GRM-45: fix: generate self-contained SVG badges instead of shields.io JSON

shields.io can't fetch JSON from our self-hosted Gitea instance (not
publicly reachable), so badges showed "unknown". Switched to generating
self-contained SVG badge files that are served directly by Gitea's raw
file API — no external service needed.

Changes:
- generate_badges.py: Added render_svg() to produce shields.io-style
  SVG badges with gradient, rounded corners, and Verdana font
- Replaced xml.sax.saxutils.escape with a simple _xml_escape() to
  avoid bandit B406 warning (no defusedxml dependency needed)
- CI workflow: Push .svg files instead of .json to badges branch
- README.md and docs/index.md: Updated badge URLs to use raw SVG
  from the badges branch instead of shields.io endpoint

Also fixed:
- Coverage regex now handles 100% without decimal (was 100.00%)
- doc_coverage.py: Removed redundant % in pct variable that caused
  double-percent (100%%) in output

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

.gitea/workflows/ci.yml

@@ -202,6 +202,6 @@ jobs:
           git checkout --orphan badges
           git rm -rf .
           cp -r .badges/* .
-          git add *.json
+          git add *.svg
           git commit --no-verify -m "Update badges [skip ci]"
           git push origin badges --force

README.md

@@ -8,12 +8,12 @@ Each runner runs in an isolated **rootless Docker** environment under a dedicate
 
 [![CI](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions/workflows/ci.yml/badge.svg)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
 [![License: GPL-3.0](https://img.shields.io/badge/license-GPL--3.0-blue)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/src/branch/master/LICENSE)
-[![Coverage](https://img.shields.io/endpoint?url=https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/coverage.json)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
+[![Coverage](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/coverage.svg)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
-[![Tests](https://img.shields.io/endpoint?url=https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/tests.json)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
+[![Tests](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/tests.svg)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
-[![Docs](https://img.shields.io/endpoint?url=https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/docs.json)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/wiki)
+[![Docs](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/docs.svg)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/wiki)
-[![Code Quality](https://img.shields.io/endpoint?url=https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/quality.json)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
+[![Code Quality](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/quality.svg)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
-[![Version](https://img.shields.io/endpoint?url=https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/version.json)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/releases)
+[![Version](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/version.svg)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/releases)
-[![Python](https://img.shields.io/endpoint?url=https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/python.json)](https://www.python.org/downloads/)
+[![Python](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/python.svg)](https://www.python.org/downloads/)
 
 ## Quick Start
 

docs/index.md

@@ -5,11 +5,11 @@ A lean command-line tool to automate the installation, configuration, and lifecy
 > **Pronunciation:** GRM is short for *Gitea Runner Manager*, but say it like **ГРЪМ** (roughly "GRUM") — the Bulgarian word for **thunder**. An open-source project from **Oblachno** (облачно means *cloudy* in Bulgarian).
 
 [![CI](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions/workflows/ci.yml/badge.svg)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
-[![Coverage](https://img.shields.io/endpoint?url=https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/coverage.json)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
+[![Coverage](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/coverage.svg)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
-[![Tests](https://img.shields.io/endpoint?url=https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/tests.json)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
+[![Tests](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/tests.svg)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
-[![Docs](https://img.shields.io/endpoint?url=https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/docs.json)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/wiki)
+[![Docs](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/docs.svg)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/wiki)
-[![Code Quality](https://img.shields.io/endpoint?url=https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/quality.json)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
+[![Code Quality](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/quality.svg)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/actions)
-[![Version](https://img.shields.io/endpoint?url=https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/version.json)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/releases)
+[![Version](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/raw/branch/badges/version.svg)](https://git.oblachno.oblachno.fyi/oblachno-oss/grm/releases)
 
 ## User Documentation
 

scripts/generate_badges.py

@@ -1,15 +1,9 @@
 #!/usr/bin/env python3
-"""Generate shields.io endpoint badge JSON files from project metrics.
+"""Generate self-contained SVG badge files from project metrics.
 
 Runs pytest-cov, doc-coverage, lint checks, and version extraction,
-then writes JSON files in the shields.io endpoint format:
+then writes SVG badge files that can be served as static files from
-
+the Gitea raw file API.
-    {
-        "schemaVersion": 1,
-        "label": "coverage",
-        "message": "100%",
-        "color": "brightgreen"
-    }
 
 Usage:
     python3 scripts/generate_badges.py --output-dir .badges/
@@ -17,7 +11,6 @@ Usage:
 
 from __future__ import annotations
 
-import json
 import re
 import subprocess  # nosec B404
 from pathlib import Path
@@ -31,17 +24,24 @@ _COVERAGE_RE = re.compile(r"TOTAL.*?(\d+(?:\.\d+)?)%")
 _PASSED_RE = re.compile(r"(\d+) passed")
 _DOC_COVERAGE_RE = re.compile(r"Doc coverage:\s+\d+/\d+\s+\((\d+)%")
 
-
+# shields.io color names to hex values
-def make_badge(label: str, message: str, color: str) -> dict[str, str | int]:
+COLOR_HEX: dict[str, str] = {
-    """Build a shields.io endpoint badge dict."""
+    "brightgreen": "#4c1",
-    return {
+    "green": "#97ca00",
-        "schemaVersion": 1,
+    "yellowgreen": "#a4a61d",
-        "label": label,
+    "yellow": "#dfb317",
-        "message": message,
+    "orange": "#fe7d37",
-        "color": color,
+    "red": "#e05d44",
+    "blue": "#007ec6",
+    "lightgrey": "#9f9f9f",
 }
 
 
+def _xml_escape(text: str) -> str:
+    """Escape XML special characters."""
+    return text.replace("&", "&amp;").replace("<", "&lt;").replace(">", "&gt;").replace('"', "&quot;")
+
+
 def run_command(cmd: list[str]) -> tuple[int, str, str]:
     """Run a command and return (returncode, stdout, stderr)."""
     result = subprocess.run(  # nosec B603
@@ -54,6 +54,50 @@ def run_command(cmd: list[str]) -> tuple[int, str, str]:
     return result.returncode, result.stdout, result.stderr
 
 
+def make_badge(label: str, message: str, color: str) -> dict[str, str | int]:
+    """Build a badge data dict."""
+    return {
+        "schemaVersion": 1,
+        "label": label,
+        "message": message,
+        "color": color,
+    }
+
+
+def render_svg(label: str, message: str, color: str) -> str:
+    """Render a shields.io-style SVG badge."""
+    color_hex = COLOR_HEX.get(color, color if color.startswith("#") else "#9f9f9f")
+
+    # Approximate text width: 7px per character + 10px padding
+    label_text = _xml_escape(label)
+    message_text = _xml_escape(message)
+    label_w = max(len(label) * 7 + 10, 30)
+    message_w = max(len(message) * 7 + 10, 30)
+    total_w = label_w + message_w
+
+    return f'''<svg xmlns="http://www.w3.org/2000/svg" width="{total_w}" height="20" role="img"
+  aria-label="{label_text}: {message_text}">
+  <title>{label_text}: {message_text}</title>
+  <linearGradient id="s" x2="0" y2="100%">
+    <stop offset="0" stop-color="#fff" stop-opacity=".7"/>
+    <stop offset=".1" stop-color="#bbb" stop-opacity=".1"/>
+    <stop offset=".9" stop-color="#000" stop-opacity=".3"/>
+    <stop offset="1" stop-color="#bbb" stop-opacity=".1"/>
+  </linearGradient>
+  <clipPath id="r"><rect width="{total_w}" height="20" rx="3" fill="#fff"/></clipPath>
+  <g clip-path="url(#r)">
+    <rect width="{label_w}" height="20" fill="#555"/>
+    <rect x="{label_w}" width="{message_w}" height="20" fill="{color_hex}"/>
+    <rect width="{total_w}" height="20" fill="url(#s)"/>
+  </g>
+  <g fill="#fff" text-anchor="middle" font-family="Verdana,DejaVu Sans,sans-serif" font-size="11">
+    <text x="{label_w // 2}" y="14">{label_text}</text>
+    <text x="{label_w + message_w // 2}" y="14">{message_text}</text>
+  </g>
+</svg>
+'''
+
+
 def extract_coverage(output: str) -> float | None:
     """Extract total coverage percentage from pytest-cov output."""
     for line in output.splitlines():
@@ -118,7 +162,7 @@ def doc_coverage_color(pct: int) -> str:
 
 
 def generate_badges(output_dir: Path) -> dict[str, dict[str, str | int]]:
-    """Generate all badge JSON files and return them as a dict."""
+    """Generate all badge SVG files and return badge data as a dict."""
     badges: dict[str, dict[str, str | int]] = {}
 
     # 1. Code coverage + test count (single pytest-cov run)
@@ -176,11 +220,12 @@ def generate_badges(output_dir: Path) -> dict[str, dict[str, str | int]]:
     # 5. Python version (static but nice)
     badges["python"] = make_badge("python", "3.12", "blue")
 
-    # Write JSON files
+    # Write SVG files
     output_dir.mkdir(parents=True, exist_ok=True)
     for name, badge in badges.items():
-        path = output_dir / f"{name}.json"
+        svg = render_svg(str(badge["label"]), str(badge["message"]), str(badge["color"]))
-        path.write_text(json.dumps(badge, indent=2) + "\n")
+        path = output_dir / f"{name}.svg"
+        path.write_text(svg)
         click.echo(f"  Generated: {path}")
 
     return badges
@@ -190,10 +235,10 @@ def generate_badges(output_dir: Path) -> dict[str, dict[str, str | int]]:
 @click.option(
     "--output-dir",
     default=str(REPO_ROOT / ".badges"),
-    help="Directory to write badge JSON files.",
+    help="Directory to write badge SVG files.",
 )
 def cli(output_dir: str) -> None:
-    """Generate shields.io endpoint badge JSON files."""
+    """Generate self-contained SVG badge files from project metrics."""
     out = Path(output_dir)
     click.echo(f"Generating badges in {out}...")
     badges = generate_badges(out)

tests/unit/test_generate_badges.py

@@ -1,12 +1,12 @@
 """Unit tests for scripts/generate_badges.py."""
 
-import json
 from pathlib import Path
 from unittest.mock import MagicMock, patch
 
 from click.testing import CliRunner
 
 from scripts.generate_badges import (
+    COLOR_HEX,
     cli,
     coverage_color,
     doc_coverage_color,
@@ -16,6 +16,7 @@ from scripts.generate_badges import (
     generate_badges,
     make_badge,
     read_version,
+    render_svg,
     run_command,
 )
 
@@ -42,6 +43,38 @@ class TestMakeBadge:
         }
 
 
+class TestRenderSvg:
+    def test_generates_valid_svg(self) -> None:
+        svg = render_svg("coverage", "100%", "brightgreen")
+        assert svg.startswith("<svg")
+        assert svg.endswith("</svg>\n")
+        assert "coverage" in svg
+        assert "100%" in svg
+        assert COLOR_HEX["brightgreen"] in svg
+
+    def test_uses_color_hex_for_known_colors(self) -> None:
+        svg = render_svg("tests", "573 passing", "brightgreen")
+        assert "#4c1" in svg
+
+    def test_uses_hex_directly_for_unknown_hex_color(self) -> None:
+        svg = render_svg("label", "msg", "#abc123")
+        assert "#abc123" in svg
+
+    def test_uses_lightgrey_for_unknown_named_color(self) -> None:
+        svg = render_svg("label", "msg", "nonexistent")
+        assert "#9f9f9f" in svg
+
+    def test_escapes_xml_special_chars(self) -> None:
+        svg = render_svg("label", "<script>", "red")
+        assert "<script>" not in svg
+        assert "&lt;script&gt;" in svg
+
+    def test_has_correct_dimensions(self) -> None:
+        svg = render_svg("coverage", "100%", "brightgreen")
+        assert 'width="' in svg
+        assert 'height="20"' in svg
+
+
 class TestExtractCoverage:
     def test_extracts_from_total_line(self) -> None:
         output = (
@@ -54,6 +87,10 @@ class TestExtractCoverage:
         output = "TOTAL                                          100     20   80.00%\n"
         assert extract_coverage(output) == 80.0
 
+    def test_extracts_without_decimal(self) -> None:
+        output = "TOTAL                                         1900      0   100%\n"
+        assert extract_coverage(output) == 100.0
+
     def test_returns_none_when_no_match(self) -> None:
         assert extract_coverage("no coverage here") is None
 
@@ -135,7 +172,7 @@ class TestGenerateBadges:
     @patch("scripts.generate_badges.run_command")
     @patch("scripts.generate_badges.read_version", return_value="0.5.0")
     @patch("scripts.generate_badges.extract_coverage", return_value=100.0)
-    @patch("scripts.generate_badges.extract_test_count", return_value=543)
+    @patch("scripts.generate_badges.extract_test_count", return_value=573)
     @patch("scripts.generate_badges.extract_doc_coverage", return_value=100)
     def test_generates_all_badge_files(
         self,
@@ -146,28 +183,24 @@ class TestGenerateBadges:
         mock_run: MagicMock,
         tmp_path: Path,
     ) -> None:
-        # run_command is called for pytest, doc_coverage, ruff, ruff format, pyright, bandit
         mock_run.return_value = (0, "output", "")
         badges = generate_badges(tmp_path)
 
-        # Verify all expected badges are generated
         expected = {"coverage", "tests", "docs", "quality", "version", "python"}
         assert set(badges.keys()) == expected
 
-        # Verify JSON files were written
+        # Verify SVG files were written
         for name in expected:
-            json_file = tmp_path / f"{name}.json"
+            svg_file = tmp_path / f"{name}.svg"
-            assert json_file.exists()
+            assert svg_file.exists()
-            data = json.loads(json_file.read_text())
+            content = svg_file.read_text()
-            assert data["schemaVersion"] == 1
+            assert content.startswith("<svg")
-            assert "label" in data
+            assert "</svg>" in content
-            assert "message" in data
-            assert "color" in data
 
     @patch("scripts.generate_badges.run_command")
     @patch("scripts.generate_badges.read_version", return_value="0.5.0")
     @patch("scripts.generate_badges.extract_coverage", return_value=100.0)
-    @patch("scripts.generate_badges.extract_test_count", return_value=543)
+    @patch("scripts.generate_badges.extract_test_count", return_value=573)
     @patch("scripts.generate_badges.extract_doc_coverage", return_value=100)
     def test_quality_badge_pass_when_all_lint_passes(
         self,
@@ -186,7 +219,7 @@ class TestGenerateBadges:
     @patch("scripts.generate_badges.run_command")
     @patch("scripts.generate_badges.read_version", return_value="0.5.0")
     @patch("scripts.generate_badges.extract_coverage", return_value=100.0)
-    @patch("scripts.generate_badges.extract_test_count", return_value=543)
+    @patch("scripts.generate_badges.extract_test_count", return_value=573)
     @patch("scripts.generate_badges.extract_doc_coverage", return_value=100)
     def test_quality_badge_fails_when_lint_fails(
         self,
@@ -197,8 +230,6 @@ class TestGenerateBadges:
         mock_run: MagicMock,
         tmp_path: Path,
     ) -> None:
-        # First call (pytest) succeeds, second (doc_coverage) succeeds,
-        # third (ruff check) fails
         mock_run.side_effect = [
             (0, "output", ""),
             (0, "output", ""),
@@ -240,7 +271,7 @@ class TestCli:
     def test_cli_generates_badges(self, mock_gen: MagicMock, tmp_path: Path) -> None:
         mock_gen.return_value = {
             "coverage": make_badge("coverage", "100%", "brightgreen"),
-            "tests": make_badge("tests", "543 passing", "brightgreen"),
+            "tests": make_badge("tests", "573 passing", "brightgreen"),
         }
         runner = CliRunner()
         result = runner.invoke(cli, ["--output-dir", str(tmp_path)])