euredact 0.6.0 → 0.7.0

package/dist/esm/rules/cues.js

@@ -90,7 +90,7 @@ export const CUES = [
         /(?<![A-Za-z0-9_])(?:phone|tel|telephone|téléphone|telefoon|telefon|telefono|teléfono|tlf|mobil|mobile|gsm|handy|sími|puh|móvil|cell|tālrunis|τηλέφωνο|τηλ)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
     // National identity number.
     [EntityType.NATIONAL_ID,
-        /(?<![A-Za-z0-9_])(?:bsn|burgerservicenummer(?:\s*\(bsn\))?|personnummer|rijksregisternummer|nationaal\s*nummer|numéro\s*national|national\s*(?:id|number)|identiteitsnummer|henkilötunnus|kennitala|cpr(?:-?nummer)?|nif|nie|dni|rr|nn|nir|insz|niss|nis|matricule|ausweisnummer|personalausweis|osobní\s*číslo|ЕГН|EGN)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
+        /(?<![A-Za-z0-9_])(?:bsn(?!r)|burgerservicenummer(?:\s*\(bsn\))?|personnummer|rijksregisternummer|nationaal\s*nummer|numéro\s*national|national\s*(?:id|number)|identiteitsnummer|henkilötunnus|kennitala|cpr(?:-?nummer)?|nif|nie|dnie?(?![A-Za-z]|[^\x00-\x7F])|rr|nn|nir|insz|niss|nis|matricule|id\s*card(?:\s*(?:no|nr|number))?|ausweisnummer|personalausweis|osobní\s*číslo|ЕГН|EGN|dow[óo]d(?:u|em)?\s*osobist(?:y|ego|ym)|nr\s*dowodu|ahv(?:-?(?:nr|nummer))?|avs)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
     // Cyprus: "ID number" in both official languages, plus the Greek abbreviation
     // ΑΔΤ (Αστυνομική Ταυτότητα). Neither has a phone reading.
     [EntityType.NATIONAL_ID,
@@ -111,16 +111,16 @@ export const CUES = [
         /(?<![A-Za-z0-9_])(?:αφμ|α\.φ\.μ\.|steuerliche\s*identifikations-?nummer|steuer-?identifikations-?nummer|steuer-?id-?nr\.?|steuer-?id|steuernummer|st\.?-?nr|stnr|tin|finanzamt\s+ist|tax\s*(?:id|no|number)|daňové\s*číslo|numer\s*podatkowy)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
     // Health insurance: the insured person.
     [EntityType.HEALTH_INSURANCE,
-        /(?<![A-Za-z0-9_])(?:versichertennummer|krankenversicherung|kvnr|kv-?nr|mutualité|ziekenfonds|aansluitingsnummer|medical\s*card(?:\s*(?:no|number))?)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
+        /(?<![A-Za-z0-9_])(?:versichertennummer|krankenversicherung|kvnr|kv-?nr|mutualité|ziekenfonds|aansluitingsnummer|medical\s*card(?:\s*(?:no|number))?|nhs(?:\s*(?:no|number))?)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
     // Healthcare provider: the clinician or practice, not the patient — the Dutch
     // AGB-code, the German LANR, the UK GMC number.
     [EntityType.HEALTHCARE_PROVIDER,
-        /(?<![A-Za-z0-9_])(?:agb-?code|lanr|bsnr|gmc(?:\s*(?:no|number|reg))?|big-?nummer|zorgverlener(?:snummer)?)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
+        /(?<![A-Za-z0-9_])(?:agb-?code|lanr|bsnr|gmc(?:\s*(?:no|number|reg))?|big(?:-?registratie)?-?(?:nummer|nr)|zorgverlener(?:snummer)?|lebenslange\s*arztnummer|betriebsst[äa]ttennummer|rpps|adeli|pwz)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
     // Company / trade register. "Companies House" and "Company Registration
     // Number" are written out: the tail allows a run-on *or* one qualifier word,
     // never a second word, so a three-word label needs to be spelled.
     [EntityType.CHAMBER_OF_COMMERCE,
-        /(?<![A-Za-z0-9_])(?:siren|siret|kbo|bce|kvk|ondernemingsnummer|ondernemingen\s+onder\s+nummer|kruispuntbank|numéro\s*d'entreprise|enterprise\s*number|handelsregister|companies\s*house(?:\s*(?:registration|reg|no|number))?|company\s*registration(?:\s*(?:number|no))?|company\s*(?:no|number|reg)|organisationsnummer|orgnr|i[čc]o|identifikační\s*číslo|ЕИК|eik|bulstat|cvr(?:-?nummer)?|virksomhedsnummer)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
+        /(?<![A-Za-z0-9_])(?:siren|siret|kbo|bce|kvk|ondernemingsnummer|ondernemingen\s+onder\s+nummer|kruispuntbank|numéro\s*d'entreprise|enterprise\s*number|handelsregister|companies\s*house(?:\s*(?:registration|reg|no|number))?|company\s*registration(?:\s*(?:number|no))?|company\s*(?:no|number|reg)|organisationsnummer|orgnr|i[čc]o|identifikační\s*číslo|ЕИК|eik|bulstat|cvr(?:-?nummer)?|virksomhedsnummer|regon|krs)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
     // VAT.
     [EntityType.VAT,
         /(?<![A-Za-z0-9_])(?:vat|btw|tva|ust|iva|moms|alv|mwst|dič|vsk)(?:(?:[A-Za-z0-9_.\-]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
@@ -130,6 +130,15 @@ export const CUES = [
     [EntityType.BANK_ACCOUNT,
         /(?<![A-Za-z0-9_])(?:sort\s*code|account\s*(?:no|number)|rekeningnummer|kontonummer|numéro\s*de\s*compte|sort-?code)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
     // Passport.
+    // Residence permit. No permit patterns exist, so a permit number was filed
+    // under whichever ID, passport or phone pattern fitted it (rules-engine#53).
+    // The tail admits the Belgian card category ("nr. B 565992336"), unmasked.
+    [EntityType.RESIDENCE_PERMIT,
+        /(?<![A-Za-z0-9_])(?:aufenthalts(?:titel|erlaubnis|karte|gestattung)|niederlassungs(?:erlaubnis|bewilligung)|verblijfs(?:vergunning|kaart|document|titel)|titre\s*de\s*s[ée]jour|carte\s*de\s*s[ée]jour|permis\s*de\s*s[ée]jour|carte\s*de\s*r[ée]sident|residence\s*(?:permit|card|document)|biometric\s*residence\s*permit|permesso\s*di\s*soggiorno|carta\s*di\s*soggiorno|kart(?:a|y|ę|ą)\s*pobytu(?:\s*cukr)?|naklejk(?:a|i|ę|ą)\s*wizow(?:a|ej|ą)|uppehållstillstånd|opholdstilladelse|oppholdstillatelse|oleskelulupa)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*(?:[A-Z]\s+)?$/i],
+    // Driving licence: Polish labels; the document number has the passport
+    // shape, so without this cue it lost the span to the passport rule (rules-engine#77).
+    [EntityType.DRIVERS_LICENSE,
+        /(?<![A-Za-z0-9_])(?:(?:nr\s*dokumentu\s*)?(?:prawo|prawa|prawem)\s*jazdy|numer\s*blankietu\s*prawa\s*jazdy)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
     [EntityType.PASSPORT,
         /(?<![A-Za-z0-9_])(?:passport(?:\s*(?:no|number))?|paspoort(?:nummer)?|reisepass(?:nummer)?|passeport|passnummer)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
     // BIC / SWIFT.
@@ -146,7 +155,7 @@ export const CUES = [
     // only thing that identifies one, which is why the engine emits this type
     // from here and nowhere else.
     [EntityType.INTERNAL_ID,
-        /(?<![A-Za-z0-9_])(?:medarbejdernummer|ansattnummer|anställningsnummer|personalnummer|personeelsnummer|matricule\s*salarié|employee\s*(?:no|number|id)|badge(?:\s*(?:no|number))?|betriebsstätten(?:nr|nummer)|grundstücks(?:nr|nummer)|dossier-?(?:nr|nummer)|aktenzeichen|osobní\s*(?:číslo\s*)?zaměstnance)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
+        /(?<![A-Za-z0-9_])(?:medarbejdernummer|ansattnummer|anställningsnummer|personalnummer|personeelsnummer|matricule\s*salarié|employee\s*(?:no|number|id)|badge(?:\s*(?:no|number))?|betriebsstätten(?:nr|nummer)|grundstücks(?:nr|nummer)|dossier-?(?:nr|nummer)|aktenzeichen|schade(?:claim|nummer|dossier)|schadens?-?(?:nummer|nr)|num[ée]ro\s*de\s*sinistre|numero\s*(?:di\s*)?sinistro|n[úu]mero\s*de\s*siniestro|skade(?:nummer|sag)|claim\s*(?:no|number|id)|collar|osobní\s*(?:číslo\s*)?zaměstnance)(?:(?:[A-Za-z0-9_]|[^\x00-\x7F])*|\s+[^\s:.\-\d,;()\/]{2,20})\s*\)?\s*[:.\-]*\s*$/i],
     // Credential. Typed SECRET because that is the type this SDK has; the
     // training pipeline's report asks for CREDENTIAL, which does not exist here.
     [EntityType.SECRET,
@@ -192,6 +201,13 @@ const RETYPABLE = new Set([
  * "Betriebsstättennr. 260326822" both landed, each reported as Czech.
  */
 const RETYPABLE_UNCORROBORATED = new Set([EntityType.NATIONAL_ID]);
+/**
+ * Retypable to RESIDENCE_PERMIT by a permit label touching the span, whatever
+ * the country support: a German eAT number fits the identity-card pattern and a
+ * Dutch permit number the passport pattern (rules-engine#53). Not a Spanish
+ * NIE, which the canon keeps NATIONAL_ID.
+ */
+const RETYPABLE_BY_PERMIT_LABEL = new Set([EntityType.NATIONAL_ID, EntityType.PASSPORT]);
 /**
  * Types a label can assert on its own.
  *
@@ -205,7 +221,7 @@ export const CUE_TARGETS = new Set([
     EntityType.HEALTH_INSURANCE, EntityType.HEALTHCARE_PROVIDER,
     EntityType.CHAMBER_OF_COMMERCE, EntityType.VAT, EntityType.POSTAL_CODE,
     EntityType.PASSPORT, EntityType.INTERNAL_ID, EntityType.BANK_ACCOUNT,
-    EntityType.SECRET,
+    EntityType.SECRET, EntityType.RESIDENCE_PERMIT,
 ]);
 /**
  * Which of those a label may also *rescue* — re-admit after its checksum
@@ -242,13 +258,17 @@ export const RESCUE_TARGETS = new Set([
  * `countryScore` is the document's support for the country the winning pattern
  * came from; see RETYPABLE_UNCORROBORATED.
  */
-export function retypedBy(text, start, entityType, countryScore) {
+export function retypedBy(text, start, entityType, countryScore, country = null) {
     const type = String(entityType);
-    if (!RETYPABLE.has(type)
-        && !(RETYPABLE_UNCORROBORATED.has(type) && countryScore === 0))
+    const general = RETYPABLE.has(type)
+        || (RETYPABLE_UNCORROBORATED.has(type) && countryScore === 0);
+    const byPermit = RETYPABLE_BY_PERMIT_LABEL.has(type) && country !== "ES";
+    if (!general && !byPermit)
         return null;
     const cued = cuedType(text, start);
     if (cued === null || cued === entityType || !CUE_TARGETS.has(String(cued)))
         return null;
+    if (!general && cued !== EntityType.RESIDENCE_PERMIT)
+        return null;
     return cued;
 }

package/dist/esm/rules/engine.js

@@ -242,12 +242,20 @@ export class RuleEngine {
             if (this.matcher.validate(m)) {
                 validated.push({ match: m, hasValidValidator: m.patternDef.validator !== null });
             }
-            else if (m.patternDef.validator !== null && !m.patternDef.requiresContext) {
-                failedSpans.push({ start: m.start, end: m.end, code: m.countryCode,
-                    etype: String(m.patternDef.entityType) });
-                if (RESCUE_TARGETS.has(String(m.patternDef.entityType))
-                    && cuedType(text, m.start) === m.patternDef.entityType)
+            else if (m.patternDef.validator !== null) {
+                const cued = RESCUE_TARGETS.has(String(m.patternDef.entityType))
+                    && cuedType(text, m.start) === m.patternDef.entityType;
+                if (!m.patternDef.requiresContext) {
+                    failedSpans.push({ start: m.start, end: m.end, code: m.countryCode,
+                        etype: String(m.patternDef.entityType) });
+                    if (cued)
+                        rescued.push(m);
+                }
+                else if (cued) {
+                    // A label-gated pattern is rescued too, but only by a cue touching the
+                    // value; it casts no demotion zone (rules-engine#75).
                     rescued.push(m);
+                }
             }
         }
         // Evidence pass: work out which countries this document belongs to, from
@@ -457,7 +465,7 @@ export class RuleEngine {
             // the value is filed as a Cypriot identity number. Dropping it also clears
             // outOfScope, which would otherwise claim the detection belongs to a
             // country the caller did not declare while naming no country at all.
-            const retyped = retypedBy(text, match.start, entityType, countryScores.get(match.countryCode) ?? 0);
+            const retyped = retypedBy(text, match.start, entityType, countryScores.get(match.countryCode) ?? 0, match.countryCode);
             if (retyped !== null) {
                 entityType = retyped;
                 country = null;

package/dist/esm/rules/suppressors.d.ts

@@ -6,6 +6,7 @@ export interface RawMatch {
     patternDef: PatternDef;
     countryCode: string;
 }
+export declare const MONTH_NAMES: string;
 /**
  * Per-document scratch space for suppressors that would otherwise re-derive the
  * same whole-document facts for every candidate.

package/dist/esm/rules/suppressors.js

@@ -1,5 +1,5 @@
 import { EntityType } from "../types.js";
-import { isRegisteredBic } from "./bicRegistry.js";
+import { isKnownInstitution, isRegisteredBic } from "./bicRegistry.js";
 import { DE_DISTRICT_CODES } from "./deDistricts.js";
 const CONTEXT_CHARS = 150;
 function getContext(text, start, end) {
@@ -21,10 +21,11 @@ const CURRENCY_WORD = "EUR|USD|GBP|CHF|ISK|SEK|NOK|DKK|PLN|CZK|HUF|RON|BGN|HRK|"
 const CURRENCY_AFTER = new RegExp(`^\\s*(?:(?:${CURRENCY_SYMBOL})|(?:${CURRENCY_WORD})${_UWB})`, "i");
 const CURRENCY_COMMA_AFTER = new RegExp(`^[.,]\\d{1,2}\\s*(?:(?:${CURRENCY_SYMBOL})|(?:${CURRENCY_WORD})${_UWB})`, "i");
 const CURRENCY_BEFORE = new RegExp(`(?:(?:${CURRENCY_SYMBOL})|\\b(?:${CURRENCY_WORD}))\\s*$`, "i");
-const AMOUNT_LABEL_BEFORE = /\b(?:Montant|Beløb|Summa|Summe|Bedrag|Amount|Total|TTC|inkl|Upphæð|Importe|Importo|Valore|Wartość|Kwota|Částka|Összeg|Sum|Beloop|Prix|Preis|Price|Loyer|Miete|Huur|Rent|Betrag)\s*(?:\w+\s*)?:?\s*$/i;
+const AMOUNT_LABEL_BEFORE = /\b(?:Montant|Beløb|Summa|Summe|Bedrag|Amount|Total|TTC|inkl|Upphæð|Importe|Importo|Valore|Wartość|Kwota|Částka|Összeg|Sum|Beloop|Prix|Preis|Price|Loyer|Miete|Huur|Rent|Betrag)(?:\s+\w+)?\s*:?\s*$/i; // second word separate: not "Rent"+"enversicherungsnummer" (rules-engine#111)
 // Use Unicode-aware word boundary via \p{L} negative lookahead instead of \b
 // because JS \b is ASCII-only and fails on Unicode letters (e.g. "München" → \bm\b matches M before ü)
-const UNIT_AFTER = /^\s*(?:kg|km|cm|mm|m[²³]|ml|mg|GB|MB|KB|TB|%|jaar|maanden|weken|dagen|uur|minuten|seconden|stuks|pcs|pieces|ans|mois|semaines|jours|heures|Jahre|Monate|Wochen|Tage|Stunden)(?![a-zA-Z\u00C0-\u024F\u0400-\u04FF])/i;
+// Horizontal space only: a unit is on the number's own line (rules-engine#51).
+const UNIT_AFTER = /^[ \t]*(?:kg|km|cm|mm|m[²³]|ml|mg|GB|MB|KB|TB|%|jaar|maanden|weken|dagen|uur|minuten|seconden|stuks|pcs|pieces|ans|mois|semaines|jours|heures|Jahre|Monate|Wochen|Tage|Stunden)(?![a-zA-Z\u00C0-\u024F\u0400-\u04FF])/i;
 // Same missing-boundary flaw: "ref" matched the tail of "kortref".
 const REFERENCE_BEFORE = /\b(?:dossier|ref\.?|referentie|reference|référence|factuurnummer|invoice\s*(?:nr|number|no)?|bestelnummer|order\s*(?:nr|number|no)?|kenmerk|ordernummer|Aktenzeichen|numéro\s*de\s*(?:dossier|facture|commande)|bestellnummer|Rechnungsnummer|artikelnr|article\s*no|contract\s*(?:nr|number|no)?|pagina|page|Seite|blz\.?|Facture\s*n[°o]?|Faktura\s*n[°or]\.?|Lasku\s*n[°or]o?\.?|Rechnung\s*(?:Nr|n[°o])?|faktura\s*(?:nr|n[°o])?|bestilling\s*(?:nr|n[°o])?|bestelling\s*n[°or]\.?|Reikningur\s*nr|ticket|incident\s*(?:report|nr|no)?|case\s*(?:nr|no|id)?|zaaknummer|meldingsnummer|Vorgangsnummer|Vorgang|Störungsmeldung|saksnummer|ärendenummer|sagsnummer|asianumero|Factuur\s*n[ro]?\.?|Nota\s*n[ro]?\.?)\s*[:.#]?\s*$/i;
 // "#" before a number marks a reference in every language in scope — a ticket,
@@ -32,9 +33,19 @@ const REFERENCE_BEFORE = /\b(?:dossier|ref\.?|referentie|reference|référence|f
 const HASH_BEFORE = /#\s*$/;
 // A short uppercase tag hyphenated to the number: "IR-43433", "INC-2024".
 const REF_PREFIX_BEFORE = /(?:^|[\s([])[A-Z]{2,5}-$/;
+// The cross-border address form, "CH-8004 Zürich": a country code hyphenated to
+// a postal code, told apart from a reference tag by position -- it opens an
+// address line and a place name follows (rules-engine#58).
+const COUNTRY_PREFIX_OPENS_LINE = /(?:^|\n|,)[ \t]*([A-Z]{2})-$/;
+const POSTAL_PREFIX_COUNTRIES = new Set([
+    "AT", "BE", "BG", "CH", "CY", "CZ", "DE", "DK", "EE", "EL", "ES", "FI",
+    "FR", "GB", "GR", "HR", "HU", "IE", "IS", "IT", "LI", "LT", "LU", "LV",
+    "MT", "NL", "NO", "PL", "PT", "RO", "SE", "SI", "SK", "UK",
+]);
 const LEGAL_BEFORE = /(?:Art(?:ikel|icle|\.)|§|Artikel|Section|Sectie|Afdeling|paragraaf|Absatz|alinéa|punt|point|Punkt|lid)\s*$/i;
-const MATH_BEFORE = /[=+\-×÷*/]\s*$/;
-const MATH_AFTER = /^\s*[=+\-×÷*/]/;
+// An operator on the same line only: a bullet or "---" on the next line is not a minus sign (rules-engine#91).
+const MATH_BEFORE = /[=+\-×÷*/][^\S\r\n]*$/;
+const MATH_AFTER = /^[^\S\r\n]*[=+\-×÷*/]/;
 // "A-1010", "B-2000", "L-1234", "CH-8000", "D-10115": a country prefix on a
 // postal code, not a minus sign.
 const COUNTRY_PREFIX_HYPHEN = /(?:^|[^A-Za-z0-9])[A-Z]{1,2}-\s*$/;
@@ -60,10 +71,11 @@ const NUMERIC_TYPES = new Set([EntityType.PHONE, EntityType.NATIONAL_ID, EntityT
 // Month names in the languages this engine covers. Long, but it is data: the
 // alternative is a proximity heuristic, and proximity is what caused the defect
 // this guards against. Kept in sync with the Python SDK's suppressors.py.
-const MONTH_NAMES = "january|february|march|april|may|june|july|august|september|october|november|december" +
+export const MONTH_NAMES = "january|february|march|april|may|june|july|august|september|october|november|december" +
     "|jan|feb|mar|apr|jun|jul|aug|sep|sept|oct|nov|dec" +
     "|januar|jänner|februar|märz|mai|juni|juli|oktober|dezember|dez|okt|mrz" +
     "|janvier|février|mars|avril|juin|juillet|août|aout|septembre|octobre|novembre|décembre|decembre" +
+    "|janv|févr|fevr|avr|juil|déc" +
     "|januari|februari|maart|mei|augustus|mrt" +
     "|gennaio|febbraio|marzo|aprile|maggio|giugno|luglio|agosto|settembre|ottobre|dicembre" +
     "|enero|febrero|abril|mayo|junio|julio|septiembre|octubre|noviembre|diciembre" +
@@ -285,7 +297,19 @@ function suppressReference(text, match) {
     if (REFERENCE_BEFORE.test(before))
         return true;
     const adjacent = text.slice(Math.max(0, match.start - 8), match.start);
-    return HASH_BEFORE.test(adjacent) || REF_PREFIX_BEFORE.test(adjacent);
+    if (HASH_BEFORE.test(adjacent))
+        return true;
+    if (!REF_PREFIX_BEFORE.test(adjacent))
+        return false;
+    return !(match.patternDef.entityType === EntityType.POSTAL_CODE &&
+        isCountryPrefixedAddress(text, match.start, match.end));
+}
+/** "CH-8004 Zürich" on an address line, not the reference "IT-20431". */
+function isCountryPrefixedAddress(text, start, end) {
+    const found = COUNTRY_PREFIX_OPENS_LINE.exec(text.slice(Math.max(0, start - 12), start));
+    return (found !== null &&
+        POSTAL_PREFIX_COUNTRIES.has(found[1]) &&
+        CITY_AFTER.test(text.slice(end, end + 24)));
 }
 function suppressLegal(text, match) {
     const applicable = LEGAL_TYPES;
@@ -338,6 +362,8 @@ function suppressRedactionPlaceholder(_text, match) {
     return KNOWN_TYPE_NAMES.has(name);
 }
 const RECENT_YEAR = /^(?:19[5-9]\d|20[0-3]\d)$/;
+// Any year a written date can carry: the date-construction test applies to all of them (rules-engine#111).
+const DATE_YEAR = /^(?:1[89]\d\d|20\d\d)$/;
 const POSTAL_CONTEXT_NEAR = /(?:postcode|postal|code\s*postal|PLZ|Postleitzahl|postnummer|postinumero|póstnúmer|zip|straat|straße|strasse|rue\s|via\s|calle\s|rua\s|ulica|utca|street|avenue|laan\s|weg\s|plein|adres|adresse|address|woonplaats|wonende|woonachtig|gevestigd|domicili|demeurant|résidant|residant|bosatt|bopæl|wohnhaft|ansässig|stad\b|ville\b|city\b|Stadt|città|ciudad|cidade|miasto|město|város)/i;
 const DATE_KEYWORD_NEAR = /(?:født|fødselsdato|fødsel|Fødselsdato|född|födelsedatum|födelsedag|syntynyt|syntymäaika|fæddur|fæðingardagur|geboren|geboortedatum|Geburtsdatum|nascido|nacido|data di nascita|nato il|nata il|Tiltr[æa]delsesdato|Tiltredelsesdato|datum|date\b|Datum|jaar|year|année|Jahr|since|sinds|depuis|seit|\d{2}\.\d{2}\.|(?:januar|februar|marts|april|maj|juni|juli|august|september|oktober|november|december|januari|februari|mars|mei|juin|juillet|août))/i;
 // A sentence boundary: a full stop, question or exclamation mark followed by
@@ -367,14 +393,27 @@ function sentenceAround(text, start, end, reach = 160) {
 const POSTAL_LABEL_TOUCHING = new RegExp(`(?:${POSTAL_CONTEXT_NEAR.source})[\\s:.\\-]{0,4}$`, "i");
 // A capitalised place name after the code: "2000 Antwerpen". A following label
 // ("1970 Fødselsnummer:") is excluded by the colon.
-const CITY_AFTER = /^[ \t](?!\w+\s*:)[A-ZÀ-ÞŁŠŽ][\w\-']{2,}/u;
+// `\p{L}\p{N}_` rather than `\w`: JS `\w` is ASCII-only, so "8004 Zürich" failed
+// at the ü here while Python's Unicode `\w` accepted it (rules-engine#58).
+const CITY_AFTER = /^[ \t](?![\p{L}\p{N}_]+\s*:)[A-ZÀ-ÞŁŠŽ][\p{L}\p{N}_\-']{2,}/u;
 // Every position is local to the value or inside its own sentence. Proximity to
 // an address *word* anywhere in a 300-character window is what the old rescue
 // asked, and that is a neighbourhood rather than a position (rules-engine#32).
+/**
+ * The comma of an address line: the word before it is a place name or a number.
+ * "myocardial infarction, 2016" is a year in a list (rules-engine#111).
+ */
+const ADDRESS_COMMA = /(?<!\S)(?:[A-ZÀ-Þ\d][^\s,]*|[^\s,]*\]),[ \t]*$/;
+/**
+ * A redaction placeholder: "[POSTAL_CODE]" holds the words the address test
+ * looks for, so on masked text it made every year in its sentence a postcode
+ * (rules-engine#111). A masked value is no address word.
+ */
+const MASKED_VALUE = /\[[A-Z][A-Z_]*\]/g;
 function yearSitsInAddressStructure(text, start, end) {
     const before = text.slice(Math.max(0, start - 28), start);
     // "Amsterdam, 2026" -- the comma of an address line.
-    if (/,[ \t]*$/.test(before))
+    if (ADDRESS_COMMA.test(before))
         return true;
     // "PLZ: 2011" -- a postal label with nothing but punctuation between.
     if (POSTAL_LABEL_TOUCHING.test(before))
@@ -386,13 +425,13 @@ function yearSitsInAddressStructure(text, start, end) {
     // 12, rustige ligging in 2018, vlakbij openbaar vervoer." is an Antwerp
     // postal code in prose; the false positives put the year and the address in
     // different sentences.
-    return POSTAL_CONTEXT_NEAR.test(sentenceAround(text, start, end));
+    return POSTAL_CONTEXT_NEAR.test(sentenceAround(text, start, end).replace(MASKED_VALUE, " "));
 }
 function suppressYearAsPostal(text, match) {
     if (match.patternDef.entityType !== EntityType.POSTAL_CODE)
         return false;
     const clean = match.text.trim();
-    if (!RECENT_YEAR.test(clean))
+    if (!DATE_YEAR.test(clean))
         return false;
     // A date construction *touching* the candidate settles it, whatever the rest
     // of the document says. Without this, the postal-context test below rescued
@@ -404,6 +443,8 @@ function suppressYearAsPostal(text, match) {
         return true;
     if (DATE_AFTER.test(text.slice(match.end, match.end + 8)))
         return true;
+    if (!RECENT_YEAR.test(clean))
+        return false;
     const [before, after] = getContext(text, match.start, match.end);
     const context = before + after;
     // Keep as postal code only when the value sits in address *structure* --
@@ -411,10 +452,6 @@ function suppressYearAsPostal(text, match) {
     // words was the defect rather than the keyword list.
     if (yearSitsInAddressStructure(text, match.start, match.end))
         return false;
-    // Keep if preceded by comma+space (address pattern: "Amsterdam, 2026")
-    const immediateBefore = text.slice(Math.max(0, match.start - 3), match.start);
-    if (/,\s*$/.test(immediateBefore))
-        return false;
     // Suppress if date keyword nearby (birth date, employment date, etc.)
     if (DATE_KEYWORD_NEAR.test(context))
         return true;
@@ -457,12 +494,26 @@ const TOWN_AFTER = /^\s*[A-ZÀ-ÞĀ-Ž]/;
  * between the marker and the number, so allow exactly one.
  */
 const EXTENSION_BEFORE = /(?<![A-Za-z0-9_])(?:toest(?:el)?|ext|extension|poste|durchwahl|doorkiesnummer|tst|nebenstelle)\.?\s*(?:[a-zà-ÿ]{2,10}\s*)?[:.]?\s*$/i;
+/**
+ * What else a bare digit run after these is (rules-engine#111): a head count
+ * ("Employees: 214"), a standard ("ISO/IEC 27001"), a product model with an
+ * inner capital ("Dell OptiPlex 7090"). Not the digits after "[PHONE]": the
+ * rest of a number an earlier pass cut short, safer masked as a postcode.
+ */
+const COUNT_LABEL_BEFORE = /(?<![A-Za-z0-9_])(?:employees|headcount|staff|mitarbeiter(?:innen)?|beschäftigte|werknemers|medewerkers|employés|salariés|effectifs?|dipendenti|empleados|pracowników|zaměstnanců)\s*[:=]?\s*$/i;
+const NOT_POSTAL_BEFORE = /(?<![A-Za-z0-9_])(?:(?:ISO(?:\/IEC)?|IEC|EN|DIN(?:\s+EN)?|NEN(?:-EN)?|NF\s+EN|BS(?:\s+EN)?|PN-EN|ÖNORM)[\s\-]*|[A-Za-z]*[a-z][A-Z][A-Za-z]*\s+)$/;
+/** A thousands group of an amount: the "750" of "£28,750,000". */
+const GROUP_BEFORE = /\d[,.]$/;
+const GROUP_AFTER = /^[,.]\d{3}(?!\d)/;
 /** Suppress a postal code the word in front of it rules out. */
 function suppressPostalAfterDisqualifyingWord(text, match) {
     if (match.patternDef.entityType !== EntityType.POSTAL_CODE)
         return false;
     const before = text.slice(Math.max(0, match.start - 24), match.start);
-    if (EXTENSION_BEFORE.test(before))
+    if (EXTENSION_BEFORE.test(before) || COUNT_LABEL_BEFORE.test(before)
+        || NOT_POSTAL_BEFORE.test(before))
+        return true;
+    if (GROUP_BEFORE.test(before) && GROUP_AFTER.test(text.slice(match.end, match.end + 5)))
         return true;
     return RECENT_YEAR.test(match.text.trim())
         && (YEAR_WORD_BEFORE.test(before) || YEAR_VERB_BEFORE.test(before))
@@ -473,10 +524,18 @@ function suppressPhoneServiceNumber(_text, match) {
         return false;
     return SERVICE_NUMBER.test(match.text);
 }
-function suppressPhoneDateOverlap(_text, match) {
+// A date and the hour of a time, "07.10.2026 08" out of "07.10.2026 08:42":
+// the French phone pattern took it as five pairs (rules-engine#101). Only when
+// the minutes follow, so the stamp is certain.
+const DATE_THEN_HOUR = /^\d{2}([-/.])\d{2}\1\d{4}\s+\d{1,2}$/;
+const MINUTES_AFTER = /^:\d{2}(?!\d)/;
+function suppressPhoneDateOverlap(text, match) {
     if (match.patternDef.entityType !== EntityType.PHONE)
         return false;
-    return DATE_PATTERN_FULL.test(match.text.trim());
+    const candidate = match.text.trim();
+    if (DATE_PATTERN_FULL.test(candidate))
+        return true;
+    return DATE_THEN_HOUR.test(candidate) && MINUTES_AFTER.test(text.slice(match.end, match.end + 3));
 }
 // Standards and classification prefixes that are plate-shaped once a letter and
 // digits follow: "ATC-N06", "ICD-O3". None is a German district code, but the
@@ -489,6 +548,16 @@ const NOT_CITY_CODES = new Set([
     "BE", "DE", "EU", "NL", "LU", "WS", "SS", "IP",
 ]);
 const CURRENCY_PLATE = /^(?:EUR|USD|GBP|CHF|SEK|NOK|DKK|ISK|CZK|PLN|HUF|RON|BGN|HRK)\s/i;
+const ALNUM = /[\p{L}\p{N}]/u;
+/** Characters that join a token to more of an identifier (rules-engine#50, #81). */
+const ID_CONNECTORS = "-/._+";
+/** A reference marker directly before the token: "#FR-S2", "№ …", "n° …". */
+const REFERENCE_MARK_BEFORE = /(?:#|№|(?<![A-Za-z])[nN][°º])\s?$/;
+/** A connector glues [start, end) to a letter or digit outside it. */
+function joinedToMore(text, start, end) {
+    return ((end + 1 < text.length && ID_CONNECTORS.includes(text[end]) && ALNUM.test(text[end + 1])) ||
+        (start >= 2 && ID_CONNECTORS.includes(text[start - 1]) && ALNUM.test(text[start - 2])));
+}
 function suppressPlateInCompound(text, match) {
     if (match.patternDef.entityType !== EntityType.LICENSE_PLATE)
         return false;
@@ -500,6 +569,18 @@ function suppressPlateInCompound(text, match) {
         if (/[A-Za-zÄÖÜäöüß]{2,}-$/.test(before))
             return true;
     }
+    // A plate is a token of its own: joined by a connector to more of an
+    // identifier ("TF-284-KL-00874", "FR-S2/2026") it is a segment of a reference
+    // (rules-engine#50, #81). A spaced dash or slash does not join.
+    if (joinedToMore(text, match.start, match.end))
+        return true;
+    // After a reference marker ("Ref #FR-S2") it is a reference, unless a plate
+    // cue says otherwise (rules-engine#81).
+    if (REFERENCE_MARK_BEFORE.test(text.slice(Math.max(0, match.start - 4), match.start))) {
+        const [b, a] = getContext(text, match.start, match.end);
+        if (!PLATE_CUE_NEAR.test(b + a))
+            return true;
+    }
     const matched = match.text.trim();
     const parts = matched.split(/[\s\-]+/);
     // A standards or classification reference, not a plate — unless a plate cue
@@ -829,10 +910,34 @@ function suppressBicWithoutEvidence(text, match, scratch) {
     // The token itself is blanked out so it cannot vouch for itself.
     const unit = structuralUnit(text, match.start, match.end).split(token).join(" ".repeat(token.length));
     if (BIC_KEYWORD.test(unit) || IBAN_SHAPE.test(unit) || BANK_BLOCK.test(unit)) {
+        if (bicShapedWord(text, match.start, match.end, token))
+            return true;
         return occursAsLowercaseWord(text, token, scratch);
     }
     return true;
 }
+/** A personal title right before the token: "Dr. HOFFMANN", "Mme JANSSENS". */
+const TITLE_BEFORE = /(?<![A-Za-z])(?:dr|prof|mr|mrs|ms|mme|mlle|m|herr|frau|dhr|mevr|sig|sra?)\.?\s+$/i;
+const LETTER = /\p{L}/u;
+/** A BIC/SWIFT label touching the token: "BIC: ", "SWIFT-Code:\n", "Code SWIFT : ", "BIC Bank A: ". */
+const BIC_LABEL_BEFORE = /(?<![A-Za-z])(?:bic|swift)(?:[\s/\-]*(?:code|swift|bic))?(?:\s+bank\s+\w{1,3})?[\s:.\-()]*$/i;
+/**
+ * A registry miss sitting where only a word or a name can (rules-engine#57):
+ * joined to a word by a hyphen ("NGUYEN-HOFFMANN"), right after a personal
+ * title ("Dr. HOFFMANN"), or letters only (eight, or eleven without an `XXX`
+ * branch: "BETALING", "MAANDELIJKS") that the GLEIF mapping does not know and
+ * no BIC/SWIFT label touches.
+ */
+function bicShapedWord(text, start, end, token) {
+    if ((start >= 2 && text[start - 1] === "-" && LETTER.test(text[start - 2])) ||
+        (text[end] === "-" && end + 1 < text.length && LETTER.test(text[end + 1])))
+        return true;
+    if (TITLE_BEFORE.test(text.slice(Math.max(0, start - 8), start)))
+        return true;
+    return /^[A-Za-z]+$/.test(token) && !(token.length === 11 && token.endsWith("XXX"))
+        && !isKnownInstitution(token)
+        && !BIC_LABEL_BEFORE.test(text.slice(Math.max(0, start - 30), start));
+}
 // ── Postal code: digits belonging to a longer identifier ────────────────
 // An identifier label immediately before the digits. A postal code is never
 // introduced this way; an SVNr, policy number or service number always is.
@@ -852,7 +957,14 @@ const DIALLING_PREFIX_BEFORE = /\+\d{1,3}[\d\s\-().]*$/;
 // read as a country-prefixed address: in "PV-2026-LU-09143" the `LU` is
 // preceded by `-` and the German five-digit postal pattern kept `09143`
 // (rules-engine#31).
-const COUNTRY_PREFIXED = /(?:^|[^A-Za-z0-9\-])[A-Z]{1,2}$/;
+const COUNTRY_PREFIXED = /(?:^|[^A-Za-z0-9\-])([A-Z]{1,3})$/;
+// Postal country prefixes and the length of that country's postcode: any one or two capitals
+// used to pass, so "K-40817" and "B-51823" were country-prefixed postcodes (rules-engine#111).
+const POSTAL_PREFIX_DIGITS = { A: 4, AT: 4, B: 4, BE: 4, BG: 4, CH: 4, CY: 4, CZ: 5, D: 5, DE: 5, DK: 4, E: 5, EE: 5, ES: 5, F: 5, FI: 5, FIN: 5, FR: 5, GR: 5, H: 4, HR: 5, I: 5, IT: 5, L: 4, LT: 5, LU: 4, LV: 4, N: 4, NL: 4, NO: 4, P: 4, PL: 5, PT: 4, RO: 6, S: 5, SE: 5, SI: 4, SK: 5, SLO: 4 };
+function countryPrefixed(before, digits) {
+    const m = COUNTRY_PREFIXED.exec(before);
+    return m !== null && POSTAL_PREFIX_DIGITS[m[1]] === digits.length;
+}
 /**
  * Suppress bare digit runs that belong to a longer number, not an address.
  *
@@ -868,8 +980,15 @@ function suppressPostalInLongerIdentifier(text, match) {
     if (match.patternDef.entityType !== EntityType.POSTAL_CODE)
         return false;
     const clean = match.text.trim();
-    if (!/^\d+$/.test(clean))
+    if (!/^\d+$/.test(clean)) {
+        // A structured form glued on by a hyphen is the tail of a reference: "CPS-HR-2026-019" (#111).
+        const glued = text.slice(Math.max(0, match.start - 2), match.start);
+        if (glued.length === 2 && glued[1] === "-" && /[A-Za-z0-9]/.test(glued[0])) {
+            const m = COUNTRY_PREFIXED.exec(text.slice(0, match.start - 1));
+            return !(m && m[1] in POSTAL_PREFIX_DIGITS);
+        }
         return false;
+    }
     const beforeChar = match.start > 0 ? text[match.start - 1] : "";
     const afterChar = match.end < text.length ? text[match.end] : "";
     const prevPrev = match.start >= 2 ? text[match.start - 2] : "";
@@ -888,7 +1007,10 @@ function suppressPostalInLongerIdentifier(text, match) {
         return true;
     if (afterChar === "-" && /\d/.test(nextNext))
         return true;
-    if (beforeChar === "-" && !COUNTRY_PREFIXED.test(text.slice(0, match.start - 1)))
+    // A hyphenated chain goes on after it: "réf. : L-2025-HD-0412" is a reference (#111).
+    if (/^-[A-Za-z0-9]+-/.test(text.slice(match.end, match.end + 12)))
+        return true;
+    if (beforeChar === "-" && !countryPrefixed(text.slice(0, match.start - 1), clean))
         return true;
     // A further digit group on the same line: "1268 040390", "1234 5678 925",
     // "+43 664 8213 907". Horizontal whitespace only — a digit on the *next*
@@ -952,10 +1074,156 @@ function suppressRequiresContext(text, match) {
     if (DELIMITED_FIELD_TYPES.has(match.patternDef.entityType) &&
         fillsADelimitedField(text, match.start, match.end))
         return false;
+    if (DATE_LABEL_TYPES.has(match.patternDef.entityType)) {
+        return !labelsThisDate(text, match.start, match.end, match.patternDef.contextKeywords, match.patternDef.entityType);
+    }
     const [before, after] = getContext(text, match.start, match.end);
     const context = (before + " " + after).toLowerCase();
     return !match.patternDef.contextKeywords.some(kw => context.includes(kw.toLowerCase()));
 }
+/** Date types decided by a label: DOB and DATE_OF_DEATH share one date shape. */
+const DATE_LABEL_TYPES = new Set([EntityType.DOB, EntityType.DATE_OF_DEATH]);
+/** Any common numeric date, to tell whether a label belongs to another date. */
+// A masked date counts as one: the gateway's rules pass reads SDK-masked text (rules-engine#111).
+// ... and a written-month date, now a DOB shape of its own (rules-engine#115).
+const ANY_DATE = new RegExp(String.raw `\d{1,4}[/.\-]\d{1,2}[/.\-]\d{2,4}|\[(?:dob|date_of_death)\]|(?<![A-Za-z0-9_])\d{1,2}\.?\s+(?:` + MONTH_NAMES + String.raw `)\.?\s+\d{4}(?![A-Za-z0-9_])`, "i");
+/**
+ * True when one of `keywords` is this date's own label: before the date with no
+ * other date between, or after it inside the date's own sentence. Anywhere in
+ * the window typed every date from whichever date label the document carried
+ * (rules-engine#52).
+ */
+/** A date followed by a list separator: an item of the list a label introduces. */
+const LIST_ITEM = /\d{1,4}[/.\-]\d{1,2}[/.\-]\d{2,4}\s*(?:,|;|–|&|\band\b|\ben\b|\bet\b|\bund\b|\bor\b|\bof\b|\bou\b|\boder\b|\brespectievelijk\b|\bbzw\.?)\s*/g;
+/** Punctuation and at most two short words ("e.g.", "bv.", "op") between label and date. */
+const LABEL_TAIL = /^[\s:.,()\-]*(?:\p{L}{1,4}(?:\.\p{L}{1,2})*\.?(?:[\s:.,()\-]+|$)){0,2}$/u;
+/** The birth sign "°" directly before the date, but not the number sign "n°". */
+const BIRTH_SIGN = /(?<![a-z])°\s?$/;
+/** No other date between a label and the date, except items of its list. */
+function nothingButAListBetween(gap) {
+    if (!ANY_DATE.test(gap))
+        return true;
+    const rest = gap.replace(LIST_ITEM, " ");
+    return !ANY_DATE.test(rest) && LABEL_TAIL.test(rest);
+}
+/**
+ * Where `keyword` occurs in the lower-cased `haystack`, or -1. An all-capitals
+ * keyword is an abbreviation and counts only as a word of its own: "DOB" is a
+ * label, the "dob" in Polish "dobrowolnej" is not (rules-engine#100); a plural
+ * "s" may follow ("DOBs e.g. …"). Other
+ * keywords still match inside a longer word, which inflected forms need.
+ */
+function keywordAt(haystack, keyword, last) {
+    const kw = keyword.toLowerCase();
+    if (keyword !== keyword.toUpperCase() || keyword === kw) {
+        return last ? haystack.lastIndexOf(kw) : haystack.indexOf(kw);
+    }
+    const isLetter = (c) => c !== "" && c.toLowerCase() !== c.toUpperCase();
+    const hits = [];
+    for (let i = haystack.indexOf(kw); i !== -1; i = haystack.indexOf(kw, i + 1)) {
+        let next = i + kw.length;
+        if (haystack[i - 1] === "[" && haystack[next] === "]")
+            continue; // a placeholder ("[DOB]"), not a label (#111)
+        if (haystack[next] === "s")
+            next++;
+        if (!isLetter(haystack.slice(i - 1, i)) && !isLetter(haystack.slice(next, next + 1))) {
+            hits.push(i);
+        }
+    }
+    if (hits.length === 0)
+        return -1;
+    return last ? hits[hits.length - 1] : hits[0];
+}
+function labelsThisDate(text, start, end, keywords, entityType) {
+    const [before, after] = getContext(text, start, end);
+    const lowerBefore = before.toLowerCase();
+    const lowerAfter = after.toLowerCase();
+    // A label on an earlier line counts only when the date opens its own line or
+    // the label was asked as a question (a call transcript's answer turn);
+    // a column header is a fallback and never overrules a label of the date's own.
+    const lineStart = lowerBefore.lastIndexOf("\n") + 1;
+    const opensLine = lowerBefore.slice(lineStart).replace(/[ \t:|;*\-•(\[]/g, "") === "";
+    if (entityType === EntityType.DOB && BIRTH_SIGN.test(lowerBefore))
+        return true;
+    for (const keyword of keywords) {
+        const kw = keyword.toLowerCase();
+        const i = keywordAt(lowerBefore, keyword, true);
+        if (i >= 0 && nothingButAListBetween(lowerBefore.slice(i + kw.length))
+            && (i >= lineStart || opensLine
+                || lowerBefore.slice(i + kw.length, lineStart).includes("?")))
+            return true;
+        const j = keywordAt(lowerAfter, keyword, false);
+        if (j >= 0) {
+            const gap = lowerAfter.slice(0, j);
+            if (!ANY_DATE.test(gap) && !SENTENCE_BREAK.test(gap)
+                && !LEADS_TO_A_DATE.test(lowerAfter.slice(j + kw.length)))
+                return true;
+        }
+    }
+    const header = columnHeader(text, start);
+    return header !== null && keywords.some(kw => keywordAt(header, kw, false) >= 0);
+}
+/**
+ * A label running straight into a date of its own introduces that date, not the
+ * one before it ("Verstorben am 01.02.2020, geboren am 12.03.1940").
+ */
+// ... or into a value already masked ("né le [DOB]"): the label is that value's (rules-engine#111).
+const LEADS_TO_A_DATE = new RegExp(String.raw `^[\s:.\-]*(?:[a-zà-ÿ]{1,3}[\s:.]+)?(?:\d{1,4}[/.\-]\d{1,2}[/.\-]\d{2,4}|\[[a-z_]+\]|\d{1,2}\.?\s+(?:` + MONTH_NAMES + String.raw `)\.?\s+\d{4})`, "i");
+/** Field separators a table row may use. */
+const COLUMN_SEPARATORS = [";", "|", "\t", ","];
+/**
+ * The lower-cased header cell above the value, if it sits in a table: in a table
+ * the column decides the label, not proximity. A header is one of the three
+ * lines above, split by the row's separator into the same number of cells.
+ */
+function columnHeader(text, start) {
+    const lineStart = text.lastIndexOf("\n", start - 1) + 1;
+    const lineEndAt = text.indexOf("\n", start);
+    const line = text.slice(lineStart, lineEndAt >= 0 ? lineEndAt : text.length);
+    // The three lines above, by lastIndexOf: splitting the whole prefix was
+    // quadratic in the document, once per date candidate.
+    let aboveStart = lineStart - 1;
+    for (let k = 0; k < 3 && aboveStart >= 0; k++) {
+        aboveStart = aboveStart === 0 ? -1 : text.lastIndexOf("\n", aboveStart - 1);
+    }
+    const above = lineStart ? text.slice(aboveStart + 1, Math.max(0, lineStart - 1)).split("\n") : [];
+    for (const sep of COLUMN_SEPARATORS) {
+        if (!line.includes(sep))
+            continue;
+        const cells = line.split(sep);
+        const column = text.slice(lineStart, start).split(sep).length - 1;
+        for (const header of [...above].reverse()) {
+            // A "label : value" field with a comma in its value is not a header (#111).
+            if (header.includes(":"))
+                continue;
+            const heads = header.split(sep);
+            if (heads.length === cells.length && !ANY_DATE.test(header))
+                return heads[column].toLowerCase();
+        }
+    }
+    return null;
+}
+/** A dotted MAC shape glued to more of a reference is part of it: the tail of
+ *  "WSO-II.6151.4471.2025" (rules-engine#105). Dotted form only. */
+function suppressMacInReference(text, match) {
+    if (match.patternDef.entityType !== EntityType.MAC_ADDRESS || !match.text.includes("."))
+        return false;
+    return joinedToMore(text, match.start, match.end);
+}
+/** A card number is never carved out of a longer run of digit groups: a
+ *  four-digit group joined by the card's own separator on either side means the
+ *  run is longer, e.g. a Polish account number (rules-engine#106). */
+function suppressCardInsideDigitRun(text, match) {
+    if (match.patternDef.entityType !== EntityType.CREDIT_CARD)
+        return false;
+    const sep = [...match.text].find(c => !/\d/.test(c)) ?? "";
+    if (!sep)
+        return false;
+    const s = sep.replace(/[-\\^$.*+?()[\]{}|]/g, "\\$&");
+    const before = text.slice(Math.max(0, match.start - 6), match.start);
+    const after = text.slice(match.end, match.end + 6);
+    return new RegExp(`(?<!\\d)\\d{4}${s}$`).test(before) || new RegExp(`^${s}\\d{4}(?!\\d)`).test(after);
+}
 const TYPE_SUPPRESSORS = {
     [EntityType.PHONE]: [suppressCurrency, suppressUnits, suppressReference, suppressMath, suppressPhoneServiceNumber, suppressPhoneInsideAccountRun, suppressPhoneDateOverlap, suppressPhoneAsNumberRange],
     [EntityType.NATIONAL_ID]: [suppressCurrency, suppressUnits, suppressReference, suppressLegal, suppressMath, suppressNatidAsPassport, suppressSeNatidAsOrg],
@@ -967,6 +1235,8 @@ const TYPE_SUPPRESSORS = {
     [EntityType.LICENSE_PLATE]: [suppressPlateInCompound, suppressDePlateUnknownDistrict, suppressPlateAsCurrencyAmount],
     [EntityType.SECRET]: [suppressSecretOverStructured, suppressSecretNotASecret],
     [EntityType.CHAMBER_OF_COMMERCE]: [suppressReference],
+    [EntityType.MAC_ADDRESS]: [suppressMacInReference],
+    [EntityType.CREDIT_CARD]: [suppressCardInsideDigitRun],
 };
 export function shouldSuppress(text, match, scratch) {
     if (suppressSequential(text, match))