@hellocrossman/mcp-sdk 0.3.4 → 0.4.0

package/dist/cli.js

@@ -76,16 +76,46 @@ function findProjectRoot() {
     }
     return process.cwd();
 }
+function scoreExpressFile(filePath) {
+    const content = fs.readFileSync(filePath, "utf-8");
+    const hasExpressImport = EXPRESS_PATTERNS.some((p) => p.test(content));
+    if (!hasExpressImport)
+        return null;
+    let score = 0;
+    const hasAppCreation = APP_VAR_PATTERN.test(content);
+    const hasListen = LISTEN_PATTERN.test(content);
+    const hasRoutes = /\.\s*(?:get|post|put|patch|delete)\s*\(/.test(content);
+    const hasAppParam = /function\s+\w+\s*\(\s*app\b/.test(content) ||
+        /\(\s*app\s*:\s*\w*Express/.test(content) ||
+        /\(\s*app\s*:\s*\w*Application/.test(content) ||
+        /=>\s*\{[^}]*app\s*\./.test(content);
+    const isNamedEntryish = /(?:index|app|server|main)\.(ts|js|mjs)$/.test(filePath);
+    if (hasAppCreation)
+        score += 10;
+    if (hasListen)
+        score += 8;
+    if (isNamedEntryish)
+        score += 3;
+    if (hasRoutes)
+        score += 2;
+    if (!hasAppCreation && hasAppParam)
+        score -= 5;
+    if (score <= 0)
+        return null;
+    return { path: filePath, score, hasAppCreation, hasListen, hasRoutes };
+}
 function findExpressEntryFile(root) {
+    const candidates = [];
     for (const file of COMMON_ENTRY_FILES) {
         const fullPath = path.join(root, file);
         if (fs.existsSync(fullPath)) {
-            const content = fs.readFileSync(fullPath, "utf-8");
-            if (EXPRESS_PATTERNS.some((p) => p.test(content)))
-                return fullPath;
+            const candidate = scoreExpressFile(fullPath);
+            if (candidate)
+                candidates.push(candidate);
         }
     }
     const srcDirs = ["server", "src", "."];
+    const seen = new Set(candidates.map((c) => c.path));
     for (const dir of srcDirs) {
         const dirPath = path.join(root, dir);
         if (!fs.existsSync(dirPath) || !fs.statSync(dirPath).isDirectory())
@@ -93,12 +123,18 @@ function findExpressEntryFile(root) {
         const files = fs.readdirSync(dirPath).filter((f) => /\.(ts|js|mjs)$/.test(f));
         for (const file of files) {
             const fullPath = path.join(dirPath, file);
-            const content = fs.readFileSync(fullPath, "utf-8");
-            if (EXPRESS_PATTERNS.some((p) => p.test(content)))
-                return fullPath;
+            if (seen.has(fullPath))
+                continue;
+            seen.add(fullPath);
+            const candidate = scoreExpressFile(fullPath);
+            if (candidate)
+                candidates.push(candidate);
         }
     }
-    return null;
+    if (candidates.length === 0)
+        return null;
+    candidates.sort((a, b) => b.score - a.score);
+    return candidates[0].path;
 }
 function checkIsESM(filePath, root) {
     if (filePath.endsWith(".ts") || filePath.endsWith(".mjs"))
@@ -111,8 +147,29 @@ function checkIsESM(filePath, root) {
         return false;
     }
 }
-function alreadySetup(content) {
-    return content.includes("createMcpServer") || content.includes("@hellocrossman/mcp-sdk");
+function alreadySetup(root) {
+    const mcpServerFile = path.join(root, "mcp-server.ts");
+    const mcpServerFileJs = path.join(root, "mcp-server.js");
+    if (fs.existsSync(mcpServerFile) || fs.existsSync(mcpServerFileJs))
+        return true;
+    const serverMcpFile = path.join(root, "server", "mcp-server.ts");
+    const serverMcpFileJs = path.join(root, "server", "mcp-server.js");
+    if (fs.existsSync(serverMcpFile) || fs.existsSync(serverMcpFileJs))
+        return true;
+    return false;
+}
+function findExistingMcpServerFile(root) {
+    const candidates = [
+        path.join(root, "mcp-server.ts"),
+        path.join(root, "mcp-server.js"),
+        path.join(root, "server", "mcp-server.ts"),
+        path.join(root, "server", "mcp-server.js"),
+    ];
+    for (const f of candidates) {
+        if (fs.existsSync(f))
+            return f;
+    }
+    return null;
 }
 function checkPgInstalled(root) {
     return fs.existsSync(path.join(root, "node_modules", "pg"));
@@ -179,13 +236,81 @@ function stripExistingMcpConfig(content) {
     result = result.replace(/\n{3,}/g, "\n\n");
     return result;
 }
+function findAppExport(content, varName) {
+    const namedExportRe = new RegExp(`export\\s+(?:const|let|var)\\s+${varName}\\s*=`);
+    if (namedExportRe.test(content))
+        return varName;
+    if (/export\s+default\s+app\b/.test(content))
+        return "default";
+    const moduleExportsRe = new RegExp(`module\\.exports\\s*=\\s*${varName}`);
+    if (moduleExportsRe.test(content))
+        return "default";
+    const exportsRe = new RegExp(`module\\.exports\\.${varName}\\s*=`);
+    if (exportsRe.test(content))
+        return varName;
+    return varName;
+}
+function findEntryFiles(root, appFile) {
+    const entries = [];
+    const appFileRel = path.relative(root, appFile);
+    const appBaseName = path.basename(appFile, path.extname(appFile));
+    const appDir = path.dirname(appFile);
+    const searchDirs = [appDir, root, path.join(root, "server"), path.join(root, "src")];
+    const seen = new Set();
+    for (const dir of searchDirs) {
+        if (!fs.existsSync(dir) || !fs.statSync(dir).isDirectory())
+            continue;
+        const files = fs.readdirSync(dir).filter((f) => /\.(ts|js|mjs)$/.test(f));
+        for (const file of files) {
+            const fullPath = path.join(dir, file);
+            if (seen.has(fullPath) || fullPath === appFile)
+                continue;
+            seen.add(fullPath);
+            try {
+                const content = fs.readFileSync(fullPath, "utf-8");
+                const hasListen = LISTEN_PATTERN.test(content);
+                const importsApp = content.includes(`./${appBaseName}`) ||
+                    content.includes(`'./${appFileRel}'`) ||
+                    content.includes(`"./${appFileRel}"`) ||
+                    content.includes(`from './${appBaseName}'`) ||
+                    content.includes(`from "./${appBaseName}"`) ||
+                    content.includes(`require('./${appBaseName}')`) ||
+                    content.includes(`require("./${appBaseName}")`);
+                if (hasListen || importsApp) {
+                    entries.push(fullPath);
+                }
+            }
+            catch { }
+        }
+    }
+    if (entries.length === 0) {
+        entries.push(appFile);
+    }
+    return entries;
+}
 async function stepDetectApp(state, prompt, specifiedFile, force) {
-    printStep(1, 5, "Detecting Express app");
-    let entryFile = null;
+    printStep(1, 6, "Detecting Express app");
+    if (alreadySetup(state.root)) {
+        if (force) {
+            const existingFile = findExistingMcpServerFile(state.root);
+            if (existingFile) {
+                console.log(`  ${c("yellow", "~")} Found existing ${c("bold", path.relative(state.root, existingFile))}`);
+                console.log(`  ${c("dim", "  Will regenerate with fresh scan...")}`);
+            }
+        }
+        else {
+            const existingFile = findExistingMcpServerFile(state.root);
+            const relPath = existingFile ? path.relative(state.root, existingFile) : "mcp-server.ts";
+            console.log(`  ${c("green", "+")} MCP SDK is already set up (${c("bold", relPath)})`);
+            console.log(`  ${c("dim", "  Run with")} ${c("cyan", "--force")} ${c("dim", "to re-scan and reconfigure.")}`);
+            return false;
+        }
+    }
+    let appFile = null;
     if (specifiedFile) {
         const resolved = path.resolve(state.root, specifiedFile);
         if (fs.existsSync(resolved)) {
-            entryFile = resolved;
+            appFile = resolved;
         }
         else {
             console.log(`  ${c("yellow", "!")} File not found: ${specifiedFile}`);
@@ -193,15 +318,45 @@ async function stepDetectApp(state, prompt, specifiedFile, force) {
         }
     }
     else {
-        entryFile = findExpressEntryFile(state.root);
+        appFile = findExpressEntryFile(state.root);
+    }
+    if (appFile && !specifiedFile) {
+        const relPath = path.relative(state.root, appFile);
+        const content = fs.readFileSync(appFile, "utf-8");
+        const hasCreation = APP_VAR_PATTERN.test(content);
+        const hasListen = LISTEN_PATTERN.test(content);
+        const signals = [];
+        if (hasCreation)
+            signals.push("creates Express app");
+        if (hasListen)
+            signals.push("calls .listen()");
+        const signalStr = signals.length > 0 ? ` ${c("dim", `(${signals.join(", ")})`)}` : "";
+        console.log(`  ${c("green", "+")} Found Express app: ${c("bold", relPath)}${signalStr}`);
+        const useIt = await prompt.confirm(`  Is this the right file?`);
+        if (!useIt) {
+            const custom = await prompt.ask(`  Enter the path to your Express app file: `);
+            if (custom) {
+                const resolved = path.resolve(state.root, custom);
+                if (fs.existsSync(resolved)) {
+                    appFile = resolved;
+                }
+                else {
+                    console.log(`  ${c("yellow", "!")} File not found: ${custom}`);
+                    return false;
+                }
+            }
+            else {
+                return false;
+            }
+        }
     }
-    if (!entryFile) {
+    if (!appFile) {
         console.log(`  ${c("yellow", "!")} Could not find an Express app file.`);
         const custom = await prompt.ask(`  Enter the path to your Express app file: `);
         if (custom) {
             const resolved = path.resolve(state.root, custom);
             if (fs.existsSync(resolved)) {
-                entryFile = resolved;
+                appFile = resolved;
             }
             else {
                 console.log(`  ${c("yellow", "!")} File not found: ${custom}`);
@@ -212,32 +367,23 @@ async function stepDetectApp(state, prompt, specifiedFile, force) {
             return false;
         }
     }
-    let content = fs.readFileSync(entryFile, "utf-8");
-    if (alreadySetup(content)) {
-        if (force) {
-            console.log(`  ${c("yellow", "~")} Found existing MCP config in ${path.relative(state.root, entryFile)}`);
-            console.log(`  ${c("dim", "  Removing old configuration for re-scan...")}`);
-            content = stripExistingMcpConfig(content);
-            fs.writeFileSync(entryFile, content);
-            console.log(`  ${c("green", "+")} Old config removed. Starting fresh.`);
-        }
-        else {
-            console.log(`  ${c("green", "+")} MCP SDK is already set up in ${path.relative(state.root, entryFile)}`);
-            console.log(`  ${c("dim", "  Run with")} ${c("cyan", "--force")} ${c("dim", "to re-scan and reconfigure.")}`);
-            return false;
-        }
-    }
+    const content = fs.readFileSync(appFile, "utf-8");
     const appMatch = content.match(APP_VAR_PATTERN);
-    state.entryFile = entryFile;
+    state.appFile = appFile;
     state.appVarName = appMatch ? appMatch[1] : "app";
-    state.isESM = checkIsESM(entryFile, state.root);
-    console.log(`  ${c("green", "+")} Found Express app: ${c("bold", path.relative(state.root, entryFile))}`);
+    state.appExportName = findAppExport(content, state.appVarName);
+    state.isESM = checkIsESM(appFile, state.root);
+    const entryFiles = findEntryFiles(state.root, appFile);
+    state.entryFiles = entryFiles;
     console.log(`  ${c("dim", `  Variable: ${state.appVarName}, Module: ${state.isESM ? "ESM" : "CommonJS"}`)}`);
+    if (entryFiles.length > 0 && entryFiles[0] !== appFile) {
+        console.log(`  ${c("dim", `  Entry files: ${entryFiles.map((f) => path.relative(state.root, f)).join(", ")}`)}`);
+    }
     return true;
 }
 async function stepScanRoutes(state) {
-    printStep(2, 5, "Scanning API routes");
-    state.routes = scanAllRoutes(state.entryFile, state.routePrefix);
+    printStep(2, 6, "Scanning API routes");
+    state.routes = scanAllRoutes(state.appFile, state.routePrefix);
     if (state.routes.length === 0) {
         console.log(`  ${c("dim", "  No routes found under")} ${state.routePrefix}`);
         console.log(`  ${c("dim", "  Routes will be discovered at runtime when your app starts.")}`);
@@ -262,7 +408,7 @@ async function stepScanRoutes(state) {
     }
 }
 async function stepScanDatabase(state, prompt) {
-    printStep(3, 5, "Database discovery");
+    printStep(3, 6, "Database discovery");
     const wantDb = await prompt.confirm(`  Scan your database for tables to expose as tools?`);
     if (!wantDb) {
         state.databaseEnabled = false;
@@ -350,7 +496,7 @@ async function stepScanDatabase(state, prompt) {
     }
 }
 async function stepEnrichAndReview(state, prompt) {
-    printStep(4, 5, "AI enrichment & tool review");
+    printStep(4, 6, "AI enrichment & tool review");
     if (state.tools.length === 0) {
         console.log(`  ${c("dim", "  No tools discovered. Routes will be discovered at runtime.")}`);
         state.enrichmentEnabled = true;
@@ -414,10 +560,239 @@ async function stepEnrichAndReview(state, prompt) {
         state.includeWrites = wantWrites;
     }
 }
+async function stepCustomTools(state, prompt) {
+    printStep(5, 6, "Custom tools (optional)");
+    console.log(`  ${c("dim", "Auto-discovered tools give broad coverage.")}`);
+    console.log(`  ${c("dim", "Custom tools let you define purpose-built queries")}`);
+    console.log(`  ${c("dim", "for specific business questions.\n")}`);
+    const wantCustom = await prompt.confirm(`  Define custom tools?`, false);
+    if (!wantCustom) {
+        console.log(`  ${c("dim", "  Skipping custom tools.")}`);
+        return;
+    }
+    const availableRoutes = state.routes.map((r) => `${r.method} ${r.path}`);
+    const availableTables = state.dbTables.map((t) => t.name);
+    while (true) {
+        console.log();
+        const name = await prompt.ask(`  ${c("cyan", "Tool name")} ${c("dim", "(e.g. get_traffic_overview):")} `);
+        if (!name)
+            break;
+        const toolName = name.replace(/[^a-zA-Z0-9_]/g, "_").toLowerCase();
+        const description = await prompt.ask(`  ${c("cyan", "Description")} ${c("dim", "(what does this tool do?):")} `);
+        if (!description)
+            break;
+        const params = [];
+        console.log(`\n  ${c("dim", "Define input parameters (press Enter with no name to finish):")}`);
+        while (true) {
+            const paramName = await prompt.ask(`    ${c("cyan", "Parameter name:")} `);
+            if (!paramName)
+                break;
+            const paramDesc = await prompt.ask(`    ${c("cyan", "Description:")} `);
+            console.log(`    ${c("dim", "Type: 1) string  2) number  3) boolean")}`);
+            const typeChoice = await prompt.ask(`    ${c("cyan", "Type")} ${c("dim", "(1/2/3, default: 1):")} `);
+            const paramType = typeChoice === "2" ? "number" : typeChoice === "3" ? "boolean" : "string";
+            const isRequired = await prompt.confirm(`    Required?`);
+            params.push({ name: paramName, type: paramType, description: paramDesc || paramName, required: isRequired });
+            console.log(`    ${c("green", "+")} Added parameter: ${c("bold", paramName)} (${paramType})`);
+        }
+        console.log(`\n  ${c("dim", "How should this tool get its data?")}`);
+        console.log(`    ${c("cyan", "1.")} Call an existing API route`);
+        console.log(`    ${c("cyan", "2.")} Run a database query`);
+        const sourceChoice = await prompt.ask(`  ${c("dim", ">")} `);
+        const customTool = {
+            name: toolName,
+            description,
+            params,
+            dataSource: sourceChoice === "2" ? "database" : "route",
+        };
+        if (sourceChoice === "2" && availableTables.length > 0) {
+            console.log(`\n  ${c("dim", "Available tables:")}`);
+            availableTables.forEach((t, i) => console.log(`    ${c("cyan", `${i + 1}.`)} ${t}`));
+            const tableChoice = await prompt.ask(`  ${c("dim", "Table number or name:")} `);
+            const tableIndex = parseInt(tableChoice) - 1;
+            customTool.tableName = availableTables[tableIndex] || tableChoice;
+            const tableInfo = state.dbTables.find((t) => t.name === customTool.tableName);
+            if (tableInfo) {
+                const scopeColumns = tableInfo.columns
+                    .filter((col) => /user_id|project_id|account_id|org_id|team_id|owner_id/.test(col.name))
+                    .map((col) => col.name);
+                if (scopeColumns.length > 0) {
+                    console.log(`\n  ${c("dim", "User scoping - filter results by:")}`);
+                    scopeColumns.forEach((col, i) => console.log(`    ${c("cyan", `${i + 1}.`)} ${col}`));
+                    console.log(`    ${c("cyan", `${scopeColumns.length + 1}.`)} No scoping (public data)`);
+                    const scopeChoice = await prompt.ask(`  ${c("dim", ">")} `);
+                    const scopeIndex = parseInt(scopeChoice) - 1;
+                    if (scopeIndex >= 0 && scopeIndex < scopeColumns.length) {
+                        customTool.scopeColumn = scopeColumns[scopeIndex];
+                    }
+                }
+            }
+        }
+        else if (sourceChoice !== "2" && availableRoutes.length > 0) {
+            console.log(`\n  ${c("dim", "Available routes:")}`);
+            availableRoutes.forEach((r, i) => console.log(`    ${c("cyan", `${i + 1}.`)} ${r}`));
+            const routeChoice = await prompt.ask(`  ${c("dim", "Route number:")} `);
+            const routeIndex = parseInt(routeChoice) - 1;
+            if (routeIndex >= 0 && routeIndex < state.routes.length) {
+                customTool.routeMethod = state.routes[routeIndex].method;
+                customTool.routePath = state.routes[routeIndex].path;
+            }
+        }
+        state.customTools.push(customTool);
+        console.log(`\n  ${c("green", "+")} Added custom tool: ${c("bold", toolName)}`);
+        const addMore = await prompt.confirm(`\n  Add another custom tool?`, false);
+        if (!addMore)
+            break;
+    }
+    if (state.customTools.length > 0) {
+        console.log(`\n  ${c("green", "+")} ${state.customTools.length} custom tool${state.customTools.length === 1 ? "" : "s"} defined.`);
+    }
+}
+function generateCustomToolsFile(state) {
+    const lines = [];
+    lines.push(`// Custom tools for your MCP server`);
+    lines.push(`// Hand-crafted tools that persist across re-scans`);
+    lines.push(`// Edit this file to customize tool behavior`);
+    lines.push(``);
+    if (state.isESM) {
+        lines.push(`import type { Express } from 'express';`);
+    }
+    lines.push(``);
+    lines.push(`export interface CustomToolDefinition {`);
+    lines.push(`  name: string;`);
+    lines.push(`  description: string;`);
+    lines.push(`  inputSchema: Record<string, unknown>;`);
+    lines.push(`  handler: (args: Record<string, unknown>) => Promise<unknown>;`);
+    lines.push(`}`);
+    lines.push(``);
+    lines.push(`export function getCustomTools(app: ${state.isESM ? "Express" : "any"}, dbUrl?: string): CustomToolDefinition[] {`);
+    lines.push(`  const tools: CustomToolDefinition[] = [];`);
+    lines.push(``);
+    for (const tool of state.customTools) {
+        const properties = [];
+        const required = [];
+        for (const param of tool.params) {
+            properties.push(`        ${param.name}: { type: "${param.type}", description: "${param.description.replace(/"/g, '\\"')}" }`);
+            if (param.required)
+                required.push(`"${param.name}"`);
+        }
+        lines.push(`  tools.push({`);
+        lines.push(`    name: "${tool.name}",`);
+        lines.push(`    description: "${tool.description.replace(/"/g, '\\"')}",`);
+        lines.push(`    inputSchema: {`);
+        lines.push(`      type: "object",`);
+        lines.push(`      properties: {`);
+        lines.push(properties.join(",\n"));
+        lines.push(`      },`);
+        if (required.length > 0) {
+            lines.push(`      required: [${required.join(", ")}],`);
+        }
+        lines.push(`    },`);
+        if (tool.dataSource === "database" && tool.tableName) {
+            lines.push(`    handler: async (args) => {`);
+            lines.push(`      if (!dbUrl) return { error: "No database connection configured" };`);
+            lines.push(`      const pg = await import("pg");`);
+            lines.push(`      const client = new pg.default.Client({ connectionString: dbUrl });`);
+            lines.push(`      try {`);
+            lines.push(`        await client.connect();`);
+            if (tool.scopeColumn) {
+                lines.push(`        const scopeValue = args.${tool.scopeColumn} as string;`);
+                lines.push(`        if (!scopeValue) return { error: "${tool.scopeColumn} is required for scoped queries" };`);
+                lines.push(`        const result = await client.query(\`SELECT * FROM ${tool.tableName} WHERE ${tool.scopeColumn} = $1 LIMIT 100\`, [scopeValue]);`);
+            }
+            else {
+                lines.push(`        const result = await client.query(\`SELECT * FROM ${tool.tableName} LIMIT 100\`);`);
+            }
+            lines.push(`        return result.rows;`);
+            lines.push(`      } finally {`);
+            lines.push(`        await client.end();`);
+            lines.push(`      }`);
+            lines.push(`    },`);
+        }
+        else if (tool.dataSource === "route" && tool.routePath) {
+            lines.push(`    handler: async (args) => {`);
+            lines.push(`      // TODO: Implement route-based handler`);
+            lines.push(`      // This tool maps to ${tool.routeMethod} ${tool.routePath}`);
+            lines.push(`      return { message: "Implement this handler to call your API" };`);
+            lines.push(`    },`);
+        }
+        else {
+            lines.push(`    handler: async (args) => {`);
+            lines.push(`      // TODO: Implement custom handler`);
+            lines.push(`      return { message: "Implement this handler" };`);
+            lines.push(`    },`);
+        }
+        lines.push(`  });`);
+        lines.push(``);
+    }
+    lines.push(`  return tools;`);
+    lines.push(`}`);
+    lines.push(``);
+    return lines.join("\n");
+}
+function validateGeneratedFiles(mcpServerPath, entryFiles) {
+    const errors = [];
+    const allFiles = [mcpServerPath, ...entryFiles];
+    for (const filePath of allFiles) {
+        if (!fs.existsSync(filePath))
+            continue;
+        const content = fs.readFileSync(filePath, "utf-8");
+        const relPath = path.basename(filePath);
+        let openBraces = 0;
+        let openParens = 0;
+        let openBrackets = 0;
+        let inString = null;
+        let inTemplateString = false;
+        for (let i = 0; i < content.length; i++) {
+            const ch = content[i];
+            const prev = i > 0 ? content[i - 1] : "";
+            if (inString) {
+                if (ch === inString && prev !== "\\")
+                    inString = null;
+                continue;
+            }
+            if (inTemplateString) {
+                if (ch === "`" && prev !== "\\")
+                    inTemplateString = false;
+                continue;
+            }
+            if (ch === "'" || ch === '"') {
+                inString = ch;
+                continue;
+            }
+            if (ch === "`") {
+                inTemplateString = true;
+                continue;
+            }
+            if (ch === "/" && content[i + 1] === "/") {
+                while (i < content.length && content[i] !== "\n")
+                    i++;
+                continue;
+            }
+            if (ch === "{")
+                openBraces++;
+            else if (ch === "}")
+                openBraces--;
+            else if (ch === "(")
+                openParens++;
+            else if (ch === ")")
+                openParens--;
+            else if (ch === "[")
+                openBrackets++;
+            else if (ch === "]")
+                openBrackets--;
+        }
+        if (openBraces !== 0)
+            errors.push(`${relPath}: Unbalanced braces (${openBraces > 0 ? "missing }" : "extra }"})`);
+        if (openParens !== 0)
+            errors.push(`${relPath}: Unbalanced parentheses (${openParens > 0 ? "missing )" : "extra )"})`);
+        if (openBrackets !== 0)
+            errors.push(`${relPath}: Unbalanced brackets (${openBrackets > 0 ? "missing ]" : "extra ]"})`);
+    }
+    return errors;
+}
 async function stepGenerate(state) {
-    printStep(5, 5, "Generating MCP server");
-    const content = fs.readFileSync(state.entryFile, "utf-8");
-    const importLine = state.isESM ? IMPORT_LINE_ESM : IMPORT_LINE_CJS;
+    printStep(6, 6, "Generating MCP server");
     const disabledRoutePaths = state.tools
         .filter((t) => t.source === "route" && !t.enabled)
         .map((t) => t.path);
@@ -435,7 +810,7 @@ async function stepGenerate(state) {
             disabledTables.add(tableName);
     }
     const configParts = [];
-    configParts.push(`app: ${state.appVarName}`);
+    configParts.push(`app`);
     if (disabledRoutes.length > 0) {
         configParts.push(`excludeRoutes: ${JSON.stringify(disabledRoutes)}`);
     }
@@ -453,38 +828,127 @@ async function stepGenerate(state) {
     if (!state.enrichmentEnabled) {
         configParts.push(`enrichment: false`);
     }
-    let setupCode;
+    const appFileDir = path.dirname(state.appFile);
+    const appFileBase = path.basename(state.appFile, path.extname(state.appFile));
+    const ext = state.isESM ? ".ts" : ".js";
+    const mcpServerPath = path.join(appFileDir, `mcp-server${ext}`);
+    const mcpServerRel = path.relative(state.root, mcpServerPath);
+    const hasCustomTools = state.customTools.length > 0;
+    const customToolsPath = path.join(appFileDir, `mcp-custom-tools${ext}`);
+    const customToolsExists = fs.existsSync(customToolsPath);
+    const importAppPath = `./${appFileBase}`;
+    let fileLines = [];
+    fileLines.push(`// Auto-generated by @hellocrossman/mcp-sdk`);
+    fileLines.push(`// This file connects your Express app to AI assistants (Claude, ChatGPT, Cursor)`);
+    fileLines.push(`// Safe to regenerate with: npx @hellocrossman/mcp-sdk init --force`);
+    fileLines.push(``);
+    if (state.isESM) {
+        if (state.appExportName === "default") {
+            fileLines.push(`import app from '${importAppPath}';`);
+        }
+        else if (state.appExportName === "app") {
+            fileLines.push(`import { app } from '${importAppPath}';`);
+        }
+        else {
+            fileLines.push(`import { ${state.appExportName} as app } from '${importAppPath}';`);
+        }
+        fileLines.push(`import { createMcpServer } from '@hellocrossman/mcp-sdk';`);
+        if (hasCustomTools || customToolsExists) {
+            fileLines.push(`import { getCustomTools } from './mcp-custom-tools';`);
+        }
+    }
+    else {
+        if (state.appExportName === "default") {
+            fileLines.push(`const app = require('${importAppPath}');`);
+        }
+        else if (state.appExportName === "app") {
+            fileLines.push(`const { app } = require('${importAppPath}');`);
+        }
+        else {
+            fileLines.push(`const { ${state.appExportName}: app } = require('${importAppPath}');`);
+        }
+        fileLines.push(`const { createMcpServer } = require('@hellocrossman/mcp-sdk');`);
+        if (hasCustomTools || customToolsExists) {
+            fileLines.push(`const { getCustomTools } = require('./mcp-custom-tools');`);
+        }
+    }
+    fileLines.push(``);
+    if (hasCustomTools || customToolsExists) {
+        configParts.push(`customTools: getCustomTools(app, process.env.DATABASE_URL)`);
+    }
+    let configStr;
     if (configParts.length <= 2) {
-        setupCode = `createMcpServer({ ${configParts.join(", ")} });`;
+        configStr = `createMcpServer({ ${configParts.join(", ")} });`;
     }
     else {
         const indent = "  ";
-        setupCode = `createMcpServer({\n${configParts.map((p) => `${indent}${p},`).join("\n")}\n});`;
+        configStr = `createMcpServer({\n${configParts.map((p) => `${indent}${p},`).join("\n")}\n});`;
     }
-    const lines = content.split("\n");
-    let lastImportIndex = -1;
-    for (let i = 0; i < lines.length; i++) {
-        if (/^import\s/.test(lines[i]) || /^const\s.*=\s*require/.test(lines[i])) {
-            lastImportIndex = i;
-        }
+    fileLines.push(configStr);
+    fileLines.push(``);
+    if (hasCustomTools) {
+        const customToolsContent = generateCustomToolsFile(state);
+        fs.writeFileSync(customToolsPath, customToolsContent);
     }
-    lines.splice(lastImportIndex + 1, 0, importLine);
-    let listenIndex = -1;
-    for (let i = lines.length - 1; i >= 0; i--) {
-        if (LISTEN_PATTERN.test(lines[i])) {
-            listenIndex = i;
-            break;
+    const mcpServerContent = fileLines.join("\n");
+    const backups = [];
+    backups.push({ path: mcpServerPath, content: fs.existsSync(mcpServerPath) ? fs.readFileSync(mcpServerPath, "utf-8") : null });
+    fs.writeFileSync(mcpServerPath, mcpServerContent);
+    let addedImportTo = [];
+    const modifiedEntries = [];
+    for (const entryFile of state.entryFiles) {
+        const entryContent = fs.readFileSync(entryFile, "utf-8");
+        if (entryContent.includes("mcp-server")) {
+            addedImportTo.push(path.relative(state.root, entryFile));
+            continue;
         }
+        backups.push({ path: entryFile, content: entryContent });
+        const entryDir = path.dirname(entryFile);
+        const importPath = `./${path.relative(entryDir, mcpServerPath).replace(/\.(ts|js)$/, "")}`;
+        const isEntryESM = checkIsESM(entryFile, state.root);
+        const importStatement = isEntryESM
+            ? `import '${importPath}';`
+            : `require('${importPath}');`;
+        const entryLines = entryContent.split("\n");
+        let lastImportIndex = -1;
+        for (let i = 0; i < entryLines.length; i++) {
+            if (/^import\s/.test(entryLines[i]) || /^const\s.*=\s*require/.test(entryLines[i]) || /^require\s*\(/.test(entryLines[i])) {
+                lastImportIndex = i;
+            }
+        }
+        const comment = `// MCP server - exposes your API to AI assistants`;
+        if (lastImportIndex >= 0) {
+            entryLines.splice(lastImportIndex + 1, 0, comment, importStatement);
+        }
+        else {
+            entryLines.unshift(comment, importStatement, "");
+        }
+        const newEntryContent = entryLines.join("\n");
+        fs.writeFileSync(entryFile, newEntryContent);
+        modifiedEntries.push({ path: entryFile, newContent: newEntryContent });
+        addedImportTo.push(path.relative(state.root, entryFile));
     }
-    const commentLine = `// MCP server - exposes your API to AI assistants (Claude, ChatGPT, Cursor)`;
-    if (listenIndex >= 0) {
-        lines.splice(listenIndex, 0, "", commentLine, setupCode);
-    }
-    else {
-        lines.push("", commentLine, setupCode);
+    const validationErrors = validateGeneratedFiles(mcpServerPath, modifiedEntries.map((e) => e.path));
+    if (validationErrors.length > 0) {
+        console.log(`\n  ${c("yellow", "!")} Validation failed. Reverting changes...`);
+        for (const err of validationErrors) {
+            console.log(`    ${c("dim", "-")} ${err}`);
+        }
+        for (const backup of backups) {
+            if (backup.content === null) {
+                try {
+                    fs.unlinkSync(backup.path);
+                }
+                catch { }
+            }
+            else {
+                fs.writeFileSync(backup.path, backup.content);
+            }
+        }
+        console.log(`  ${c("green", "+")} Changes reverted. Your files are unchanged.`);
+        console.log(`  ${c("dim", "  Please report this issue at:")} ${c("cyan", "https://github.com/hellocrossman/mcp-sdk/issues")}`);
+        return;
     }
-    fs.writeFileSync(state.entryFile, lines.join("\n"));
-    const relPath = path.relative(state.root, state.entryFile);
     const enabledCount = state.tools.filter((t) => t.enabled).length;
     console.log();
     console.log(c("green", `   +------------------------------+`));
@@ -493,10 +957,17 @@ async function stepGenerate(state) {
     console.log(c("green", `   |                              |`));
     console.log(c("green", `   +------------------------------+`));
     console.log();
-    console.log(`   ${c("green", "\u2713")} Updated ${c("bold", relPath)}`);
+    console.log(`   ${c("green", "\u2713")} Created ${c("bold", mcpServerRel)}`);
+    if (hasCustomTools) {
+        console.log(`   ${c("green", "\u2713")} Created ${c("bold", path.relative(state.root, customToolsPath))}`);
+    }
+    for (const entry of addedImportTo) {
+        console.log(`   ${c("green", "\u2713")} Updated ${c("bold", entry)}`);
+    }
     console.log();
     console.log(`   ${c("dim", "Configuration")}`);
     console.log(`   ${c("dim", "\u2502")} Tools enabled     ${c("bold", String(enabledCount))}`);
+    console.log(`   ${c("dim", "\u2502")} Custom tools      ${state.customTools.length > 0 ? c("green", `${state.customTools.length} defined`) : c("dim", "none")}`);
     console.log(`   ${c("dim", "\u2502")} Database          ${state.databaseEnabled ? c("green", "enabled") : c("dim", "disabled")}`);
     console.log(`   ${c("dim", "\u2502")} AI enrichment     ${state.enrichmentEnabled ? c("green", "enabled") : c("dim", "disabled")}`);
     console.log(`   ${c("dim", "\u2502")} Write operations  ${state.includeWrites ? c("green", "enabled") : c("dim", "disabled")}`);
@@ -568,13 +1039,16 @@ async function runWizard(specifiedFile, force) {
     const prompt = createPrompt();
     const state = {
         root: findProjectRoot(),
-        entryFile: "",
+        appFile: "",
         appVarName: "app",
+        appExportName: "app",
+        entryFiles: [],
         isESM: false,
         routePrefix: "/api",
         routes: [],
         dbTables: [],
         tools: [],
+        customTools: [],
         databaseEnabled: true,
         enrichmentEnabled: true,
         includeWrites: false,
@@ -588,6 +1062,7 @@ async function runWizard(specifiedFile, force) {
         await stepScanRoutes(state);
         await stepScanDatabase(state, prompt);
         await stepEnrichAndReview(state, prompt);
+        await stepCustomTools(state, prompt);
         await stepGenerate(state);
     }
     catch (err) {