feature-flags

Use enum-based feature flags with protocols for type safety.

Cursor rule for Cursor

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add rules/duckduckgo/apple-browsers/feature-flags
Clone the repo
git clone --depth 1 https://github.com/duckduckgo/apple-browsers

Made for: Cursor.

Per session 0 Nothing until a file matches its globs; then the whole rule loads.
When invoked 2,254 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.02254
Opus 5 $0.00000 $0.01127
Sonnet 5 $0.00000 $0.00451
Haiku 4.5 $0.00000 $0.00225

Measured yesterday against content hash 1206cf3e0720, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

feature-flags scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/rules/feature-flags.mdc · 374 lines

How it starts

The opening of the file, as written. The whole thing — 374 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Feature Flag Patterns

Type-Safe Feature Flags

Use enum-based feature flags with protocols for type safety:

// ✅ CORRECT - Type-safe feature flags
protocol FeatureFlag: RawRepresentable where RawValue == String {
    var defaultValue: Bool { get }
    var description: String { get }
}

enum UIFeatureFlag: String, FeatureFlag {
    case newTabPageRedesign = "new_tab_page_redesign"
    case advancedPrivacySettings = "advanced_privacy_settings"
    case voiceSearch = "voice_search"
    case experimentalUI = "experimental_ui"
    
    var defaultValue: Bool {
        switch self {
        case .newTabPageRedesign: return false
        case .advancedPrivacySettings: return true
        case .voiceSearch: return false
        case .experimentalUI: return false
        }
    }
    
    var description: String {
        switch self {
        case .newTabPageRedesign: 
            return "Enable redesigned new tab page"
        case .advancedPrivacySettings: 
            return "Show advanced privacy settings"
        case .voiceSearch: 
            return "Enable voice search functionality"
        case .experimentalUI:
            return "Enable experimental UI components"
        }
    }
}

enum NetworkFeatureFlag: String, FeatureFlag {
    case networkProtectionV2 = "network_protection_v2"
    case enhancedBlocking = "enhanced_blocking"
    
    var defaultValue: Bool {
        switch self {
        case .networkProtectionV2: return false
        case .enhancedBlocking: return true
        }
    }
    
    var description: String {
        switch self {
        case .networkProtectionV2:
            return "Enable Network Protection V2"
        case .enhancedBlocking:
            return "Enhanced content blocking"
        }
    }
}

FeatureFlagger Protocol Implementation

Extend the existing FeatureFlagger with type-safe methods:

// ✅ CORRECT - Type-safe FeatureFlagger extension
extension FeatureFlagger {
    func isEnabled<Flag: FeatureFlag>(_ flag: Flag) -> Bool {
        return isFeatureOn(flag.rawValue) ?? flag.defaultValue
    }
    
    func setEnabled<Flag: FeatureFlag>(_ enabled: Bool, for flag: Flag) {
        setFeatureOn(flag.rawValue, enabled: enabled)
    }
}

// Usage in code
final class FeatureViewModel: ObservableObject {
    private let featureFlagger: FeatureFlagger
    
    init(featureFlagger: FeatureFlagger) {
        self.featureFlagger = featureFlagger
    }
    
    func loadContent() {
        if featureFlagger.isEnabled(UIFeatureFlag.newTabPageRedesign) {
            loadNewDesign()
        } else {
            loadLegacyDesign()
        }
    }
}

Read the full file on GitHub · 374 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 374 lines · 0 tokens per session scan A 1206cf3e0720

Subscribe to this mod's changes

feature-flags is a cursor rule published in the GitHub repository duckduckgo/apple-browsers (252 stars, last pushed yesterday), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 2,254 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.