changelog.d/4847-cli-token-touch-nonblocking.md

Rama main · réplica de lectura del repositorio original.

- **A CLI token request no longer waits on the database's writer lock to record "last used".** Since #4788 the first request of each minute with a STANDARD CLI token wrote the token's `last_used_at` before authenticating. While another writer held SQLite's lock that request waited out the write's 250 ms limit (over a second when the pool had to open a connection, measured under `-race`), and the breadcrumb was then dropped until the token's next use. The touch is now queued in memory (bounded, coalesced per token), written in the background about a second later and flushed at shutdown; authorization, scopes and the per-use ADMIN audit are unchanged. The settings page's "last used" may lag by about a second (#4847).