Initial commit

Signed-off-by: egibs <[email protected]>

Author: egibs

.gitignore

@@ -18,4 +18,7 @@ Cargo.lock
 #  be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
 #  and can be added to the global gitignore or merged into this file.  For a more nuclear
 #  option (not recommended) you can uncomment the following to ignore the entire idea folder.
-#.idea/
+#.idea/
+
+# Grammars
+grammars/

README.md

@@ -1,2 +1,5 @@
 # yara.zed
 Yara language extension for Zed.
+
+Example (using the `Ayu Mirage` theme):
+![Yara syntax highlighting in Zed](example.png)

example.png

@@ -0,0 +1,28 @@
+import "math"
+
+private global rule test: tag1 {
+  strings:
+    $hello = "hello world"
+  condition:
+    all of them
+}
+
+private rule test2: tag2 tag3 tag4 tag5 {
+  strings:
+    $hello = "hello world"
+    $ = "test"
+    $ = "test2"
+    $ = "test3"
+  condition:
+    filesize > 1MB and all of them
+}
+
+private rule test3: tag4 tag5 {
+  strings:
+    $hello = "hello world"
+    $test = "test"
+    $ = "test2"
+    $ = "test3"
+  condition:
+    filesize > 2MB and any of them
+}

example.yara

@@ -0,0 +1,11 @@
+id = "yara"
+name = "Yara"
+version = "0.0.1"
+schema_version = 1
+authors = ["egibs <[email protected]>"]
+description = "Yara syntax highlighting for Zed."
+repository = "https://github.com/egibs/yara-zed"
+
+[grammars.yara]
+repository = "https://github.com/egibs/tree-sitter-yara.git"
+commit = "ade4c74fdef17549555694c42621eeac9eaba0f8"

extension.toml

@@ -0,0 +1,11 @@
+name = "Yara"
+grammar = "yara"
+path_suffixes = ["yar", "yara"]
+line_comments = ["//"]
+brackets = [
+  { start = "{", end = "}", close = true, newline = true },
+  { start = "[", end = "]", close = true, newline = true },
+  { start = "\"", end = "\"", close = true, newline = false, not_in = [
+    "string",
+  ] },
+]

languages/yara/config.toml

@@ -0,0 +1,103 @@
+; Keywords
+[
+  "rule"
+  "global"
+  "private"
+  "import"
+  "include"
+  "strings"
+  "condition"
+  "meta"
+] @keyword
+
+; Keywords (condition)
+[
+  "and"
+  "or"
+  "not"
+  "matches"
+  "contains"
+  "icontains"
+  "imatches"
+  "startswith"
+  "istartswith"
+  "endswith"
+  "iendswith"
+  "for"
+  "of"
+  "in"
+  "all"
+  "any"
+  "them"
+] @keyword.operator
+
+; Built-in identifiers
+(filesize) @function.builtin
+(entrypoint) @function.builtin
+
+; String modifiers
+[
+  "ascii"
+  "wide"
+  "nocase"
+  "fullword"
+  "xor"
+  "base64"
+  "base64wide"
+] @keyword.modifier
+
+; Rule names
+(rule_definition
+  name: (identifier) @function)
+
+; Tags
+(tag_list
+  [(identifier) (tag)] @tag)
+
+; Meta definitions
+(meta_definition
+  key: (identifier) @property)
+
+; String identifiers
+(string_identifier
+  (identifier)? @string.special)
+
+; Constants
+(boolean_literal) @constant.builtin
+
+(integer_literal) @constant.numeric
+(size_unit) @constant.numeric
+
+; Strings
+(double_quoted_string) @string
+(single_quoted_string) @string
+(escape_sequence) @string.escape
+
+; Hex strings
+(hex_string) @string.special
+(hex_byte) @constant.numeric
+(hex_wildcard) @constant.builtin
+
+; Regex strings
+(regex_string) @string.regexp
+(pattern) @string.regexp
+
+; Operators
+[
+  ">"
+  "<"
+  "=="
+  "<="
+  ">="
+  "!="
+  "+"
+  "-"
+  "*"
+  "\\"
+  "%"
+] @operator
+
+[":" "=" "{" "}" "(" ")" "[" "]" "$" "#" "@" "!" ".." "|" ","] @punctuation.delimiter
+
+; Comments
+(comment) @comment