# Role Pack: Developer

CLI-based software engineering: code implementation, review, testing, debugging, git workflow, security.

## Overview

The most mature of the three roles — these tools have strong communities and production track records. Organized by frequency of use.

## Tools

### Essential (every task)

| Tool             | Install               | Purpose                                 | Link                                                                   |
| ---------------- | --------------------- | --------------------------------------- | ---------------------------------------------------------------------- |
| **rg** (ripgrep) | `apt install ripgrep` | Fast code search, respects `.gitignore` | [github.com/BurntSushi/ripgrep](https://github.com/BurntSushi/ripgrep) |
| **fd**           | `apt install fd-find` | Modern file finder                      | [github.com/sharkdp/fd](https://github.com/sharkdp/fd)                 |
| **jq**           | `apt install jq`      | JSON parsing/transform                  | —                                                                      |
| **git**          | `apt install git`     | Version control                         | —                                                                      |
| **gh**           | `apt install gh`      | GitHub CLI: PRs, issues, releases       | [cli.github.com](https://cli.github.com)                               |

### Code Quality

| Tool           | Install                   | Purpose                          | Link                                                                   |
| -------------- | ------------------------- | -------------------------------- | ---------------------------------------------------------------------- |
| **ast-grep**   | `brew install ast-grep`   | Structural code search/replace   | [github.com/ast-grep/ast-grep](https://github.com/ast-grep/ast-grep)   |
| **biome**      | `npm i -g @biomejs/biome` | Fast linter + formatter (JS/TS)  | [biomejs.dev](https://biomejs.dev)                                     |
| **shellcheck** | `apt install shellcheck`  | Bash static analysis             | [shellcheck.net](https://www.shellcheck.net)                           |
| **sd**         | `brew install sd`         | Simpler sed (literal by default) | [github.com/chmln/sd](https://github.com/chmln/sd)                     |
| **difftastic** | `brew install difftastic` | AST-level diffs                  | [github.com/Wilfred/difftastic](https://github.com/Wilfred/difftastic) |

### Git Workflow

| Tool        | Install                  | Purpose                   | Link                                                                         |
| ----------- | ------------------------ | ------------------------- | ---------------------------------------------------------------------------- |
| **lazygit** | `brew install lazygit`   | TUI git client            | [github.com/jesseduffield/lazygit](https://github.com/jesseduffield/lazygit) |
| **delta**   | `brew install git-delta` | Pretty git diffs          | [github.com/dandavison/delta](https://github.com/dandavison/delta)           |
| **just**    | `brew install just`      | Command runner (Make alt) | [just.systems](https://just.systems)                                         |

### Security

| Tool         | Install                 | Purpose                        | Link                                                                 |
| ------------ | ----------------------- | ------------------------------ | -------------------------------------------------------------------- |
| **trivy**    | `apt install trivy`     | Dependency/image vuln scanner  | [aquasecurity.github.io/trivy](https://aquasecurity.github.io/trivy) |
| **gitleaks** | `brew install gitleaks` | Secret detection in git        | [github.com/gitleaks/gitleaks](https://github.com/gitleaks/gitleaks) |
| **semgrep**  | `apt install semgrep`   | Multi-language static analysis | [semgrep.dev](https://semgrep.dev)                                   |
| **age**      | `apt install age`       | File encryption                | [github.com/FiloSottile/age](https://github.com/FiloSottile/age)     |

### Performance & Data

| Tool          | Install                 | Purpose                 | Link                                                                     |
| ------------- | ----------------------- | ----------------------- | ------------------------------------------------------------------------ |
| **hyperfine** | `apt install hyperfine` | CLI benchmarking        | [github.com/sharkdp/hyperfine](https://github.com/sharkdp/hyperfine)     |
| **duckdb**    | `apt install duckdb`    | SQL on CSV/JSON/Parquet | [duckdb.org](https://duckdb.org)                                         |
| **procs**     | `brew install procs`    | Modern `ps`             | [github.com/dalance/procs](https://github.com/dalance/procs)             |
| **btm**       | `brew install bottom`   | System monitor TUI      | [github.com/ClementTsang/bottom](https://github.com/ClementTsang/bottom) |

### Environment

| Tool       | Install               | Purpose                     | Link                                                                   |
| ---------- | --------------------- | --------------------------- | ---------------------------------------------------------------------- |
| **uv**     | `apt install uv`      | Fast Python package manager | [github.com/astral-sh/uv](https://github.com/astral-sh/uv)             |
| **mise**   | `apt install mise`    | Runtime version manager     | [mise.jdx.dev](https://mise.jdx.dev)                                   |
| **direnv** | `apt install direnv`  | Auto-load env vars per dir  | [direnv.net](https://direnv.net)                                       |
| **zoxide** | `brew install zoxide` | Smarter `cd`                | [github.com/ajeetdsouza/zoxide](https://github.com/ajeetdsouza/zoxide) |

> **Removed from original:** `tokei`, `knip`, `grex`, `typos`, `vale`, `lychee`, `hexyl`, `taplo`, `watchexec`, `fzf`, `csview`, `mkcert`, `bat`, `tree`, `yq`, `tldr`. Fine tools but dilute focus. The agent has built-in equivalents for most (code search, file browsing, spell-check via LLM). Install if needed — they don't belong in a core role pack.

## Workflows

### Feature Implementation

```bash
# Explore
rg "function pattern" --type ts
tree src/

# Branch → implement → test → commit
git checkout -b feat/description
# ... implement ...
git add -A && git commit -m "feat: add feature description"

# PR
gh pr create --title "feat: add feature" --body "description"
```

### Pre-Commit Check

```bash
biome lint --write . 2>/dev/null
shellcheck $(fd '*.sh' .) 2>/dev/null
gitleaks detect --source . --verbose 2>/dev/null
npm test 2>/dev/null || pytest 2>/dev/null || cargo test 2>/dev/null
```

### Code Review

```bash
gh pr diff <number>
difftastic file1 file2
semgrep scan --diff <(gh pr diff <number>)
gh pr comment <number> --body "review comment" --line <line>
```

### Performance

```bash
hyperfine --runs 10 --export-json /tmp/bench.json "original" "optimized"
jq '.results[] | {command: .command, mean: .mean}' /tmp/bench.json
```

### Debug

```bash
procs -t tree
btm
xxd file | head
```

## SKILL.md

```yaml
---
name: developer
description: >
  Software engineer: code implementation, review, testing, debugging,
  git workflow, security scanning. Activate for implement, refactor, fix,
  review, test, debug, PR, commit, deploy, lint, benchmark, security.
version: "2.0.0"
---

# Developer

Write, review, test, and ship high-quality code.

## Behavior

- Plan before implementing (5-10 steps, wait for approval)
- Show diffs before editing
- One logical change per commit
- Test after every change
- Run security gates (gitleaks, trivy) before PRs

## Workflows

- **Feature** — Explore → plan → implement step-by-step → test → commit → PR
- **Review** — Fetch diff → check logic/security/performance → structural diff → inline comments
- **Debug** — Reproduce → minimal logging → binary search → fix → regression test
- **Refactor** — Run tests first → ast-grep to find all instances → incremental changes → verify
- **Performance** — Measure baseline → optimize → measure → compare statistically
- **Pre-commit** — biome + shellcheck + gitleaks + test suite

## Safety

- Never commit secrets (run gitleaks)
- Never force-push to shared branches without approval
- Never skip tests
- Never merge without reviewing the diff
```

## Market Context

| Project                       | Status      | Notes                                                                           | Link                                                                           |
| ----------------------------- | ----------- | ------------------------------------------------------------------------------- | ------------------------------------------------------------------------------ |
| **agent-loadout**             | Open source | `npx agent-loadout` = 50 CLI tools + SKILL.md files                             | [github.com/badlogic/agent-loadout](https://github.com/badlogic/agent-loadout) |
| **Anthropic built-in skills** | Shipping    | `pdf`, `docx`, `xlsx`, `pptx`, `tdd`, `frontend-design` (ship with Claude Code) | [docs.anthropic.com](https://docs.anthropic.com/en/docs/agents-skills/skills)  |

The developer toolchain is the most commoditized — 80% of these tools appear in every "best developer tools" list. The differentiator is workflow discipline, not tool count.

## Composition

- → **Executive Assistant** for status updates or scheduling reviews
- → **Researcher** for API documentation or algorithm research

## Setup

```bash
# Core
apt install ripgrep fd-find jq git gh shellcheck
curl -sS https://webi.sh/biome | bash
brew install lazygit delta just hyperfine procs difftastic

# Security
brew install gitleaks trivy semgrep age

# Environment
apt install uv direnv
brew install zoxide bottom
```
