Remote Queries Agent-backed execution POC

[nubtron]

Summary

Prototype / proof-of-concept work for agent-backed Remote Queries execution.

This branch explores the Agent-side bridge and local PAR proof flow for Remote Queries, including Postgres matching/execution, AgentSecure RPC wiring, stream event handling, and local proof scripts/tests.

Notes

• Draft PR for review/discussion only.
• The branch was rewritten locally before publishing so both author and committer dates on the PoC commits are 2026-05-21.
• Backup branch kept locally: nubtron/remote-queries-poc-backup-20260521.

Verification

Not run as part of PR creation.

[dd-octo-sts]

Go Package Import Differences

Baseline: 73a8f5b
Comparison: 9f8e041

binary	os	arch	change
agent	linux	amd64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
agent	linux	arm64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
agent	windows	amd64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
agent	darwin	amd64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
agent	darwin	arm64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
agent	aix	ppc64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
iot-agent	linux	amd64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
iot-agent	linux	arm64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
heroku-agent	linux	amd64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
privateactionrunner	linux	amd64	+1, -0 +github.com/DataDog/datadog-agent/pkg/privateactionrunner/bundles/remoteaction/queries
privateactionrunner	linux	arm64	+1, -0 +github.com/DataDog/datadog-agent/pkg/privateactionrunner/bundles/remoteaction/queries
privateactionrunner	windows	amd64	+1, -0 +github.com/DataDog/datadog-agent/pkg/privateactionrunner/bundles/remoteaction/queries
privateactionrunner	darwin	amd64	+1, -0 +github.com/DataDog/datadog-agent/pkg/privateactionrunner/bundles/remoteaction/queries
privateactionrunner	darwin	arm64	+1, -0 +github.com/DataDog/datadog-agent/pkg/privateactionrunner/bundles/remoteaction/queries

[dd-octo-sts]

Static quality checks

✅ Please find below the results from static quality gates
Comparison made with ancestor 73a8f5b
📊 Static Quality Gates Dashboard
🔗 SQG Job

Successful checks

Info

	Quality gate	Change	Size (prev → curr → max)
✅	agent_deb_amd64	+505.78 KiB (0.06% increase, -11.19% of buffer)	760.085 → 760.579 → 764.500
✅	agent_deb_amd64_fips	+351.53 KiB (0.05% increase, -12.27% of buffer)	712.942 → 713.285 → 715.740
✅	agent_heroku_amd64	+194.68 KiB (0.06% increase, -2.87% of buffer)	312.424 → 312.614 → 319.050
✅	agent_msi	+568.34 KiB (0.09% increase, -3.18% of buffer)	643.513 → 644.068 → 660.960
✅	agent_rpm_amd64	+505.78 KiB (0.06% increase, -11.22% of buffer)	760.069 → 760.563 → 764.470
✅	agent_rpm_amd64_fips	+351.53 KiB (0.05% increase, -12.20% of buffer)	712.925 → 713.269 → 715.740
✅	agent_rpm_arm64	+527.21 KiB (0.07% increase, -90.04% of buffer)	735.968 → 736.483 → 736.540
✅	agent_rpm_arm64_fips	+328.86 KiB (0.05% increase, -20.92% of buffer)	692.155 → 692.476 → 693.690
✅	agent_suse_amd64	+505.78 KiB (0.06% increase, -11.22% of buffer)	760.069 → 760.563 → 764.470
✅	agent_suse_amd64_fips	+351.53 KiB (0.05% increase, -12.20% of buffer)	712.925 → 713.269 → 715.740
✅	agent_suse_arm64	+527.21 KiB (0.07% increase, -90.04% of buffer)	735.968 → 736.483 → 736.540
✅	agent_suse_arm64_fips	+328.86 KiB (0.05% increase, -20.92% of buffer)	692.155 → 692.476 → 693.690
✅	docker_agent_amd64	+473.48 KiB (0.06% increase, -34.52% of buffer)	818.701 → 819.163 → 820.040
✅	docker_agent_arm64	+462.9 KiB (0.06% increase, -41.23% of buffer)	819.644 → 820.096 → 820.740
✅	docker_agent_jmx_amd64	+473.47 KiB (0.05% increase, -38.47% of buffer)	1009.598 → 1010.060 → 1010.800
✅	docker_agent_jmx_arm64	+462.9 KiB (0.05% increase, -36.86% of buffer)	999.194 → 999.646 → 1000.420
✅	docker_cluster_agent_amd64	+40.42 KiB (0.02% increase, -4.78% of buffer)	210.475 → 210.514 → 211.300
✅	docker_cluster_agent_arm64	+64.44 KiB (0.03% increase, -17.76% of buffer)	223.456 → 223.519 → 223.810
✅	docker_dogstatsd_amd64	+28.31 KiB (0.07% increase, -5.79% of buffer)	39.482 → 39.510 → 39.960
✅	docker_dogstatsd_arm64	+64.31 KiB (0.17% increase, -8.85% of buffer)	37.560 → 37.623 → 38.270
✅	docker_host_profiler_amd64	+95.73 KiB (0.03% increase, -0.79% of buffer)	305.814 → 305.908 → 317.690
✅	docker_host_profiler_arm64	+95.42 KiB (0.03% increase, -0.79% of buffer)	317.125 → 317.218 → 328.970
✅	dogstatsd_deb_amd64	+28.31 KiB (0.09% increase, -2.83% of buffer)	30.224 → 30.251 → 31.200
✅	dogstatsd_deb_arm64	+32.31 KiB (0.11% increase, -2.37% of buffer)	28.247 → 28.279 → 29.580
✅	dogstatsd_rpm_amd64	+28.31 KiB (0.09% increase, -2.83% of buffer)	30.224 → 30.251 → 31.200
✅	dogstatsd_suse_amd64	+28.31 KiB (0.09% increase, -2.83% of buffer)	30.224 → 30.251 → 31.200
✅	iot_agent_deb_amd64	+313.06 KiB (0.66% increase, -28.77% of buffer)	46.467 → 46.773 → 47.530
✅	iot_agent_deb_arm64	+269.0 KiB (0.61% increase, -24.40% of buffer)	43.124 → 43.386 → 44.200
✅	iot_agent_deb_armhf	+284.59 KiB (0.63% increase, -25.65% of buffer)	43.907 → 44.184 → 44.990
✅	iot_agent_rpm_amd64	+313.06 KiB (0.66% increase, -28.78% of buffer)	46.468 → 46.774 → 47.530
✅	iot_agent_suse_amd64	+313.06 KiB (0.66% increase, -28.75% of buffer)	46.467 → 46.772 → 47.530

2 successful checks with minimal change (< 2 KiB)

	Quality gate	Current Size
✅	docker_cws_instrumentation_amd64	7.439 MiB
✅	docker_cws_instrumentation_arm64	6.877 MiB

[dd-octo-sts]

This pull request has been automatically marked as stale because it has not had activity in the past 15 days.

It will be closed in 30 days if no further activity occurs. If this pull request is still relevant, adding a comment or pushing new commits will keep it open. Also, you can always reopen the pull request if you missed the window.

Thank you for your contributions!