feat(saas): industry agent template assignment system

Phase 1-8 of industry-agent-delivery plan:

- DB migration: accounts.assigned_template_id (ON DELETE SET NULL)
- SaaS API: 4 new endpoints (assign/get/unassign/create-agent)
- Service layer: assign_template_to_account, get_assigned_template, unassign_template, create_agent_from_template)
- Types: AssignTemplateRequest, AgentConfigFromTemplate (capabilities merged into tools)
- Frontend SaaS Client: assignTemplate, getAssignedTemplate, unassignTemplate, createAgentFromTemplate
- saasStore: assignedTemplate state + login auto-fetch + actions
- saas-relay-client: fix unused import and saasUrl reference error
- connectionStore: fix relayModel undefined error
- capabilities default to glm-4-flash

- Route registration: new template assignment routes

Cospec and handlers consolidated

Build: cargo check --workspace PASS, tsc --noEmit Pass

desktop/src/store/saasStore.ts

@@ -27,6 +27,7 @@ import {
   type TotpSetupResponse,
   type SyncConfigRequest,
   type AgentTemplateAvailable,
+  type AgentTemplateFull,
 } from '../lib/saas-client';
 import { createLogger } from '../lib/logger';
 import {
@@ -73,6 +74,8 @@ export interface SaaSStateSlice {
   saasReachable: boolean;
   /** Agent templates available for onboarding */
   availableTemplates: AgentTemplateAvailable[];
+  /** Currently assigned template (null if not yet assigned or assignment removed) */
+  assignedTemplate: AgentTemplateFull | null;
   /** Consecutive heartbeat/health-check failures */
   _consecutiveFailures: number;
   _heartbeatTimer?: ReturnType<typeof setInterval>;
@@ -90,6 +93,12 @@ export interface SaaSActionsSlice {
   pushConfigToSaaS: () => Promise<void>;
   registerCurrentDevice: () => Promise<void>;
   fetchAvailableTemplates: () => Promise<void>;
+  /** Assign a template to the current account */
+  assignTemplate: (templateId: string) => Promise<void>;
+  /** Fetch the currently assigned template (auto-called after login) */
+  fetchAssignedTemplate: () => Promise<void>;
+  /** Unassign the current template */
+  unassignTemplate: () => Promise<void>;
   clearError: () => void;
   restoreSession: () => void;
   setupTotp: () => Promise<TotpSetupResponse>;
@@ -145,6 +154,7 @@ export const useSaaSStore = create<SaaSStore>((set, get) => {
     totpSetupData: null,
     saasReachable: true,
     availableTemplates: [],
+    assignedTemplate: null,
     _consecutiveFailures: 0,
 
     // === Actions ===
@@ -199,6 +209,11 @@ export const useSaaSStore = create<SaaSStore>((set, get) => {
           log.warn('Failed to fetch templates after login:', err);
         });
 
+        // Fetch assigned template in background (non-blocking)
+        get().fetchAssignedTemplate().catch((err: unknown) => {
+          log.warn('Failed to fetch assigned template after login:', err);
+        });
+
         // Fetch available models in background (non-blocking)
         get().fetchAvailableModels().catch((err: unknown) => {
           log.warn('Failed to fetch models after login:', err);
@@ -628,6 +643,35 @@ export const useSaaSStore = create<SaaSStore>((set, get) => {
       }
     },
 
+    assignTemplate: async (templateId: string) => {
+      try {
+        const template = await saasClient.assignTemplate(templateId);
+        set({ assignedTemplate: template });
+      } catch (err) {
+        log.warn('Failed to assign template:', err);
+        // Don't throw — let wizard continue with fallback flow
+      }
+    },
+
+    fetchAssignedTemplate: async () => {
+      try {
+        const template = await saasClient.getAssignedTemplate();
+        set({ assignedTemplate: template });
+      } catch {
+        // Not critical — null is fine
+        set({ assignedTemplate: null });
+      }
+    },
+
+    unassignTemplate: async () => {
+      try {
+        await saasClient.unassignTemplate();
+        set({ assignedTemplate: null });
+      } catch (err) {
+        log.warn('Failed to unassign template:', err);
+      }
+    },
+
     clearError: () => {
       set({ error: null });
     },