fix: use dynamic imports in EnvironmentDriverRegistry to avoid circular deps

- Replace static imports with dynamic imports for drivers
- Add NoopSecretEncryptor to runtime package (avoid cross-package dependency)
- Export SecretEncryptor interface from runtime
- Use correct SqlDriver configuration for SQLite (better-sqlite3 client)

Agent-Logs-Url: https://github.com/objectstack-ai/framework/sessions/8385b77f-f7ed-4241-8e09-25c65d8d98b0

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Author: Claude

packages/runtime/src/environment-registry.ts

@@ -2,10 +2,6 @@
 
 import type { Contracts } from '@objectstack/spec';
 type IDataDriver = Contracts.IDataDriver;
-import { TursoDriver } from '@objectstack/driver-turso';
-import { InMemoryDriver } from '@objectstack/driver-memory';
-import { NoopSecretEncryptor } from '@objectstack/service-tenant/environment-provisioning';
-import { LocalSQLiteDriver } from '@objectstack/driver-sql/local-sqlite';
 
 /**
  * Environment-scoped driver registry with LRU caching.
@@ -44,20 +40,42 @@ interface CacheEntry {
   expiresAt: number;
 }
 
+/**
+ * Secret encryptor interface - must match service-tenant NoopSecretEncryptor
+ */
+export interface SecretEncryptor {
+  readonly keyId: string;
+  encrypt(plaintext: string): Promise<string> | string;
+  decrypt(ciphertext: string): Promise<string> | string;
+}
+
+/**
+ * No-op encryptor used in development / tests. **Never** use in production.
+ */
+export class NoopSecretEncryptor implements SecretEncryptor {
+  readonly keyId = 'noop';
+  encrypt(plaintext: string): string {
+    return plaintext;
+  }
+  decrypt(ciphertext: string): string {
+    return ciphertext;
+  }
+}
+
 /**
  * Default implementation of EnvironmentDriverRegistry with LRU caching.
  */
 export class DefaultEnvironmentDriverRegistry implements EnvironmentDriverRegistry {
   private readonly controlPlaneDriver: IDataDriver;
-  private readonly encryptor: NoopSecretEncryptor;
+  private readonly encryptor: SecretEncryptor;
   private readonly cacheTTL: number;
   private readonly hostnameCache = new Map<string, CacheEntry>();
   private readonly idCache = new Map<string, CacheEntry>();
   private readonly pendingResolves = new Map<string, Promise<CacheEntry | null>>();
 
   constructor(config: {
     controlPlaneDriver: IDataDriver;
-    encryptor?: NoopSecretEncryptor;
+    encryptor?: SecretEncryptor;
     cacheTTLMs?: number;
   }) {
     this.controlPlaneDriver = config.controlPlaneDriver;
@@ -219,7 +237,7 @@ export class DefaultEnvironmentDriverRegistry implements EnvironmentDriverRegist
     );
 
     // Instantiate driver based on driver type
-    const driver = this.createDriver(databaseDriver, databaseUrl, plaintextSecret);
+    const driver = await this.createDriver(databaseDriver, databaseUrl, plaintextSecret);
 
     return {
       environmentId,
@@ -228,11 +246,13 @@ export class DefaultEnvironmentDriverRegistry implements EnvironmentDriverRegist
     };
   }
 
-  private createDriver(driverType: string, databaseUrl: string, authToken: string): IDataDriver {
+  private async createDriver(driverType: string, databaseUrl: string, authToken: string): Promise<IDataDriver> {
+    // Dynamic import drivers to avoid circular dependencies
     switch (driverType) {
       case 'memory': {
         // Memory driver: URL format is memory://dbname or memory://
         const dbName = databaseUrl.replace('memory://', '') || 'default';
+        const { InMemoryDriver } = await import('@objectstack/driver-memory');
         return new InMemoryDriver({
           name: `com.objectstack.driver.memory.${dbName}`,
           persistence: 'file', // Use file persistence for environments
@@ -242,14 +262,19 @@ export class DefaultEnvironmentDriverRegistry implements EnvironmentDriverRegist
       case 'sqlite': {
         // SQLite driver: URL format is file:./path/to/db.db
         const filePath = databaseUrl.replace('file:', '');
-        return new LocalSQLiteDriver({
-          name: 'com.objectstack.driver.sql',
-          url: filePath,
+        const { SqlDriver } = await import('@objectstack/driver-sql');
+        return new SqlDriver({
+          client: 'better-sqlite3',
+          connection: {
+            filename: filePath,
+          },
+          useNullAsDefault: true,
         });
       }
 
       case 'turso': {
         // Turso driver: URL format is libsql://hostname
+        const { TursoDriver } = await import('@objectstack/driver-turso');
         return new TursoDriver({
           name: 'com.objectstack.driver.turso',
           url: databaseUrl,
@@ -269,7 +294,7 @@ export class DefaultEnvironmentDriverRegistry implements EnvironmentDriverRegist
 export function createEnvironmentDriverRegistry(
   controlPlaneDriver: IDataDriver,
   options?: {
-    encryptor?: NoopSecretEncryptor;
+    encryptor?: SecretEncryptor;
     cacheTTLMs?: number;
   },
 ): EnvironmentDriverRegistry {

packages/runtime/src/index.ts

@@ -24,8 +24,12 @@ export { MiddlewareManager } from './middleware.js';
 export {
     DefaultEnvironmentDriverRegistry,
     createEnvironmentDriverRegistry,
+    NoopSecretEncryptor,
+} from './environment-registry.js';
+export type {
+    EnvironmentDriverRegistry,
+    SecretEncryptor,
 } from './environment-registry.js';
-export type { EnvironmentDriverRegistry } from './environment-registry.js';
 
 // Re-export from @objectstack/rest
 export {