WIP: asset controllers and store updates

Decided never to allow direct access to container assets, but proxy through
fullSlot instead.  This simplifies a lot.