Fix OpenAI family local auth to use bearer (#302)

* Fix OpenAI family local auth to use bearer

* test(gateway): fix bearer auth assertions for openai local flows

* test(usage): make local usage status wait resilient

* style(gateway): apply rustfmt to usage test helper

---------

Co-authored-by: fawney19 <elky0401@gmail.com>

apps/aether-gateway/src/tests/ai_execute/finalize_local_cli/compact.rs

@@ -87,7 +87,7 @@ async fn gateway_executes_openai_compact_openai_family_upstream_stream_via_local
             endpoint_is_active: true,
             key_id: "key-openai-compact-finalize-local-1".to_string(),
             key_name: "prod".to_string(),
-            key_auth_type: "bearer".to_string(),
+            key_auth_type: "api_key".to_string(),
             key_is_active: true,
             key_api_formats: Some(vec!["openai:compact".to_string()]),
             key_allowed_models: None,
@@ -162,7 +162,7 @@ async fn gateway_executes_openai_compact_openai_family_upstream_stream_via_local
             "key-openai-compact-finalize-local-1".to_string(),
             "provider-openai-compact-finalize-local-1".to_string(),
             "prod".to_string(),
-            "bearer".to_string(),
+            "api_key".to_string(),
             None,
             true,
         )

apps/aether-gateway/src/tests/ai_execute/stream/decision.rs

@@ -449,7 +449,7 @@ async fn gateway_executes_openai_chat_stream_via_local_openai_cli_cross_format_c
         model: String,
         stream: bool,
         accept: String,
-        api_key: String,
+        authorization: String,
         x_client_request_id: String,
         session_id: String,
         conversation_id: String,
@@ -717,9 +717,9 @@ async fn gateway_executes_openai_chat_stream_via_local_openai_cli_cross_format_c
                             .and_then(|value| value.as_str())
                             .unwrap_or_default()
                             .to_string(),
-                        api_key: payload
+                        authorization: payload
                             .get("headers")
-                            .and_then(|value| value.get("x-api-key"))
+                            .and_then(|value| value.get("authorization"))
                             .and_then(|value| value.as_str())
                             .unwrap_or_default()
                             .to_string(),
@@ -871,8 +871,8 @@ async fn gateway_executes_openai_chat_stream_via_local_openai_cli_cross_format_c
     assert!(seen_execution_runtime_request.stream);
     assert_eq!(seen_execution_runtime_request.accept, "text/event-stream");
     assert_eq!(
-        seen_execution_runtime_request.api_key,
-        "sk-upstream-openai-chat-cli"
+        seen_execution_runtime_request.authorization,
+        "Bearer sk-upstream-openai-chat-cli"
     );
     assert_eq!(
         seen_execution_runtime_request.x_client_request_id,

apps/aether-gateway/src/tests/ai_execute/sync/cli.rs

@@ -88,7 +88,7 @@ async fn gateway_executes_openai_cli_sync_via_local_decision_gate_with_local_syn
             endpoint_is_active: true,
             key_id: "key-openai-cli-local-1".to_string(),
             key_name: "prod".to_string(),
-            key_auth_type: "bearer".to_string(),
+            key_auth_type: "api_key".to_string(),
             key_is_active: true,
             key_api_formats: Some(vec!["openai:cli".to_string()]),
             key_allowed_models: None,
@@ -171,7 +171,7 @@ async fn gateway_executes_openai_cli_sync_via_local_decision_gate_with_local_syn
             "key-openai-cli-local-1".to_string(),
             "provider-openai-cli-local-1".to_string(),
             "prod".to_string(),
-            "bearer".to_string(),
+            "api_key".to_string(),
             None,
             true,
         )

apps/aether-gateway/src/tests/architecture/ai_pipeline.rs

@@ -936,7 +936,7 @@ fn ai_pipeline_video_routes_request_preparation_through_request_payload_seams()
         "resolve_candidate_mapped_model(",
         "build_provider_request_body(",
         "build_video_upstream_url(",
-        "resolve_local_openai_chat_auth(",
+        "resolve_local_openai_bearer_auth(",
         "resolve_local_gemini_auth(",
     ] {
         assert!(

apps/aether-gateway/src/tests/architecture/runtime_and_security.rs

@@ -803,7 +803,7 @@ fn model_fetch_runtime_paths_depend_on_shared_crates_not_local_pure_helpers() {
         "execute_execution_runtime_sync_plan(state, None, &plan)",
         "resolve_local_standard_auth(",
         "resolve_local_gemini_auth(",
-        "resolve_local_openai_chat_auth(",
+        "resolve_local_openai_bearer_auth(",
         "resolve_local_vertex_api_key_query_auth(",
         "apply_local_header_rules(",
         "ensure_upstream_auth_header(",

apps/aether-gateway/src/tests/usage/local.rs

@@ -33,7 +33,8 @@ where
     T: UsageReadRepository + ?Sized,
 {
     let mut stored = None;
-    for _ in 0..50 {
+    let deadline = tokio::time::Instant::now() + std::time::Duration::from_secs(5);
+    loop {
         stored = repository
             .find_by_request_id(request_id)
             .await
@@ -44,9 +45,16 @@ where
         {
             break;
         }
+        if tokio::time::Instant::now() >= deadline {
+            let observed = stored
+                .as_ref()
+                .map(|usage| usage.status.as_str())
+                .unwrap_or("<missing>");
+            panic!("usage should reach status {expected_status}, last observed status: {observed}");
+        }
         tokio::time::sleep(std::time::Duration::from_millis(10)).await;
     }
-    stored.unwrap_or_else(|| panic!("usage should reach status {expected_status}"))
+    stored.expect("usage should be present once the expected status is observed")
 }
 
 #[tokio::test]

apps/aether-gateway/src/tests/video/openai_sync_task.rs

@@ -214,7 +214,7 @@ async fn gateway_executes_openai_video_delete_via_reconstructed_data_backed_loca
                         .to_string(),
                     authorization: payload
                         .get("headers")
-                        .and_then(|value| value.get("x-api-key"))
+                        .and_then(|value| value.get("authorization"))
                         .and_then(|value| value.as_str())
                         .unwrap_or_default()
                         .to_string(),
@@ -331,7 +331,7 @@ async fn gateway_executes_openai_video_delete_via_reconstructed_data_backed_loca
     );
     assert_eq!(
         seen_execution_runtime_request.authorization,
-        "sk-upstream-openai-video"
+        "Bearer sk-upstream-openai-video"
     );
 
     let stored_candidates = request_candidate_repository