feat(extractor): add COBOL language extractor

[Abdul535]

What does this PR do?

• add a deterministic COBOL extractor supporting fixed and free source formats
• extract programs, sections, paragraphs, data items, copybooks, PERFORM, and static CALL relationships
• ignore dynamic calls, quoted call-like text, and EXEC blocks, with fixtures and malformed-input coverage

Type of change

• Bug fix
• New feature
• Documentation
• Tests or CI
• Refactor
• Security fix

How was this tested?

• 4 passed in the focused COBOL suite
• Ruff passed
• Pyright passed with 0 errors
• graphify update . completed

Graphify-specific checklist

• I added or updated tests for behavior changes.
• I updated documentation or confirmed that no documentation is needed.
• I updated generated skill artifacts when changing their source fragments.
• I considered compatibility across supported Python versions.
• I confirmed that no API keys, generated graph data, or local-only files are included.

[graphify-labs]

Graphify reviewed this change.

Worth a look — the grounded gate found no coupling regressions or blocking issues, but 3 advisory finding(s) below merit a look before merge.

---

Graphify review — findings

Adds a COBOL extractor that parses fixed- and free-format source (auto-detecting the format, joining fixed-format continuations, and skipping EXEC SQL/CICS blocks) to emit program, paragraph, section, and data-item nodes plus contains, PERFORM, COPY, and CALL edges. Wires .cbl, .cob, .cobol, and .cpy through detection's CODE_EXTENSIONS, the analyze language-family map, and extract's dispatch/family/case-insensitive tables so COBOL files are recognized and routed to extract_cobol. Registers the extractor in the LANGUAGE_EXTRACTORS registry and adds fixtures and tests covering fixed/free format, copybooks, calls, and exec blocks.

Worth a look

• Free/fixed format heuristic misclassifies short valid fixed-format files as free — graphify/extractors/cobol.py:47 · Escalate · medium
  • agreed by 2 of 2 members but NOT verified (no proof, no reproducing execution) — consensus is not a verdict; needs human review
• Fixed-format COBOL with sequence numbers is parsed as free format — graphify/extractors/cobol.py:43 · Escalate · medium
  • agreed by 2 of 2 members but NOT verified (no proof, no reproducing execution) — consensus is not a verdict; needs human review
• COPY inside a string literal creates a phantom import — graphify/extractors/cobol.py:183 · Escalate · medium
  • agreed by 2 of 2 members but NOT verified (no proof, no reproducing execution) — consensus is not a verdict; needs human review

Analysis details — impact, health, verification

Impact & health

Graphify review

Impact — 2976 functions depend on the 425 functions this change touches.

Health — this change adds coupling hotspots:

• new: extract() — 660 callers, 45 callees
• new: _rebuild_code() — 142 callers, 54 callees
• new: detect() — 112 callers, 15 callees
• new: to_obsidian() — 38 callers, 14 callees
• new: _extract_generic() — 18 callers, 29 callees
• new: save_manifest() — 40 callers, 11 callees
• new: to_json() — 58 callers, 7 callees
• new: extract_js() — 87 callers, 4 callees
• …and 77 more — each is listed as a finding

Verification — 2976 functions in the blast radius were not formally verified this run (proofs are advisory here).

Gate & verification

graphify gate

PASS — objectively clean (no health regressions, tests not run — proofs not run this pass (advisory)). Grounded, not self-assessed.

Advisory (not blocking):

• verification_scope: 2673 function(s) in the blast radius were not formally verified this run

Test selection

Test selection

291 of 291 test file(s) selected (100%) via static blast radius.

Escalated to a full run for safety — the selection is not trustworthy on its own (see below). CI should run the whole suite.

• tests/test_affected_cli.py — full-run-safety
• tests/test_affected_member_seed.py — full-run-safety
• tests/test_agents_platform.py — full-run-safety
• tests/test_analyze.py — impact, full-run-safety
• tests/test_anthropic_custom_endpoint.py — full-run-safety
• tests/test_antigravity_install.py — full-run-safety
• tests/test_apm_fallback_version.py — full-run-safety
• tests/test_architecture_doc.py — full-run-safety
• tests/test_astro_extraction.py — impact, full-run-safety
• tests/test_astro_import_ids.py — impact, full-run-safety
• tests/test_atomic_canvas_export.py — impact, full-run-safety
• tests/test_atomic_version_stamp.py — full-run-safety
• tests/test_atomic_writes.py — impact, full-run-safety
• tests/test_backend_env_isolation.py — full-run-safety
• tests/test_backend_extras.py — full-run-safety
• tests/test_benchmark.py — full-run-safety
• tests/test_benchmark_raw_graph.py — full-run-safety
• tests/test_build.py — impact, full-run-safety
• tests/test_build_merge_dedup_scope.py — full-run-safety
• tests/test_build_merge_hyperedges_and_prune.py — full-run-safety
• tests/test_build_merge_shrink_guard.py — full-run-safety
• tests/test_builtin_global_type_refs.py — impact, full-run-safety
• tests/test_cache.py — full-run-safety
• tests/test_callflow_html.py — full-run-safety
• tests/test_cargo_introspect.py — full-run-safety
• tests/test_carried_hyperedge_remap.py — impact, full-run-safety
• tests/test_case_sensitive_resolution.py — impact, full-run-safety
• tests/test_charmap_encoding.py — impact, full-run-safety
• tests/test_chunking.py — impact, full-run-safety
• tests/test_cjs_module_extension.py — impact, full-run-safety
• tests/test_claude_cli_backend.py — impact, full-run-safety
• tests/test_claude_md.py — full-run-safety
• tests/test_cli_broken_pipe.py — full-run-safety
• tests/test_cli_export.py — impact, full-run-safety
• tests/test_cli_help.py — full-run-safety
• tests/test_cluster.py — full-run-safety
• tests/test_cobol_extractor.py — impact, changed-test, full-run-safety
• tests/test_codebuddy.py — full-run-safety
• tests/test_community_hub_labels.py — full-run-safety
• tests/test_community_labels_skill.py — impact, full-run-safety
• tests/test_confidence.py — impact, full-run-safety
• tests/test_corrupt_graph_json.py — full-run-safety
• tests/test_cpp_nested_and_cli.py — impact, full-run-safety
• tests/test_cpp_objc_cross_file_calls.py — impact, full-run-safety
• tests/test_cpp_preprocess.py — full-run-safety
• tests/test_cross_extension_reexport_self_cycle.py — impact, full-run-safety
• tests/test_cross_language_call_resolution.py — impact, full-run-safety
• tests/test_cross_repo_external_call_guards.py — impact, full-run-safety
• tests/test_cross_repo_member_calls.py — impact, full-run-safety
• tests/test_cross_repo_shared_types.py — full-run-safety
• … and 241 more

changed code file(s) with no mapped test (graphify/extractors/__init__.py, graphify/extractors/cobol.py, tests/fixtures/new_languages/sample.cob) — a coverage gap or a missing link — running the full suite rather than only the selected tests

Selection is safe under the controlled-regression assumption; always-run tests + a periodic full run are the backstops. Advisory — it never changes the check verdict.

· 1 grounded finding(s) anchored inline below; 84 more finding(s) on lines outside this diff (see the check run).

[graphify-labs]

⚠️ Health regression — extract_cobol()

fans out to 7 callees (efferent coupling).

Grounded coupling-delta finding (deterministic), not an LLM guess.

[safishamsi]

Shipped in v0.9.66 (on PyPI). Cherry-picked with authorship preserved so it shows under your GitHub contributions. Thanks @Abdul535! (New COBOL extractor — pure-regex, zero new dependency.)