Group name is case-sensitive on Linux

[kantord]

Bug description

Group names are designed to be case-insensitive, but they are case-sensitive on Linux.

Steps to reproduce

On any Linux distribution, make the following request:

curl 'http://localhost:46381/api/v1beta/groups' \
  -H 'Accept: */*' \
  -H 'Accept-Language: en-US' \
  -H 'Connection: keep-alive' \
  -H 'Referer: http://localhost:5173/' \
  -H 'Sec-Fetch-Dest: empty' \
  -H 'Sec-Fetch-Mode: cors' \
  -H 'Sec-Fetch-Site: same-site' \
  -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) ToolHive/0.0.0-dev Chrome/138.0.7204.185 Electron/37.2.6 Safari/537.36' \
  -H 'content-type: application/json' \
  -H 'sec-ch-ua: "Not)A;Brand";v="8", "Chromium";v="138"' \
  -H 'sec-ch-ua-mobile: ?0' \
  -H 'sec-ch-ua-platform: "Linux"' \
  -H 'x-client-platform: linux' \
  -H 'x-client-release-build: false' \
  -H 'x-client-type: toolhive-studio' \
  -H 'x-client-version: 0.0.0-dev' \
  --data-raw '{"name":"defAult"}'

this should fail, because the default group always exists. But on Linux, I am able to create a group called defAult

Expected behavior

Error:

"group_already_exists: group 'defAult' already exists"

Actual behavior

on Linux, I am able to create a group called defAult

Environment (if relevant)

ToolHive v0.2.15
Commit: d274a0a
Built: 2025-09-02 15:05:24 UTC
Go version: go1.24.1
Platform: linux/amd64

Additional context

Seems like the problem is this:

On Linux/amd64 (so, standard Linux on x86-64), the behavior of os.Stat(filePath) is case-sensitive almost all the time.

[rbiamru]

Hi, I’d like to take this issue.

I reproduced the bug locally: creating MyGroup and then mygroup works as if they were separate groups. I built ToolHive from source, tested with Docker running, and even launched a workload (nginx) to confirm the behavior.

From looking at the code, there seem to be two options:

1. Normalize names at CLI input (quick fix, but won’t solve API calls).
2. Normalize names in pkg/groups/manager.go (Create, Exists, Get, Delete), which would cover both CLI and API.

Since the bug also shows up via API, I think option 2 makes more sense. Can you confirm if that’s the approach you’d like me to take?

[amirejaz]

Thanks a lot for picking this up and confirming the behavior @rbiamru ! 🙏

I agree the second approach of normalizing group names in pkg/groups/manager.go is the right way to fix this. Please go ahead with that approach.

Really appreciate you working on this — looking forward to your PR! 🚀

[rbiamru]

I’ve opened a PR with the proposed fix here: #1711.

It normalizes group names in manager.go so they are treated case-insensitively, and adds a test to ensure that creating MyGroup and mygroup is properly handled as the same group.

Happy to adjust the test placement (keep separate vs fold into existing tests).