Under the hood
Plugin marketplace settings now validate each allowlist entry and blank the list if every entry is bad
What
A new shared helper validates array-based settings such as plugin marketplace allowlists entry by entry. Any entry that fails validation gets reported individually rather than silently dropped. If every single entry turns out invalid, the whole list is forced to empty with a warning, instead of Claude Code quietly keeping a partially broken list around.
Why
This avoids a settings file ending up in a half-valid state that behaves unpredictably; if a list is completely broken, it's cleared with a clear warning instead of causing confusing partial behavior.