- New mongo dialect: find/count/distinct/aggregate + explain
- Allowlist-based guard (22 adversarial cases): blocks $out/$merge, $function/$accumulator/$where, cross-DB $lookup, deep nesting
- Sample-based schema inference (describe_table)
- Mongo-aware audit with PII redaction for command structures
- Dev-install scripts (bash + PowerShell) for iterative local installs
- CI: mongo service + E2E job; sync now installs --extra mongo
- Docs: updated architecture, threat model, setup guide for MongoDB
- Tests: +55 mongo unit/adversarial/E2E cases (274 total, 87% coverage)