Remote Queries Agent-backed execution POC

[nubtron]

Summary

Prototype / proof-of-concept work for agent-backed Remote Queries execution.

This branch explores the Agent-side bridge and local PAR proof flow for Remote Queries, including Postgres matching/execution, AgentSecure RPC wiring, stream event handling, and local proof scripts/tests.

Notes

• Draft PR for review/discussion only.
• The branch was rewritten locally before publishing so both author and committer dates on the PoC commits are 2026-05-21.
• Backup branch kept locally: nubtron/remote-queries-poc-backup-20260521.

Verification

Not run as part of PR creation.

[dd-octo-sts]

Go Package Import Differences

Baseline: 32a46bb
Comparison: 0081379

binary	os	arch	change
agent	linux	amd64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
agent	linux	arm64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
agent	windows	amd64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
agent	darwin	amd64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
agent	darwin	arm64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
agent	aix	ppc64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
iot-agent	linux	amd64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
iot-agent	linux	arm64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
heroku-agent	linux	amd64	+2, -0 +github.com/DataDog/datadog-agent/comp/remotequeries/fx +github.com/DataDog/datadog-agent/comp/remotequeries/impl
cluster-agent	linux	amd64	+1, -0 +github.com/DataDog/datadog-agent/pkg/privateactionrunner/bundles/remotequeries
cluster-agent	linux	arm64	+1, -0 +github.com/DataDog/datadog-agent/pkg/privateactionrunner/bundles/remotequeries
privateactionrunner	linux	amd64	+1, -0 +github.com/DataDog/datadog-agent/pkg/privateactionrunner/bundles/remotequeries
privateactionrunner	linux	arm64	+1, -0 +github.com/DataDog/datadog-agent/pkg/privateactionrunner/bundles/remotequeries
privateactionrunner	windows	amd64	+1, -0 +github.com/DataDog/datadog-agent/pkg/privateactionrunner/bundles/remotequeries
privateactionrunner	darwin	amd64	+1, -0 +github.com/DataDog/datadog-agent/pkg/privateactionrunner/bundles/remotequeries
privateactionrunner	darwin	arm64	+1, -0 +github.com/DataDog/datadog-agent/pkg/privateactionrunner/bundles/remotequeries

[dd-octo-sts]

Static quality checks

✅ Please find below the results from static quality gates
Comparison made with ancestor 32a46bb
📊 Static Quality Gates Dashboard
🔗 SQG Job
SOME SIZE DELTAS ARE N/A (ANCESTOR METRICS NOT YET AVAILABLE). RETRY JOB

Successful checks

Info

	Quality gate	Change	Size (prev → curr → max)
✅	agent_deb_amd64	N/A	N/A → 739.472 → 750.310
✅	agent_deb_amd64_fips	N/A	N/A → 697.756 → 702.690
✅	agent_heroku_amd64	N/A	N/A → 309.278 → 313.960
✅	agent_msi	N/A	N/A → 604.695 → 620.770
✅	agent_rpm_amd64	N/A	N/A → 739.456 → 750.280
✅	agent_rpm_amd64_fips	N/A	N/A → 697.740 → 702.670
✅	agent_rpm_arm64	N/A	N/A → 717.572 → 724.050
✅	agent_rpm_arm64_fips	N/A	N/A → 678.849 → 684.460
✅	agent_suse_amd64	N/A	N/A → 739.456 → 750.280
✅	agent_suse_amd64_fips	N/A	N/A → 697.740 → 702.670
✅	agent_suse_arm64	N/A	N/A → 717.572 → 724.050
✅	agent_suse_arm64_fips	N/A	N/A → 678.849 → 684.460
✅	docker_agent_amd64	N/A	N/A → 799.909 → 805.870
✅	docker_agent_arm64	N/A	N/A → 802.799 → 809.730
✅	docker_agent_jmx_amd64	N/A	N/A → 990.829 → 996.590
✅	docker_agent_jmx_arm64	N/A	N/A → 982.498 → 989.410
✅	docker_cluster_agent_amd64	N/A	N/A → 206.350 → 207.600
✅	docker_cluster_agent_arm64	N/A	N/A → 220.448 → 221.150
✅	docker_cws_instrumentation_amd64	N/A	N/A → 7.142 → 7.180
✅	docker_cws_instrumentation_arm64	N/A	N/A → 6.689 → 6.920
✅	docker_dogstatsd_amd64	N/A	N/A → 39.374 → 39.540
✅	docker_dogstatsd_arm64	N/A	N/A → 37.565 → 38.080
✅	dogstatsd_deb_amd64	N/A	N/A → 30.028 → 30.770
✅	dogstatsd_deb_arm64	N/A	N/A → 28.173 → 29.270
✅	dogstatsd_rpm_amd64	N/A	N/A → 30.028 → 30.770
✅	dogstatsd_suse_amd64	N/A	N/A → 30.028 → 30.770
✅	iot_agent_deb_amd64	N/A	N/A → 44.537 → 44.970
✅	iot_agent_deb_arm64	N/A	N/A → 41.518 → 42.560
✅	iot_agent_deb_armhf	N/A	N/A → 42.258 → 42.740
✅	iot_agent_rpm_amd64	N/A	N/A → 44.538 → 44.970
✅	iot_agent_suse_amd64	N/A	N/A → 44.538 → 44.970

On-wire sizes (compressed)

	Quality gate	Change	Size (prev → curr → max)
✅	agent_deb_amd64	N/A	N/A → 174.996 → 179.160
✅	agent_deb_amd64_fips	N/A	N/A → 166.788 → 174.440
✅	agent_heroku_amd64	N/A	N/A → 74.947 → 80.310
✅	agent_msi	N/A	N/A → 139.371 → 147.550
✅	agent_rpm_amd64	N/A	N/A → 177.064 → 182.080
✅	agent_rpm_amd64_fips	N/A	N/A → 168.146 → 174.140
✅	agent_rpm_arm64	N/A	N/A → 159.170 → 163.610
✅	agent_rpm_arm64_fips	N/A	N/A → 151.539 → 156.850
✅	agent_suse_amd64	N/A	N/A → 177.064 → 182.080
✅	agent_suse_amd64_fips	N/A	N/A → 168.146 → 174.140
✅	agent_suse_arm64	N/A	N/A → 159.170 → 163.610
✅	agent_suse_arm64_fips	N/A	N/A → 151.539 → 156.850
✅	docker_agent_amd64	N/A	N/A → 267.254 → 272.990
✅	docker_agent_arm64	N/A	N/A → 254.257 → 261.470
✅	docker_agent_jmx_amd64	N/A	N/A → 335.905 → 341.610
✅	docker_agent_jmx_arm64	N/A	N/A → 318.894 → 326.050
✅	docker_cluster_agent_amd64	N/A	N/A → 72.305 → 73.460
✅	docker_cluster_agent_arm64	N/A	N/A → 67.779 → 68.680
✅	docker_cws_instrumentation_amd64	N/A	N/A → 2.999 → 3.330
✅	docker_cws_instrumentation_arm64	N/A	N/A → 2.729 → 3.090
✅	docker_dogstatsd_amd64	N/A	N/A → 15.235 → 15.870
✅	docker_dogstatsd_arm64	N/A	N/A → 14.550 → 14.890
✅	dogstatsd_deb_amd64	N/A	N/A → 7.939 → 8.830
✅	dogstatsd_deb_arm64	N/A	N/A → 6.822 → 7.750
✅	dogstatsd_rpm_amd64	N/A	N/A → 7.951 → 8.840
✅	dogstatsd_suse_amd64	N/A	N/A → 7.951 → 8.840
✅	iot_agent_deb_amd64	N/A	N/A → 11.713 → 13.210
✅	iot_agent_deb_arm64	N/A	N/A → 10.017 → 11.620
✅	iot_agent_deb_armhf	N/A	N/A → 10.220 → 11.780
✅	iot_agent_rpm_amd64	N/A	N/A → 11.730 → 13.230
✅	iot_agent_suse_amd64	N/A	N/A → 11.730 → 13.230