feat(llm): add OrcaRouter as a named LLM provider

[Marc-oss-hub]

Summary

Adds OrcaRouter as a named LLM provider across the server LLM client and the client-side summarization chain, mirroring how OpenRouter is wired today.

OrcaRouter is an OpenAI-compatible model routing gateway that exposes 150+ provider-scoped models (e.g. deepseek/deepseek-v4-flash, openai/gpt-4o-mini, anthropic/claude-opus-4.8) behind a single endpoint and API key. It also runs gateway-level, zero-trust security for AI agents on the same endpoint — screening every prompt/response and governing every tool call on a default-deny basis, with no application code changes.

Because the provider is a thin base-URL + key swap, users who set ORCAROUTER_API_KEY get a fully named provider in the existing chain; users who don't are completely unaffected (the provider is skipped, exactly like Groq/OpenRouter are today when their key is absent).

Type of change

• New feature

Affected areas

• AI Insights / World Brief
• Config / Settings
• Other: server-side LLM client + scripts LLM chain

What this changes

• server/_shared/llm.ts: adds orcarouter to the LlmProviderName union and getProviderCredentials() (base URL https://api.orcarouter.ai/v1/chat/completions, auth via ORCAROUTER_API_KEY, default model deepseek/deepseek-v4-flash). Registered in PROVIDER_SET as an optional provider so LLM_TOOL_PROVIDER=orcarouter, LLM_REASONING_PROVIDER=orcarouter and the FORECAST_LLM_*_PROVIDER_ORDER envs accept it — but it is deliberately not added to the default PROVIDER_CHAIN, so default routing (including the China-hosted-provider exclusion from feat(llm): never serve OpenRouter inference from China-hosted providers #4993) is unchanged unless the user opts in.
• server/_shared/llm-health.ts: warms the health cache for api.orcarouter.ai when ORCAROUTER_API_KEY is set.
• server/worldmonitor/news/v1/summarize-article.ts: adds orcarouter to the provider skipReasons map.
• scripts/lib/llm-chain.cjs: adds an orcarouter entry to LLM_PROVIDERS (inert without the key).
• src/services/summarization.ts: adds an OrcaRouter entry to the client API_PROVIDERS chain, right after OpenRouter.
• src/services/summarization-outcome.ts: extends AttemptedSummarizationProvider with 'orcarouter'.
• src/services/runtime-config.ts: adds ORCAROUTER_API_KEY to RuntimeSecretKey and an aiOrcaRouter feature to RuntimeFeatureId / RUNTIME_FEATURES.
• src/services/settings-constants.ts: adds the OrcaRouter sign-up URL, human label, and the aiOrcaRouter feature to the AI settings category.
• src/services/desktop-readiness.ts: counts aiOrcaRouter among the key-backed AI features and the summaries readiness check.
• .env.example + README.md: document ORCAROUTER_API_KEY and the provider.
• tests/: provider credential + chain coverage for orcarouter.

How to use it

1. Get a key at https://www.orcarouter.ai (keys start with sk-orca-).
2. Set ORCAROUTER_API_KEY in your environment or the settings vault.
3. Either leave it as an available fallback in the summarization chain, or pin it explicitly: LLM_TOOL_PROVIDER=orcarouter, LLM_REASONING_PROVIDER=orcarouter, or FORECAST_LLM_COMBINED_PROVIDER_ORDER=orcarouter.

Verification

• npm run typecheck — clean
• Targeted tests for the LLM client / summarization chain — pass
• L3 live check against https://api.orcarouter.ai/v1/chat/completions with a real key: 200 + valid completion.

I'm an engineer on the OrcaRouter team.

[vercel]

@Marc-oss-hub is attempting to deploy a commit to the World Monitor Team on Vercel.

A member of the Team first needs to authorize it.

[koala73]

Review (not ready to merge yet)

GitHub reports CONFLICTING against current main (LLM / forecast provider tables have moved). Please rebase.

Implementation direction looks right once it applies cleanly: OrcaRouter is opt-in (ORCAROUTER_API_KEY), not in the default PROVIDER_CHAIN, so it does not bypass the OpenRouter China-provider exclusion. User-Agent is still applied at the callLlm fetch site like the other named providers.

After rebase, re-run tests/shared-llm.test.mts and any forecast-provider table tests that now include extra named providers.