NPSP, Nebula, FSL, Vlocity — code you can't read, can't step into and can't run without an org. nimbus record asks your org once what the package actually does and writes it to tape. Every run after that happens on your laptop: offline, in milliseconds, with nothing connected.
nimbus record is two passes in one. First it reads the package's real surface straight out of the org: every global class and signature, every constant, plus the labels, fields and objects your code touches. Then it runs your tests with the package's calls forwarded live to the org and writes down what came back — one cassette per test method.
nimbus record -o my-org # the whole suite
nimbus record -o my-org DonationRollupTest # one class
nimbus record -o my-org --namespaces Nebula,npe01
nimbus record -o my-org --data # settings + metadata rows tooOne org, one time. Signatures and stable values land in stubs/, per-call answers in .nimbus/recordings/.
Stubs are plain Apex, cassettes are plain JSON. Check them into git and the whole team runs against the same answers.
nimbus test plays the tape. No org, no credentials, no network — so CI can run it too.
The package is still a black box. It just runs on your machine now.
What nimbus record writes to disk is a stub — a local implementation of a class Nimbus can't otherwise see. Recording produces them automatically for installed packages; you can also write them by hand for anything else. Three categories of code need them:
Nebula Logger, FSL, Vlocity, industry ISVs - closed-source, installed in your org, but source unavailable to Nimbus.
ConnectApi, Metadata API, certain System methods - built-in but not implemented in Nimbus yet.
Your own services that depend on external systems you want to mock for testing.
public class AccountService {
public static void logAccountCreation(Account acc) {
// Nebula Logger is a managed package - source is hidden
Nebula.Logger.info('Created account: ' + acc.Name);
Nebula.Logger.saveLog();
// ← Can't execute - Nimbus can't see the code
}
}Without a stub, Nimbus fails when the test calls the Logger class.
A stub is a user-provided implementation of any class Nimbus doesn't natively support. Instead of blocking on missing code, you implement just enough for your tests to run - then commit it to git so your team shares the same behavior.
Test your code now, without waiting for Nimbus to implement every API
Auto-null fallback and namespace suppression handle packages where source isn't accessible
Focus on verifying your business logic, not the packages or APIs you depend on
Stubs are simple - just the methods your tests actually call
Commit stubs to git so every team member shares the same behavior
The first half of nimbus record is available on its own as nimbus stub pull — the package's real surface and real values, with no test run and nothing executed in the org:
nimbus stub pull --org my-org --namespaces Nebula,npe01
Wrote stubs/labels/npe01.labels-meta.xml (14 labels: 14 new, 0 updated)
Wrote stubs/objects/Contact/fields/npe01__Private__c.field-meta.xml
Wrote stubs/Nebula/Logger.cls
Wrote stubs/Nebula/LogEntryEventBuilder.cls
Wrote stubs/npe4/Relationships_INST.cls
...
108 labels in 5 files, 162 fields, 2 objects, 17 classes (1 recorded constant), 0 skipped.Nebula.Logger.info('x').addTag('y') chains work instead of NPE'ing.--data) — custom-setting rows become seed lines in a fenced block of nimbus.properties; custom-metadata records become ordinary stubs/customMetadata/ files. getInstance() and SOQL then return what the org returns.Re-running is safe: anything your project defines, and anything already under stubs/, is left alone. Recorded stubs are plain files — hand-edit them freely and commit them to git. See the full flag reference.
Add a stubs/ folder at your project root, with one folder per managed package. Each package folder holds everything for that package — Apex classes and namespaced custom objects/fields. Nimbus loads it all with the lowest priority; anything in force-app/ with the same name takes precedence.
my-salesforce-project/
├── force-app/
│ └── main/default/classes/
├── stubs/
│ ├── Nebula/ (one folder per package)
│ │ ├── Nebula.cls (Nebula.Logger, Nebula.LogEntryEventBuilder)
│ │ └── objects/ (namespaced custom objects)
│ │ └── Nebula__LogEntryEvent__e/...
│ ├── fflib/
│ │ └── fflib.cls (fflib_SObjectDomain, fflib_Application, ...)
│ └── ConnectApi/
│ └── ConnectApi.cls (ConnectApi.FeedItem, etc.)
└── sfdx-project.jsonAdding another package later is just stubs/<NewPackage>/ next to the others.
Managed packages use namespaced classes like Nebula.Logger. The hand-written convention puts the namespace as the outer class and each package class as an inner class. Implement just the methods your tests call:
// stubs/Nebula/Nebula.cls
public class Nebula {
public class Logger {
public static LogEntryEventBuilder info(String message) {
System.debug('INFO: ' + message);
return new LogEntryEventBuilder();
}
public static LogEntryEventBuilder error(String message) {
System.debug('ERROR: ' + message);
return new LogEntryEventBuilder();
}
public static void saveLog() {
// Stub: no-op
}
}
public class LogEntryEventBuilder {
public LogEntryEventBuilder addTag(String tag) {
return this;
}
public LogEntryEventBuilder setRecord(Object record) {
return this;
}
}
}An equivalent layout is one file per class: stubs/Nebula/Logger.cls with public class Logger { ... } directly. The stub loader registers both the simple name and the Nebula. alias automatically. nimbus stub auto uses this layout; pick whichever fits your editing style.
Stubs are loaded as regular Apex classes - no special namespace mapping needed. The outer class name matches the namespace, and inner classes match the package APIs:
$ nimbus test AccountServiceTest
[stubs] Loaded 1 class(es) from stubs/
Parsing Apex classes...
Running tests...When your code calls Nebula.Logger.info(), the interpreter resolves Nebula as a class and Logger as an inner class, finding the stub naturally:
public class AccountServiceTest {
@isTest
static void testLogging() {
// Calls Nebula.Logger - resolved from the stub
Nebula.Logger.info('Created account');
Nebula.Logger.saveLog();
// ✓ Uses the stub, not the real Nebula Logger
// ✓ Test completes in milliseconds
}
}Writing stubs by hand is straightforward, but tedious — you have to walk every reference to figure out which methods get called, with which arguments, returning what type. nimbus stub auto does that walk for you. It scans the project AST, finds every reference to a class Nimbus can't resolve, infers the surface from how your code actually uses it, and writes one .cls per class.
# Preview without writing — see what would be generated
nimbus stub auto --dry-run
# Generate (skips files that already exist)
nimbus stub auto
# Re-run after adding new code that exercises the package
nimbus stub auto --merge # appends only new methods; keeps your edits
nimbus stub auto --force # full rewrite (discards hand edits)Or fold it into the test loop — generate stubs after a successful run:
nimbus test --write-stubs
nimbus test --write-stubs --write-stubs-mergeString s = ...; X.foo(s) → foo(String arg0))!/&&/|| (Boolean), 'msg: ' + X.bar() (String)List<MyType> rows = X.fetch() → fetch() returns List<MyType>arg0, arg1. The package's published surface is the source of truth if you care about names; hand-edit afterwards.callCount and append to a calls list so tests can assert on invocation count, but the return value is a type-default (null, 0, false, ''). Hand-edit the body if you need richer behavior.Apex supports a few runtime-resolved patterns the static walker can't see — chiefly Type.forName('Pkg.X').newInstance() (used by fflib mocks, Force-DI, at4dx) and Database.query(buildAtRuntime). When you run nimbus test --write-stubs, the test pass surfaces these to the cross-run registry alongside the static scan: any class name passed to Type.forName at runtime that doesn't resolve becomes a type-only stub. Standalone nimbus stub auto only sees the static surface, since no tests run.
Type-only stubs (no methods, no fields) let Type.forName('Pkg.X').newInstance() succeed at test time instead of NPE'ing on the null return. Hand-edit the surface, or call the class statically once so the next --merge picks up its methods.
Auto-stub needs to know which chain roots are managed-package namespaces vs. plain class names — otherwise it can't tell Pkg.Logger.info() apart from OuterClass.Inner.method(). The signal is nimbus.stubs.namespaces in your nimbus.properties; without an entry there, auto-stub falls back to a flat type-only shell (stubs/Pkg.cls) that doesn't match the runtime resolution path.
The walker detects this and tells you. After every run, any chain root that looks namespace-shaped (used as Root.Class.something with Root unresolved) is surfaced as a suggestion with a copy-pasteable config line:
→ 1 chain root looks like a managed-package namespace
Hoplog (6 chained reference sites)
Adding it to nimbus.stubs.namespaces lets nimbus stub auto
generate the correct namespaced layout (stubs/<Pkg>/<Class>.cls)
instead of a flat type-only shell.
nimbus.stubs.namespaces=Hoplog
Or re-run with --update-config to write the line and regenerate.Pass --update-config (or --write-stubs-update-config for the test-loop variant) to do both in one shot — the flag merges the new entries into nimbus.properties, then re-walks with the augmented namespace set so the stubs land in the right shape:
nimbus stub auto --update-config
# ✓ Wrote 1 new stub
# stubs/Hoplog/Logger.cls
# ✓ Registered 1 namespace(s) in nimbus.properties
# Hoplog (6 chained reference sites)Existing config lines and comments are preserved; only the nimbus.stubs.namespaces= line is touched (or appended if missing). Safe to combine with --merge and --dry-run.
--mergeThe default behavior is conservative: if a stub already exists, it's left alone — your hand edits are safe. But that means new project usage doesn't trickle into the stub. --merge is the answer: it parses the existing file, identifies which methods/fields/ctors are already declared, and appends only the new ones. Existing method bodies, parameter names, even custom additions you wrote — all preserved.
# Day 1: generate from scratch
nimbus stub auto
# You hand-edit the stub: real return value, meaningful arg names
# Day 30: project added Pkg.X.newMethod() in three new tests
nimbus stub auto --merge
# → appends newMethod, leaves your edits intactIdempotent: running --merge twice in a row is a no-op when nothing's changed.
Nimbus accepts two equivalent on-disk layouts for namespaced stubs. nimbus stub auto writes one file per class:
stubs/Nebula/Logger.cls # public class Logger { ... }
stubs/Nebula/LogEntryEventBuilder.clsThe hand-written convention bundles everything into a single file with the namespace as the outer class:
stubs/Nebula/Nebula.cls # public class Nebula { class Logger { ... } class LogEntryEventBuilder { ... } }Both resolve Nebula.Logger the same way at runtime — the per-class layout uses the stub-loader's automatic alias registration; the nested layout uses Apex's own inner-class semantics. Pick whichever you prefer; --merge works against either.
Some managed packages ship custom objects with a namespace prefix — Nebula__LogEntryEvent__e, fflib__Setting__c, etc. If your tests do DML or SOQL against them, drop the schema XML inside the same package folder under objects/:
stubs/
└── Hoplog/
├── Hoplog.cls # Apex surface (Hoplog.Logger, ...)
└── objects/
└── Hoplog__LogEntry__c/ # namespaced custom object
├── Hoplog__LogEntry__c.object-meta.xml
└── fields/
├── Hoplog__Severity__c.field-meta.xml
├── Hoplog__EventType__c.field-meta.xml
└── Hoplog__Message__c.field-meta.xmlNimbus's schema synthesizer reads the object/field XML the same way it reads any custom object in force-app/ — creates a matching table in the embedded Postgres so insert new Hoplog__LogEntry__c(...) and SELECT ... FROM Hoplog__LogEntry__c work end-to-end without the package being installed in any org.
By convention, capitalize the namespace folder and class name. Apex itself is case-insensitive (so hoplog.Logger and Hoplog.Logger both resolve), but consistent capitalization is clearer on grep and in code review.
You don't need stubs to get your first green run. When Nimbus encounters a class it doesn't know - a managed package, an unsupported API, anything - it degrades gracefully: logs a warning, returns null, and continues. Tests only fail if they assert on the return value of that missing class.
[warn] nebula.logger.Logger not found - returning null (add a stub to control behavior)
[warn] fsl.FieldServiceAPI not found - returning nullThis means your workflow is:
nimbus test - see which tests pass and which failMost logging and telemetry calls (Nebula Logger, etc.) require no stub at all - you don't assert on them.
Managed package source code isn't visible - ApexClass.Body returns (hidden) for installed packages. nimbus stub pull recovers the global surface from the org's SymbolTable, but a package's non-global internals stay out of reach, and sometimes you don't need any of it. For namespaces where you don't need specific return values, suppress them explicitly in nimbus.properties:
# nimbus.properties
# Comma-separated list of namespaces to treat as opaque (warnings suppressed,
# methods return null). Matching is case-insensitive.
nimbus.stubs.namespaces=Nebula,fflib,fslUnlike the auto-null fallback (which warns), nimbus.stubs.namespaces is a deliberate declaration: this namespace is intentionally stubbed out, nothing to act on. Keeps CI output clean. Stub classes under stubs/<Pkg>/ always take precedence when you need real implementations.
Drop everything for a managed package under stubs/<Pkg>/ — Apex classes plus any namespaced custom objects. Inside the package folder, the outer class name matches the namespace and inner classes match the API. For Nebula.Logger, create stubs/Nebula/Nebula.cls with Logger as an inner class. The class hierarchy is the contract.
Only implement the methods your tests actually call. If you're testing code that calls Logger.info() but never calls Logger.debug(), don't stub debug().
public class Nebula {
public class Logger {
public static LogEntryEventBuilder info(String msg) {
System.debug(msg);
return new LogEntryEventBuilder();
}
public static void saveLog() { }
}
public class LogEntryEventBuilder { }
}Parameter names, return types, and access modifiers should match the real package. This prevents subtle bugs when your code expects a certain signature.
// Match the real Nebula signature exactly
public static LogEntryEventBuilder info(String message)
// Not:
public static void log(String msg)Stubs should have behavior that makes sense for testing. Logging methods might print to System.debug. Data-fetching methods might return empty lists or test data.
public class DataService {
public static List<Record> getRecords(String query) {
// Stub: return empty list for testing
return new List<Record>();
}
}Stubs are small and should be committed to version control. This ensures every team member has the same test environment - no surprises when tests run differently locally vs. in CI.
The pull covers everything with a stable answer: signatures, enums, constant values, labels, schema, custom-setting rows, custom-metadata records. What it can't cover is per-call behavior — what Nebula.Logger.getVersionNumber() returns for these specific arguments. That's the recording half, and it's also available on its own once stubs exist:
nimbus test --record -o my-org MyTestClass
# Re-records one class without re-pulling. Forwards managed-package static
# calls to the org and writes what they return to .nimbus/recordings/.
nimbus test MyTestClass
# Replays from the cassettes. No org connection.
nimbus test MyTestClass --no-replay
# Ignores the cassettes and runs the stub bodies instead.Recording only intercepts calls into classes that came from stubs/ — which is exactly why nimbus record bundles the pull: on a project with an empty stubs/ directory there is nothing to intercept, and test --record alone would capture nothing. A call that was never recorded falls back to its stub body rather than failing, so adding cassettes to an existing suite never breaks it.
Recorded calls really execute in the org, with whatever side effects they normally have — point -o at a scratch or developer org, not production.
Two limits worth stating plainly. Static methods only — a local stub instance has no counterpart in the org to forward to, so instance methods keep their stub bodies. And callouts are not recorded: the platform refuses a callout in a test without Test.setMock, so a test that deploys already ships its own mocks and there is nothing to capture.
Same pattern as VCR (Ruby), WireMock (Java), and Polly (JavaScript) — complementary to stub pull: the pull gives you the package's real surface and stable values in one command; recording fills in argument-dependent behavior.
nimbus record -o my-org once, then nimbus test forever after. No configuration required, and hand-written stubs still work for anything you'd rather control yourself.
nimbus record against any org you can authenticate to, and hand-written stubs for anything else. Both land in stubs/ and load as regular Apex classes.
nimbus stub auto walks every reference to a class Nimbus can't resolve and writes one .cls per class — methods, arities, return types inferred from how your code uses them. Re-run with --merge as the codebase evolves; hand edits stay intact.