build(spec): bump TypeSpec to 1.13.0-dev and drop #10677 workaround

Both upstream fixes are now in the @typespec/openapi3 prerelease line:

  - microsoft/typespec#10677 (auth scheme models leaking into
    components.schemas) - move basicAuth/bearerAuth/openId back into
    `namespace LibreGraph` and drop the workaround comments.
  - microsoft/typespec#10656 (uniqueItems lost on operation parameters)
    - already wired up in source via `@TypeSpec.JsonSchema.uniqueItems`,
    now actually takes effect, so the generated TS axios client params
    flip from `Array<EnumX>` back to `Set<EnumX>` for $select / $expand /
    $orderby (matching the original v1.0.yaml surface).

Pinning to explicit dev versions rather than the `next` dist-tag
because npm resolves a bare "next" specifier against `latest` for
prerelease tags.

Author: dschmidt

spec/auth.tsp

@@ -4,17 +4,7 @@ import "@typespec/openapi";
 using Http;
 using OpenAPI;
 
-// Auth scheme declarations live in the global namespace, NOT inside
-// `LibreGraph`, to work around microsoft/typespec#10677: when an auth
-// scheme model is declared inside the service namespace, the
-// openapi3 emitter also emits it under `components.schemas` (in
-// addition to the correct `components.securitySchemes`), and any
-// `@extension` on the model propagates to both locations. Extensions
-// valid for `securitySchemes` (like `bearerFormat`) are rejected by
-// downstream validators when they appear under `schemas`.
-//
-// Move the models back into `main.tsp` (alongside `@useAuth(...)`) once
-// the upstream fix is released.
+namespace LibreGraph;
 
 @doc("HTTP Basic Authentication (discouraged for production environments)")
 model basicAuth {

spec/main.tsp

@@ -25,8 +25,7 @@ using OpenAPI;
 
 // API-level auth: an operation accepts either OpenID Connect or HTTP Basic.
 // Education endpoints override this to require Bearer tokens (see
-// education.tsp). The auth scheme models are declared in `auth.tsp` at
-// global namespace (workaround for microsoft/typespec#10677).
+// education.tsp).
 @useAuth(openId | basicAuth)
 @service(#{ title: "Libre Graph API" })
 @info(#{

spec/package-lock.json

@@ -7,10 +7,10 @@
     "build": "tsp compile ."
   },
   "dependencies": {
-    "@typespec/compiler": "^1.5.0",
-    "@typespec/http": "^1.5.0",
-    "@typespec/json-schema": "^1.12.0",
-    "@typespec/openapi": "^1.5.0",
-    "@typespec/openapi3": "^1.5.0"
+    "@typespec/compiler": "1.13.0-dev.5",
+    "@typespec/http": "1.13.0-dev.0",
+    "@typespec/json-schema": "1.13.0-dev.1",
+    "@typespec/openapi": "1.13.0-dev.0",
+    "@typespec/openapi3": "1.13.0-dev.2"
   }
 }