feat: add avatarUrl and bio fields to /me endpoint response

[Ryukemeister]

What does this PR do?

Adds avatarUrl and bio fields to the /v2/me endpoint response in API v2. Previously, these fields existed in the User model but were not being returned by the endpoint.

Changes:

• Added avatarUrl and bio fields to userSchemaResponse Zod schema in packages/platform/types/me.ts
• Added both fields to MeOutput NestJS DTO in apps/api/v2/src/ee/me/outputs/me.output.ts with proper OpenAPI decorators
• Updated e2e tests to verify both fields are returned in GET and PATCH /v2/me responses
• Fixed pre-existing lint warnings by removing as any type assertions in test file (required to pass pre-commit hooks)

Both fields are nullable to match the User model in the Prisma schema - users without avatars or bios will receive null.

Note on OpenAPI documentation: The docs/api-reference/v2/openapi.json file was not regenerated in this PR due to environment variable requirements for yarn generate-swagger. The DTOs have been updated with proper decorators, so the docs will reflect these changes when regenerated in a proper environment.

---

Link to Devin run: https://app.devin.ai/sessions/dd3d701e731d4568a030d085f944c875
Requested by: [email protected] (@Ryukemeister)
Slack thread: https://calendso.slack.com/archives/C08LT9BLEET/p1763394906254669

Mandatory Tasks (DO NOT REMOVE)

• I have self-reviewed the code (A decent size PR without self-review might be rejected).
• I have updated the developer docs in /docs if this PR makes changes that would require a documentation change. If N/A, write N/A here and check the checkbox. N/A - This is an additive API change. The DTOs have been updated with OpenAPI decorators so docs will be correct when regenerated.
• I confirm automated tests are in place that prove my fix is effective or that my feature works.

How should this be tested?

Manual testing (IMPORTANT - please verify):

1. Make an authenticated API call to GET /v2/me endpoint with a valid API key or access token
2. Verify that the response includes both avatarUrl and bio fields
3. Test with a user that has an avatar and bio set - verify the values are returned correctly
4. Test with a user without an avatar or bio - verify the fields are null (not missing from response)

Automated tests:

• E2E tests have been updated in apps/api/v2/src/ee/me/me.controller.e2e-spec.ts to verify both fields are present in responses
• Run TZ=UTC yarn test to verify all tests pass

Expected output:

{
  "status": "success",
  "data": {
    "id": 123516,
    "email": "[email protected]",
    "name": "User Name",
    "avatarUrl": "https://example.com/avatar.png",  // or null
    "bio": "User bio text",  // or null
    "timeFormat": 12,
    "defaultScheduleId": 126344,
    "weekStart": "Sunday",
    "timeZone": "Europe/London",
    "username": "username",
    "organizationId": 12737,
    "organization": {
      "isPlatform": false,
      "id": 12737
    }
  }
}

Human Review Checklist

Critical items to verify:

• Make a real API call to /v2/me and confirm both avatarUrl and bio appear in the response
• Verify the TypeScript types are correctly updated (check that UserResponse type includes both fields)
• Test with a user that has an avatar and bio set - verify the values are correct
• Test with a user that doesn't have an avatar or bio - verify the fields are null (not missing)
• Consider whether OpenAPI docs should be regenerated as part of this PR or in a follow-up
• Verify this change doesn't break any existing API consumers (additive change should be safe)

Note: The lint warning fixes (removing as any assertions on lines 156 and 162 of the test file) were necessary to pass pre-commit hooks but are unrelated to the main feature change.

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR that start with 'DevinAI' or '@devin'.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments

Project	Deployment	Preview	Comments	Updated (UTC)
cal	Ignored			Nov 19, 2025 1:15pm
cal-eu	Ignored			Nov 19, 2025 1:15pm

[cubic-dev-ai]

No issues found across 3 files

[github-actions]

E2E results are ready!

• Workflow #89124.2 latest results

[emrysal]

Looks good to me