Insert CSV file reference and return the generated csv_id

Authenticate to Salesforce using either JWT or OAuth2 client credentials Automatically detects which method to use based on configuration

OAuth2 Client Credentials Flow authentication (legacy/fallback method)

JWT Bearer Token Flow authentication Used for server-to-server integration (same as sf cli JWT auth)

Mark a file as started (before download begins) This reserves the slot in the sliding window @param recordId ContentVersion Id @param systemModstamp

Parse ContentVersion CSV file into list of records

Preload checksum cache from PostgreSQL database. This enables instant deduplication for incremental backups without S3 HEAD requests. Cache is populat

Compute, without mutating anything, what a cleanup with the given window would remove.

Process a downloaded CSV file to storage (S3 and PostgreSQL). This method handles the storage operations separately from downloading, allowing for pip

Read RSA private key from PEM file Supports both PKCS#1 and PKCS#8 formats

Fetch a specific record from a CSV file stored in S3 Downloads the CSV and parses it to find the matching record @param s3Key The S3 key of the CSV f

Determines if a COUNT() query should be run before a Bulk API job. Uses adaptive logic based on historical backup patterns. @param backup The Heimdal

Upload ContentVersion file to S3 using checksum-based key (streaming, no temp file) Enables content-addressable storage for true deduplication @param

Append connect/socket timeouts to the JDBC URL so a stalled or unresponsive RDS can never hang a thread indefinitely. socketTimeout bounds each query'

Create a progress tracker @param runId Database run ID for this backup run @param checkpointInterval How often to persist checkpoint (every N complet