Serve /copilot_internal/user before proxy init guard

The CLI authenticates and calls /copilot_internal/user at startup, which can race ahead of the per-test POST /config. The Go e2e harness spawns the CLI (ctx.NewClient) at the parent-test level, before any subtest's ConfigureForTest posts /config, so the user call reached the proxy while state was still nil and hit the 'not yet initialized' guard. That blocked the CLI's MCP enablement check and caused the macOS MCP e2e subtests to time out at 60s.

Move the /copilot_internal/user read handler above the state guard, mirroring its write-side counterpart (/copilot-user-config). The handler only depends on the copilotUserByToken map, which is populated at NewTestContext independently of state, so this is safe and consistent.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: stephentoub

test/harness/replayingCapiProxy.ts

@@ -241,34 +241,12 @@ export class ReplayingCapiProxy extends CapturingHttpProxy {
           return;
         }
 
-        const state = this.state;
-        if (!state) {
-          throw new Error(
-            "ReplayingCapiProxy not yet initialized. Either pass filePath and workDir to the constructor, " +
-              "or post configuration to /config before making other HTTP requests.",
-          );
-        }
-
-        // Handle /models endpoint
-        // Use stored models if available, otherwise use default model
-        if (options.requestOptions.path === "/models") {
-          const models =
-            state.storedData?.models && state.storedData.models.length > 0
-              ? state.storedData.models
-              : [defaultModel];
-          const modelsResponse = createGetModelsResponse(models);
-          const body = JSON.stringify(modelsResponse);
-          const headers = {
-            "content-type": "application/json",
-            ...commonResponseHeaders,
-          };
-          options.onResponseStart(200, headers);
-          options.onData(Buffer.from(body));
-          options.onResponseEnd();
-          return;
-        }
-
-        // Handle /copilot_internal/user endpoint for per-session auth
+        // Handle /copilot_internal/user endpoint for per-session auth.
+        // This must run before the state guard below: the CLI authenticates and
+        // calls /copilot_internal/user at startup, which can race ahead of the
+        // per-test POST /config (e.g. the Go harness spawns the CLI before the
+        // first ConfigureForTest). The response only depends on the token map,
+        // which is populated independently of `state`.
         if (options.requestOptions.path === "/copilot_internal/user") {
           const headers = options.requestOptions.headers;
           const headerMap = headers as
@@ -310,6 +288,33 @@ export class ReplayingCapiProxy extends CapturingHttpProxy {
           return;
         }
 
+        const state = this.state;
+        if (!state) {
+          throw new Error(
+            "ReplayingCapiProxy not yet initialized. Either pass filePath and workDir to the constructor, " +
+              "or post configuration to /config before making other HTTP requests.",
+          );
+        }
+
+        // Handle /models endpoint
+        // Use stored models if available, otherwise use default model
+        if (options.requestOptions.path === "/models") {
+          const models =
+            state.storedData?.models && state.storedData.models.length > 0
+              ? state.storedData.models
+              : [defaultModel];
+          const modelsResponse = createGetModelsResponse(models);
+          const body = JSON.stringify(modelsResponse);
+          const headers = {
+            "content-type": "application/json",
+            ...commonResponseHeaders,
+          };
+          options.onResponseStart(200, headers);
+          options.onData(Buffer.from(body));
+          options.onResponseEnd();
+          return;
+        }
+
         // Handle memory endpoints - return stub responses in tests
         // Matches: /agents/*/memory/*/enabled, /agents/*/memory/*/recent, etc.
         if (options.requestOptions.path?.match(/\/agents\/.*\/memory\//)) {