Remove the unreachable '::1' entry from LOCAL_HOSTS

[N-thnI]

Description

Drop dead code and make loopback detection consistent.

Problem Statement

src/network/index.ts:41 — const LOCAL_HOSTS = new Set(['localhost', '127.0.0.1', '[::1]', '::1']); is tested against parsed.hostname (line 72).

The WHATWG URL parser always returns IPv6 hostnames in bracketed form (new URL('http://[::1]:8000').hostname === '[::1]'), so the bare '::1' entry can never match and is dead.

The set also misses the rest of the loopback range (127.0.0.0/8, e.g. 127.0.0.2), so allowInsecureLocalhost behaves inconsistently for hosts a developer would reasonably consider local.

Proposed Changes

• Drop the unreachable '::1' entry
• Replace the exact-match set with a loopback predicate covering 127.0.0.0/8, [::1], and localhost
• Add tests for http://127.0.0.2:8000 and http://[::1]:8000 under allowInsecureLocalhost

Technical Implementation Scaffolding

• Target Repository: vero-sdk
• Target Path: src/network/index.ts
• Branch Naming: fix/issue--loopback-host-detection
• Authority Context: Correctness — dead code and inconsistent local detection

Acceptance Criteria

• validateUrl('http://[::1]:8000', { allowInsecureLocalhost: true }) succeeds and validateUrl('http://[::1]:8000') throws INVALID_URL
• http://127.0.0.2 is treated consistently with http://127.0.0.1
• No unreachable entries remain in the host set

Definition of Done

• Reviewed by lead maintainer
• Pull request merged via verified status check

[Naajih09]

Hi, I'd like to work on this issue. I've gone through the description and acceptance criteria and I'm confident I can deliver it. I'll make sure every acceptance criterion is met and submit a clean, tested PR. Please assign it to me.

[EmmyKay0026]

Hello there, I came across your project and will love the opportunity to work on it. I would complete it promptly and without conflicts

[Victorjonah-prog]

hi maintainer
I'd like to take this on — I'll replace the LOCAL_HOSTS exact-match set in src/network/index.ts with a loopback predicate covering 127.0.0.0/8, bracketed [::1], and localhost (dropping the unreachable bare '::1'), and add tests for http://127.0.0.2:8000 and http://[::1]:8000 under allowInsecureLocalhost per the acceptance criteria. I'm comfortable with WHATWG URL hostname parsing quirks (bracketed IPv6) and will submit a clean PR from fix/issue-75-loopback-host-detection with passing tests.

[grantfox-oss]

🦊 GrantFox — @Victorjonah-prog has been assigned to this issue as part of the Third Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #75)
2. Your PR will be reviewed by the Vero-protocol maintainers

Good luck! Track your progress on GrantFox.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox as part of the Third Campaign campaign!

@Victorjonah-prog's PR #85 was approved and merged by @N-i-xx.

🏆 @Victorjonah-prog: You earned 35 FoxPoints for this contribution! Your current tier: Explorer (347 total points). Track your full progress on GrantFox.

👏 Great work, @Victorjonah-prog! Keep contributing to Vero-protocol.