10 +8,8 @@ import {
   getStewardshipSummary,
   securityContactConfidenceBand,
 } from '@crowd/data-access-layer'
-import { WorkflowIdConflictPolicy, WorkflowIdReusePolicy } from '@crowd/temporal'
 
 import { getPackagesQx } from '@/db/packagesDb'
-import { getPackagesTemporalClient } from '@/db/packagesTemporal'
 import { ok } from '@/utils/api'
 import { validateOrThrow } from '@/utils/validation'
 
@@ -35,43 +32,16 @@ function repoMappingLabel(confidence: number | null): 'High' | 'Medium' | 'Low'
   return 'Low'
 }
 
-// Deterministic per-purl id: concurrent requests for the same purl attach to the
-// same workflow run (WorkflowIdConflictPolicy.USE_EXISTING below) instead of each
-// kicking off its own ingest.
-function ondemandWorkflowId(purl: string): string {
-  return `security-contacts-ondemand/${createHash('sha1').update(purl).digest('hex')}`
-}
-
 export async function getPackage(req: Request, res: Response): Promise<void> {
   const { purl } = validateOrThrow(purlQuerySchema, req.query)
 
   const qx = await getPackagesQx()
-  let pkg = await getPackageDetailByPurl(qx, purl)
+  const pkg = await getPackageDetailByPurl(qx, purl)
 
   if (!pkg) {
     throw new NotFoundError()
   }
 
-  if (pkg.contactsLastRefreshed == null) {
-    try {
-      const packagesTemporal = await getPackagesTemporalClient()
-      await packagesTemporal.workflow.execute('ingestSecurityContactsForPurlWorkflow', {
-        taskQueue: 'packages-worker',
-        workflowId: ondemandWorkflowId(purl),
-        workflowIdReusePolicy: WorkflowIdReusePolicy.ALLOW_DUPLICATE,
-        workflowIdConflictPolicy: WorkflowIdConflictPolicy.USE_EXISTING,
-        // Bounds the request's wait if packages-worker is down or its task queue is
-        // backed up — the activity's startToCloseTimeout only starts counting once a
-        // worker picks the task up, so without this the request could hang indefinitely.
-        workflowExecutionTimeout: '60 seconds',
-        args: [purl],
-      })
-      pkg = (await getPackageDetailByPurl(qx, purl)) ?? pkg
-    } catch (err) {
-      req.log.warn(err, 'On-demand security contacts ingest failed — serving cached detail')
-    }
-  }
-
   const [{ rows: advisories }, stewardshipSummary] = await Promise.all([
     getAdvisoriesByPackageId(qx, pkg.id),
     pkg.stewardshipId ? getStewardshipSummary(qx, Number(pkg.stewardshipId)) : null,