fix: escape dollar sequences in render replacement

Author: bug3

src/renderer.ts

@@ -4,7 +4,7 @@ export function render(template: string, values: Record<string, string>): string
     for (const [key, value] of Object.entries(values)) {
         const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
         const pattern = new RegExp(`\\{\\{${escaped}\\}\\}`, 'g');
-        result = result.replace(pattern, value);
+        result = result.replace(pattern, () => value);
     }
 
     return result;

tests/renderer.test.ts

@@ -29,4 +29,10 @@ describe('render', () => {
         const result = render('SELECT * FROM {{table}}', { table: '' });
         expect(result).toBe('SELECT * FROM ');
     });
+
+    it('treats $ sequences in values as literals', () => {
+        const template = "SELECT * FROM t WHERE a = '{{a}}' AND b = '{{b}}' AND c = '{{c}}'";
+        const result = render(template, { a: '$&', b: '$$', c: "$'" });
+        expect(result).toBe("SELECT * FROM t WHERE a = '$&' AND b = '$$' AND c = '$''");
+    });
 });