Library delete 409s on published usages as well as draft ones

backend/tests/api/routes/test_flows.py

@@ -583,6 +583,36 @@ def test_a_shared_node_in_use_is_retired_only_with_detach(
     client.delete(f"{PREFIX}/shared", headers=superuser_token_headers)
 
 
+def test_a_shared_node_only_the_published_flow_uses_is_kept(
+    client: TestClient, superuser_token_headers: dict[str, str]
+) -> None:
+    """An unshare in the draft leaves the running flow on the source."""
+    client.put(
+        f"{PREFIX}/unshared", headers=superuser_token_headers, json=a_flow("unshared")
+    )
+    shared = client.post(
+        f"{PREFIX}/unshared/nodes/sensor/share",
+        headers=superuser_token_headers,
+        json={"lib_name": "published_reading"},
+    ).json()
+    client.post(
+        f"{PREFIX}/unshared/publish",
+        headers=superuser_token_headers,
+        json={"version": shared["definition"]["version"]},
+    )
+    client.post(
+        f"{PREFIX}/unshared/nodes/sensor/unshare", headers=superuser_token_headers
+    )
+
+    url = f"{PREFIX}/library/published_reading"
+    response = client.delete(url, headers=superuser_token_headers)
+    assert response.status_code == 409
+    assert "unshared.sensor" in response.json()["detail"]
+
+    client.delete(f"{url}?detach=true", headers=superuser_token_headers)
+    client.delete(f"{PREFIX}/unshared", headers=superuser_token_headers)
+
+
 def test_a_shared_source_write_is_audited(
     client: TestClient,
     superuser_token_headers: dict[str, str],