milestone 21: abp list exceptions and a regex rule kind

src/web/web_integration_test.zig

@@ -1665,6 +1665,9 @@ fn createdId(body: []const u8) !i64 {
     return std.fmt.parseInt(i64, rest[0..end], 10);
 }
 
+/// The three files a refresh publishes for one source. The `.allow` file is
+/// written here too: the delete path has to take every compiled body, and a
+/// sweep that missed one would leave an orphan this test could not see.
 fn writeCompiled(io: std.Io, dir: std.Io.Dir, id: i64, body: []const u8) !void {
     var buf: [64]u8 = undefined;
     try dir.writeFile(io, .{
@@ -1675,6 +1678,10 @@ fn writeCompiled(io: std.Io, dir: std.Io.Dir, id: i64, body: []const u8) !void {
         .sub_path = try std.fmt.bufPrint(&buf, "{d}.wild", .{id}),
         .data = "",
     });
+    try dir.writeFile(io, .{
+        .sub_path = try std.fmt.bufPrint(&buf, "{d}.allow", .{id}),
+        .data = "",
+    });
 }
 
 fn accessCompiled(io: std.Io, dir: std.Io.Dir, id: i64) !void {
@@ -1726,6 +1733,11 @@ fn deleteSweepsCompiledFiles(io: std.Io, env: *Env) anyerror!void {
         try std.fmt.bufPrint(&name_buf, "{d}.wild", .{doomed}),
         .{},
     ));
+    try testing.expectError(error.FileNotFound, dir.access(
+        io,
+        try std.fmt.bufPrint(&name_buf, "{d}.allow", .{doomed}),
+        .{},
+    ));
     try accessCompiled(io, dir, kept);
 }