Query registry¶

DEX Board uses a named query registry — no raw SQL is constructed in the browser. All 88 queries are defined server-side with parameterised inputs and validation.

How it works¶

Browser → POST /api/query { query: "health.summary", params: { timeRange: "24" } }
       → Worker validates params against query definition
       → Worker builds parameterised SQL with ClickHouse placeholders
       → ClickHouse executes query
       → Worker returns { data: [...], meta: { rows, duration_ms } }

Query domains¶

Inspecting queries¶

List all registered queries:

curl https://your-worker.workers.dev/api/queries

Inspect a specific query:

curl https://your-worker.workers.dev/api/queries/health.summary

Parameter types¶

Filter injection¶

Queries use template macros that the Worker replaces at execution time:

• {{FILTERS}} — Device filters (OS, model, search, encryption)
• {{TIME_FILTER}} — Time range constraint
• {{LIMIT}} — Row limit

All user input enters via ClickHouse {name:Type} parameterised placeholders — never string interpolation.