CODE-023: get.js swallows unmount/unlink/conflict-persist; store.locate silent miss

Now: OPEN
Sev: MED

Deps: none (independent of the dedup tickets). Touches verbs/get/get.js and shared/store.js only. Repro-first (abc policy): each swallowed error needs a failing case before the catch is opened up. Sibling of the durable-status work in STATUS (the con row must survive get's exit).

Input

Context

get.js:989 submodule unmount io.rmdir(full, true) is in a bare catch {}: a partial/failed unmount leaves the sub half-removed, no row, no error.
get.js:998 delete-leaf io.unlink(full) swallowed: a failed unlink (EACCES/EBUSY) emits no del row yet get exits 0 — disk diverges silently.
get.js:1058 & :1068 the DURABLE conflict wtlog append is swallowed: if the persist fails, status later reads the path clean — defeats the stated intent.
store.js:288 locate(): a candidate whose file_id has no live .keeper pack is skipped; a stale idx run as sole hit → object reads absent (unk), no diagnostic. Correctness hangs on idxmaint keeping runs↔packs in sync.

Goals

Surface each failure: a row, a diagnostic, or propagation — never a silent exit-0 while worktree/status state diverges from what get reported.
Assert/log the locate() stale-run case instead of a silent absent.

Constraints

Distinguish genuine best-effort cleanup (idempotent unlink of a known-absent file) from a failure that changes reported state — only the latter must speak up. be/ JS only, drive via jab.

WIP

TODOs

repro: read-only leaf makes unlink/rmdir fail, get still reports success
get.js:989 rmdir unmount — surface failure (diagnostic / non-zero)
get.js:998 unlink delete-leaf — surface failure, don't drop the del
get.js:1058/:1068 durable con append — surface a failed persist
store.js:288 locate — log/assert when a file_id has no live pack

Blockers and bummers

Some of these catches are load-bearing on partial-state recovery; opening them up may re-surface errors currently absorbed — gate each with its repro.

Outcome

Not started. Suggested commit: CODE-023: surface get.js swallowed unmount/unlink/con errors.