import { describe, expect, it } from 'vitest'
import { renderTemplate } from '../src/services/sequences/render'

describe('renderTemplate', () => {
  it('escapes untrusted contact values', () => {
    const html = renderTemplate('Hi {{firstName}}', {
      firstName: '<b>Ada</b>',
      lastName: '',
      email: 'ada@example.com',
      tenantName: 'Zync',
      tenantSlug: 'zync',
    })

    expect(html).toBe('Hi &lt;b&gt;Ada&lt;/b&gt;')
  })

  it('renders missing vars as empty strings', () => {
    const html = renderTemplate('Hi {{unknown}}', {
      firstName: 'Ada',
      lastName: '',
      email: 'ada@example.com',
      tenantName: 'Zync',
      tenantSlug: 'zync',
    })

    expect(html).toBe('Hi ')
  })
})