docs: Sprint 8 CHANGELOG, README badge 17511, API.md new functions (phases 95-100)

CHANGELOG.md:
- New [Unreleased] Sprint 8 section documenting C13-C23 additions:
  set_expand_string/read_expand_string, set_multi_sz/read_multi_sz,
  corp_guard_reasons, reset_corp_cache, detect_battery, detect_network_type,
  HWProfile.has_battery/network_type, analytics.record_error_for/error_stats,
  ratings.average_rating/rated_count, tweaks engine helpers (5 new functions),
  AppConfig.theme/locale, CLI --scope/--min-build/--corp-safe/--needs-admin,
  _split_root lru_cache, filter_tweaks early-exit, status_map detect-free skip
README.md:
- Test count badge: 17378 -> 17511
API.md:
- tweaks: tweaks_by_scope, tweaks_above_build, tweak_risk_level,
  tweak_count_by_scope, category_counts
- registry: set_expand_string, set_multi_sz, read_expand_string, read_multi_sz
- config: theme and locale fields
- corpguard: corp_guard_reasons, reset_corp_cache
- analytics: record_error_for, error_stats
- ratings: new section with average_rating, rated_count
- CLI: --scope, --min-build, --corp-safe, --needs-admin flags
Also: ruff auto-fix applied to test files (unused imports, sort)

Author: aeger

CHANGELOG.md

@@ -4,6 +4,55 @@ All notable changes to RegiLattice are documented here.
 Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 This project adheres to [Semantic Versioning](https://semver.org/).
 
+## [Unreleased] — Sprint 8 refactor (C13–C23, 2026-03)
+
+### Added
+
+- **`RegistrySession.set_expand_string` / `read_expand_string`** — read/write `REG_EXPAND_SZ` values with lru_cache.
+- **`RegistrySession.set_multi_sz` / `read_multi_sz`** — read/write `REG_MULTI_SZ` (list-of-strings) values with lru_cache.
+- **`corp_guard_reasons()`** — returns a copy of the reason-list that triggered corporate detection; thread-safe.
+- **`reset_corp_cache()`** — clears the corporate detection cache for testing and hot-reload scenarios.
+- **`detect_battery()`** — `@lru_cache` probe returning `True` when a battery/UPS is detected.
+- **`detect_network_type()`** — `@lru_cache` probe returning `"vpn"`, `"wifi"`, `"ethernet"`, or `"unknown"`.
+- **`HWProfile.has_battery`** and **`HWProfile.network_type`** fields populated by the new probes.
+- **`analytics.record_error_for(tweak_id)`** — track per-tweak error counts.
+- **`analytics.error_stats()`** — return `dict[str, int]` of per-tweak error counts.
+- **`ratings.average_rating()`** — mean star rating across all rated tweaks (`None` when empty).
+- **`ratings.rated_count()`** — number of tweaks that have been rated.
+- **`tweaks_by_scope(scope)`** — return tweaks matching a specific scope string.
+- **`tweaks_above_build(build)`** — return tweaks whose `min_build` is `<= build`.
+- **`tweak_risk_level(td)`** — classify a tweak as `"low"`, `"medium"`, or `"high"` risk.
+- **`tweak_count_by_scope()`** — `dict[str, int]` counts per scope key (`user/machine/both`).
+- **`category_counts()`** — `dict[str, int]` mapping category name to tweak count.
+- **`AppConfig.theme`** — new field (default `"system"`) loaded from `[general] theme` in TOML.
+- **`AppConfig.locale`** — new field (default `"en"`) loaded from `[general] locale` in TOML.
+- **CLI `--scope {user,machine,both}`** — filter `--list` / `--search` output by registry scope.
+- **CLI `--min-build N`** — filter `--list` / `--search` output by minimum Windows build.
+- **CLI `--corp-safe`** — filter `--list` / `--search` to HKCU-only tweaks.
+- **CLI `--needs-admin`** — filter `--list` / `--search` to admin-required tweaks.
+- **133 new tests** across 9 test files (C16–C23 additions).
+
+### Changed / Fixed
+
+- **`_invalidate_cache_for` bugfix** — previously only cleared `dword`/`string`/`exists` suffixes; now clears
+  all 6: `dword`, `string`, `binary`, `qword`, `expand`, `multi_sz`.
+- **`filter_tweaks()` early-exit** — adds `if not pool: return pool` after each filter step, avoiding
+  unnecessary work when the result pool drains early.
+- **`status_map()` detect-free skip** — tweaks with `detect_fn=None` are assigned `TweakResult.UNKNOWN`
+  directly without being submitted to the thread pool.
+- **`_split_root()` memoization** — decorated with `@functools.lru_cache(maxsize=256)`; repeated registry
+  path splitting is now O(1) on cache hit.
+- **`detect_hardware()` workers raised to 6** — runs `detect_battery` and `detect_network_type` in the
+  parallel probe pool alongside the existing 4 probes.
+- **`_SCOPE_CACHE` / `_SCOPE_LOCK` ordering fix** — moved definitions to before the `_load_plugins()`
+  function to eliminate `NameError` at import time.
+- **Scope pre-warm** — `_load_plugins()` now pre-populates `_SCOPE_CACHE` for all tweaks at import.
+
+### Infrastructure
+
+- **17 511 tests** across 21 test files after C13–C23 additions (was 17 378 at Sprint 7).
+- ruff: all checks pass; mypy `--strict`: 0 issues.
+
 ## [Unreleased] — Sprint 7 refactor (C2–C11, 2026-03)
 
 ### Added

README.md

@@ -1,7 +1,7 @@
 # ⚡ RegiLattice
 
 ![Python 3.10+](https://img.shields.io/badge/python-3.10%2B-blue?logo=python&logoColor=white)
-![Tests](https://img.shields.io/badge/tests-17%2C378%2B%20passing-brightgreen)
+![Tests](https://img.shields.io/badge/tests-17%2C511%2B%20passing-brightgreen)
 ![Coverage](https://img.shields.io/badge/coverage-90%25%2B-brightgreen)
 ![Ruff](https://img.shields.io/badge/linter-ruff-blue)
 ![mypy](https://img.shields.io/badge/type--check-mypy%20strict-blue)
@@ -29,7 +29,7 @@ A comprehensive Windows registry tweak toolkit with **1 292 tweaks** across **69
 - **Corporate network safety** — blocks tweaks on domain-joined, Azure AD, VPN, and managed machines
 - **Automatic backups** — every registry mutation is backed up before changes with rollback on error
 - **Export PowerShell** — generate `.ps1` scripts from selected tweaks for portable deployment
-- **~17 378 tests** across 21 test files — full smoke, CLI, GUI, and engine coverage
+- **~17 511 tests** across 21 test files — full smoke, CLI, GUI, and engine coverage
 
 ## Architecture
 

docs/API.md

@@ -71,6 +71,11 @@ class TweakResult(str, Enum):
 | `remove_tweaks(ids, ...)` | `→ dict[str, TweakResult]` | Batch remove by ID list |
 | `tweaks_by_ids(ids)` | `→ list[TweakDef]` | Resolve IDs to TweakDef objects (unknown IDs silently skipped) |
 | `tweaks_by_tag(tag)` | `→ list[TweakDef]` | All tweaks carrying the given tag (case-insensitive) |
+| `tweaks_by_scope(scope)` | `→ list[TweakDef]` | All tweaks matching `"user"`, `"machine"`, or `"both"` |
+| `tweaks_above_build(build)` | `→ list[TweakDef]` | Tweaks with `min_build <= build` |
+| `tweak_risk_level(td)` | `→ str` | `"low"`, `"medium"`, or `"high"` risk classification |
+| `tweak_count_by_scope()` | `→ dict[str, int]` | Counts per scope key (`user/machine/both`) |
+| `category_counts()` | `→ dict[str, int]` | Tweak count per category name |
 
 ---
 
@@ -87,11 +92,15 @@ SESSION.set_dword(path, name, value)       # REG_DWORD
 SESSION.set_string(path, name, value)      # REG_SZ
 SESSION.set_binary(path, name, data)       # REG_BINARY
 SESSION.set_qword(path, name, value)       # REG_QWORD (64-bit int)
+SESSION.set_expand_string(path, name, v)   # REG_EXPAND_SZ
+SESSION.set_multi_sz(path, name, values)   # REG_MULTI_SZ (list[str])
 SESSION.set_value(path, name, val, type)   # any type
 SESSION.read_dword(path, name) → int|None
 SESSION.read_string(path, name) → str|None
 SESSION.read_binary(path, name) → bytes|None
 SESSION.read_qword(path, name) → int|None
+SESSION.read_expand_string(path, name) → str|None
+SESSION.read_multi_sz(path, name) → list[str]|None
 SESSION.list_values(path) → list[tuple[str, object, int]]
 SESSION.list_keys(path) → list[str]
 SESSION.key_exists(path) → bool
@@ -136,6 +145,11 @@ python -m regilattice --diff gaming                    # delta vs profile
 python -m regilattice --dry-run --list                 # dry-run mode
 python -m regilattice --search "telemetry"             # search tweaks
 python -m regilattice --search "telemetry" --output json  # search as JSON
+python -m regilattice --list --scope user                  # filter by registry scope
+python -m regilattice --list --scope machine               # machine-scope tweaks only
+python -m regilattice --list --min-build 22621             # Win 11 22H2+ tweaks only
+python -m regilattice --list --corp-safe                   # HKCU-only tweaks
+python -m regilattice --list --needs-admin                 # admin-required tweaks
 python -m regilattice --export-json out.json           # export as JSON
 python -m regilattice --import-json in.json            # import selection
 python -m regilattice --export-reg out.reg             # export registry
@@ -153,6 +167,8 @@ config.force_corp      # bool — bypass corporate check
 config.max_workers     # int — thread pool size
 config.backup_dir      # Path — backup directory
 config.auto_backup     # bool — automatic backups
+config.theme           # str — UI theme ("system" | "mocha" | "latte" | "nord" | "dracula")
+config.locale          # str — UI language tag (default "en")
 ```
 
 ---
@@ -165,8 +181,8 @@ Corporate network detection.
 |----------|-------------|
 | `is_corporate_network()` | `→ bool` — True if corp environment detected |
 | `assert_not_corporate(force=False)` | Raises `CorporateNetworkError` if corp |
-| `corp_guard_status()` | `→ dict` — Detailed detection results |
-
+| `corp_guard_status()` | `→ dict` — Detailed detection results || `corp_guard_reasons()` | `→ list[str]` — Copy of reasons list from last detection |
+| `reset_corp_cache()` | Clear cached detection result (useful in tests/hot-reload) |
 ---
 
 ### `regilattice.elevation`
@@ -190,15 +206,29 @@ Local-only usage analytics (no data sent anywhere).
 |----------|-------------|
 | `record_apply(tweak_id)` | Record a successful apply |
 | `record_remove(tweak_id)` | Record a successful remove |
-| `record_error()` | Record an error |
+| `record_error()` | Record a generic error |
+| `record_error_for(tweak_id)` | Record a per-tweak error (increments both global and per-ID counters) |
 | `record_session()` | Record session start |
 | `get_stats()` | `→ AnalyticsData` |
+| `error_stats()` | `→ dict[str, int]` — per-tweak error counts |
 | `top_tweaks(n=10)` | `→ list[tuple[str, int]]` — most applied |
 | `reset()` | Clear all analytics |
 
----
+### `regilattice.ratings`
+
+Local tweak rating system (1–5 stars + optional notes).
 
-## GUI Modules
+| Function | Description |
+|----------|-----------|
+| `rate_tweak(tweak_id, stars, note="")` | Set rating for a tweak (1–5 stars) |
+| `get_rating(tweak_id)` | `→ RatingEntry \| None` — retrieve stored rating |
+| `all_ratings()` | `→ dict[str, RatingEntry]` — all rated tweaks |
+| `remove_rating(tweak_id)` | Delete rating for a tweak |
+| `top_rated(n=10)` | `→ list[tuple[str, int]]` — highest-rated tweaks |
+| `average_rating()` | `→ float \| None` — mean stars across all rated tweaks |
+| `rated_count()` | `→ int` — number of tweaks that have been rated |
+
+---
 
 | Module | Key Exports |
 |--------|-------------|

tests/test_cli.py

@@ -853,13 +853,12 @@ def test_scope_both_exits_zero(self, capsys: pytest.CaptureFixture[str]) -> None
 
     def test_scope_invalid_rejected(self) -> None:
         """argparse should reject invalid --scope values."""
-        import sys
         with pytest.raises(SystemExit) as exc_info:
             _build_parser().parse_args(["--list", "--scope", "invalid"])
         assert exc_info.value.code != 0
 
     def test_scope_user_json_only_user_tweaks(self, capsys: pytest.CaptureFixture[str]) -> None:
-        from regilattice.tweaks import tweak_scope, all_tweaks
+        from regilattice.tweaks import all_tweaks, tweak_scope
 
         rc = main(["--list", "--scope", "user", "--output", "json"])
         assert rc == 0
@@ -869,7 +868,7 @@ def test_scope_user_json_only_user_tweaks(self, capsys: pytest.CaptureFixture[st
             assert item["id"] in all_user_ids
 
     def test_scope_machine_json_only_machine_tweaks(self, capsys: pytest.CaptureFixture[str]) -> None:
-        from regilattice.tweaks import tweak_scope, all_tweaks
+        from regilattice.tweaks import all_tweaks, tweak_scope
 
         rc = main(["--list", "--scope", "machine", "--output", "json"])
         assert rc == 0

tests/test_registry.py

@@ -632,7 +632,6 @@ def test_read_multi_sz_returns_list_on_match(self, tmp_path: Path) -> None:
 
     @pytest.mark.skipif(not is_windows(), reason="registry requires Windows")
     def test_read_multi_sz_returns_none_on_type_mismatch(self, tmp_path: Path) -> None:
-        import winreg
 
         session = RegistrySession(base_dir=tmp_path)
         fake_key = MagicMock()
@@ -680,7 +679,6 @@ class TestCacheInvalidationExtended:
 
     @pytest.mark.skipif(not is_windows(), reason="registry requires Windows")
     def test_invalidate_clears_binary_cache(self, tmp_path: Path) -> None:
-        import winreg
 
         session = RegistrySession(base_dir=tmp_path)
         path = r"HKEY_CURRENT_USER\Software\InvalTest"
@@ -700,7 +698,6 @@ def test_invalidate_clears_binary_cache(self, tmp_path: Path) -> None:
 
     @pytest.mark.skipif(not is_windows(), reason="registry requires Windows")
     def test_invalidate_clears_qword_cache(self, tmp_path: Path) -> None:
-        import winreg
 
         session = RegistrySession(base_dir=tmp_path)
         path = r"HKEY_CURRENT_USER\Software\InvalTest"

tests/test_tweaks_init.py

@@ -36,10 +36,10 @@
     save_snapshot,
     search_tweaks,
     status_map,
+    tweak_count_by_scope,
     tweak_risk_level,
     tweak_scope,
     tweak_status,
-    tweak_count_by_scope,
     tweaks_above_build,
     tweaks_by_category,
     tweaks_by_scope,
@@ -1532,7 +1532,10 @@ def test_parallel_detect_free_gets_unknown(self) -> None:
 
     def test_progress_fn_called_for_detect_free_parallel(self) -> None:
         calls: list[tuple[int, int]] = []
-        no_detect = TweakDef(id="__sm_prog_nd__", label="T", category="C", apply_fn=MagicMock(), remove_fn=MagicMock(), corp_safe=True, detect_fn=None)
+        no_detect = TweakDef(
+            id="__sm_prog_nd__", label="T", category="C",
+            apply_fn=MagicMock(), remove_fn=MagicMock(), corp_safe=True, detect_fn=None,
+        )
         with (
             patch("regilattice.tweaks._TWEAK_INDEX", {"__sm_prog_nd__": no_detect}),
             patch("regilattice.tweaks._ALL_TWEAKS", [no_detect]),
@@ -1543,7 +1546,10 @@ def test_progress_fn_called_for_detect_free_parallel(self) -> None:
 
     def test_detect_fn_present_executed_sequentially(self) -> None:
         detect_fn = MagicMock(return_value=True)
-        with_detect = TweakDef(id="__sm_seq_det__", label="T", category="C", apply_fn=MagicMock(), remove_fn=MagicMock(), corp_safe=True, detect_fn=detect_fn)
+        with_detect = TweakDef(
+            id="__sm_seq_det__", label="T", category="C",
+            apply_fn=MagicMock(), remove_fn=MagicMock(), corp_safe=True, detect_fn=detect_fn,
+        )
         with (
             patch("regilattice.tweaks._TWEAK_INDEX", {"__sm_seq_det__": with_detect}),
             patch("regilattice.tweaks._ALL_TWEAKS", [with_detect]),
@@ -1554,8 +1560,14 @@ def test_detect_fn_present_executed_sequentially(self) -> None:
 
     def test_mixed_sequential_detect_and_no_detect(self) -> None:
         detect_fn = MagicMock(return_value=False)
-        td_with = TweakDef(id="__sm_mix_det__", label="W", category="C", apply_fn=MagicMock(), remove_fn=MagicMock(), corp_safe=True, detect_fn=detect_fn)
-        td_without = TweakDef(id="__sm_mix_nd__", label="X", category="C", apply_fn=MagicMock(), remove_fn=MagicMock(), corp_safe=True, detect_fn=None)
+        td_with = TweakDef(
+            id="__sm_mix_det__", label="W", category="C",
+            apply_fn=MagicMock(), remove_fn=MagicMock(), corp_safe=True, detect_fn=detect_fn,
+        )
+        td_without = TweakDef(
+            id="__sm_mix_nd__", label="X", category="C",
+            apply_fn=MagicMock(), remove_fn=MagicMock(), corp_safe=True, detect_fn=None,
+        )
         index = {"__sm_mix_det__": td_with, "__sm_mix_nd__": td_without}
         with (
             patch("regilattice.tweaks._TWEAK_INDEX", index),