docs(desktop): clarify shared packaging cache maintenance

apps/desktop/packaging/README.i18n.yaml

@@ -15,8 +15,8 @@
   en: a6203dc2e690c7e1
   zh: 07b516549b8e3328
 /desktop-packaging/choose-a-build-path:
-  en: 447e66fb59b03fb1
-  zh: a87d440407b4bde3
+  en: 96d97c0c49b64723
+  zh: d8b3fe9909c34e83
 /desktop-packaging/release-versions:
   en: 3f38ab26ee195b39
   zh: f00eddafa8f3b9ca
@@ -54,5 +54,5 @@
   en: eb35eb973b796643
   zh: c1c52311632b7296
 /desktop-packaging/dev-note:
-  en: b75c8458928b72b9
-  zh: 003ba4e17b4b5269
+  en: d33dc26a98f06e95
+  zh: 76b8bdc433304b95

apps/desktop/packaging/README.md

@@ -32,7 +32,7 @@ Build Desktop installers locally or through Windows or macOS Actions, choose dep
 
 Run local commands from the repository root after installing locked dependencies. Use platform-specific commands for a local build, or platform Actions for the registered self-hosted runner. Choose test or production deployment independently from signed or unsigned mode. Read [Windows signing and runner operations](../windows-signing/README.md#trust-and-isolation) before any Windows signed build or shared-runner use. Installation is separate from packaging; [publication](../publishing/README.md) is a further explicit operation.
 
-Set `DSH_DESKTOP_PACKAGE_CACHE_DIR` to an absolute build-cache directory to retain verified downloads and the pnpm content store across checkouts. Both packaging workflows use `runner.tool_cache/dsh-desktop-package-cache`; local commands default to `.desktop-build`. Runtime preparation still creates a fresh installation and lockfile, verifies stored package integrity, and copies files before signing. Cleanup removes temporary installations, not these caches. Operators manage cache disk usage; no automatic eviction runs.
+Set `DSH_DESKTOP_PACKAGE_CACHE_DIR` to an absolute build-cache directory to retain verified downloads and the pnpm content store across checkouts. Both packaging workflows use `runner.tool_cache/dsh-desktop-package-cache`; local commands default to `.desktop-build`. Runtime preparation still creates a fresh installation and lockfile, verifies stored package integrity, and copies files before signing. Cleanup removes temporary installations, not these caches. Share writable caches only among trusted build jobs; integrity checks do not isolate untrusted writers. Clean caches only when no job is using them. Operators manage cache disk usage; no automatic eviction runs.
 
 <a id="release-versions"></a>
 
@@ -299,4 +299,4 @@ Keep the generated installer, its version and packaging records together. Review
 
 ## Dev Note
 
-None.
+TODO: Evaluate disk-space monitoring, a maintenance entry point and automatic eviction if disk shortages, sustained cache growth or frequent manual cleanup occur. These are deferred work, not current capabilities; automated cleanup requires coordination with every cache user.

apps/desktop/packaging/README.zh.md

@@ -32,7 +32,7 @@ description: "在本地或 Windows／macOS Actions 中生成 Desktop 安装包
 
 安装锁定依赖后，从仓库根目录运行本地命令。本地构建使用平台命令，已注册的自托管 runner 使用对应平台的 Actions。test/production 部署与 signed/unsigned 模式分别选择。任何 Windows 签名构建或共享 runner 使用前，先阅读 [Windows 签名与 runner 运维](../windows-signing/README.zh.md#trust-and-isolation)。安装与打包分开进行；[发布](../publishing/README.zh.md)还需要单独的显式操作。
 
-将 `DSH_DESKTOP_PACKAGE_CACHE_DIR` 设为绝对构建缓存目录，即可跨 checkout 保留经过校验的下载文件和 pnpm 内容存储。两个打包工作流使用 `runner.tool_cache/dsh-desktop-package-cache`；本地命令默认使用 `.desktop-build`。runtime 准备仍创建全新安装目录和锁文件、校验缓存包的完整性，并在签名前复制文件。清理只删除临时安装，不删除这些缓存。缓存磁盘用量由操作者管理，不自动淘汰。
+将 `DSH_DESKTOP_PACKAGE_CACHE_DIR` 设为绝对构建缓存目录，即可跨 checkout 保留经过校验的下载文件和 pnpm 内容存储。两个打包工作流使用 `runner.tool_cache/dsh-desktop-package-cache`；本地命令默认使用 `.desktop-build`。runtime 准备仍创建全新安装目录和锁文件、校验缓存包的完整性，并在签名前复制文件。清理只删除临时安装，不删除这些缓存。可写缓存仅供可信构建任务共享；完整性校验不能隔离不可信的写入者。仅在没有任务使用缓存时清理。缓存磁盘用量由操作者管理，不自动淘汰。
 
 <a id="release-versions"></a>
 
@@ -299,4 +299,4 @@ Windows 以不带版本后缀的产品名称显示已安装应用，版本保留
 
 ## 开发备注
 
-无。
+TODO：出现磁盘空间不足、缓存持续增长或频繁人工清理时，评估空间监测、维护入口和自动淘汰。这些是延期工作，尚未实现；自动清理需要与所有使用缓存的任务协调。