Connect once, operate with precise capability state.

Store actions are shown by role and capability. Operators can inspect blockers without receiving store-connection controls.