docs: add demo GIFs and recording scripts for README

- Created demo tool (cmd/demo) for showcasing parser + renderer
- Recorded 4 GIFs: JSON, logfmt, plain text, pipe streaming
- Added sample log files and record-all.sh for easy regeneration
- Updated README with embedded GIF demos

Author: clarabennettdev

README.md

@@ -9,6 +9,8 @@
 
 Stream, search, and correlate logs from files, Kubernetes, Docker, SSH, and more — all in one TUI.
 
+![LogPilot Demo](docs/demos/demo-json.gif)
+
 ## Features
 
 ### ✅ Implemented
@@ -71,6 +73,9 @@ logpilot -f /var/log/app.log
 
 # Pipe from another command
 kubectl logs -f my-pod | logpilot
+
+# Streaming demo
+![Pipe demo](docs/demos/demo-pipe.gif)
 docker logs -f my-container | logpilot
 cat /var/log/syslog | logpilot
 
@@ -83,16 +88,25 @@ logpilot /var/log/*.log
 LogPilot auto-detects the format from the first few lines:
 
 ### JSON
+
+![JSON logs](docs/demos/demo-json.gif)
+
 ```json
 {"timestamp":"2026-02-17T20:30:00Z","level":"error","message":"connection timeout","service":"api","latency_ms":1523}
 ```
 
 ### Logfmt
+
+![Logfmt logs](docs/demos/demo-logfmt.gif)
+
 ```
 ts=2026-02-17T20:30:00Z level=error msg="connection timeout" service=api latency_ms=1523
 ```
 
 ### Plain Text
+
+![Plain text logs](docs/demos/demo-plain.gif)
+
 ```
 2026-02-17 20:30:00 ERROR connection timeout
 Feb 17 20:30:00 myhost app[1234]: connection timeout

cmd/demo/main.go

@@ -0,0 +1,55 @@
+// Demo tool that showcases LogPilot's parsing and rendering capabilities.
+// Used for generating README GIF demos.
+package main
+
+import (
+	"bufio"
+	"fmt"
+	"os"
+	"time"
+
+	"github.com/clarabennett2626/logpilot/internal/parser"
+	"github.com/clarabennett2626/logpilot/internal/tui"
+)
+
+func main() {
+	if len(os.Args) < 2 {
+		fmt.Fprintf(os.Stderr, "Usage: demo <logfile>\n")
+		os.Exit(1)
+	}
+
+	// Detect format
+	f, err := os.Open(os.Args[1])
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "Error: %v\n", err)
+		os.Exit(1)
+	}
+
+	var lines []string
+	scanner := bufio.NewScanner(f)
+	for scanner.Scan() {
+		lines = append(lines, scanner.Text())
+	}
+	f.Close()
+
+	format := parser.DetectFormat(lines)
+	fmt.Printf("📋 Detected format: %s (%d lines)\n\n", format, len(lines))
+
+	// Parse and render each line
+	p := parser.NewAutoParser()
+	renderer := tui.NewRenderer(tui.RenderConfig{
+		TimestampFormat: tui.TimestampRelative,
+		Theme:           tui.ThemeDark,
+		TerminalWidth:   120,
+		WrapMode:        tui.WrapTruncate,
+		ShowAllFields:   true,
+		ANSIMode:        tui.ANSIStrip,
+	})
+
+	for _, line := range lines {
+		entry := p.Parse(line)
+		rendered := renderer.RenderEntry(entry)
+		fmt.Println(rendered)
+		time.Sleep(80 * time.Millisecond) // Simulate streaming
+	}
+}

docs/demos/demo-json.gif

@@ -0,0 +1,72 @@
+#!/bin/bash
+# Record all demo GIFs for LogPilot README.
+# Usage: ./docs/demos/record-all.sh
+# Requires: asciinema, agg (https://github.com/asciinema/agg)
+
+set -e
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+REPO_DIR="$(cd "$SCRIPT_DIR/../.." && pwd)"
+DEMO="$REPO_DIR/demo"
+GIF_DIR="$SCRIPT_DIR"
+
+# Build demo tool
+echo "Building demo tool..."
+cd "$REPO_DIR"
+go build -o demo ./cmd/demo/
+
+# Colors for output
+GREEN='\033[0;32m'
+NC='\033[0m'
+
+record_demo() {
+    local name="$1"
+    local script="$2"
+    local cast_file="$GIF_DIR/${name}.cast"
+    local gif_file="$GIF_DIR/${name}.gif"
+
+    echo -e "${GREEN}Recording: ${name}${NC}"
+    
+    asciinema rec "$cast_file" \
+        --cols 120 \
+        --rows 30 \
+        --command "$script" \
+        --overwrite \
+        --quiet
+
+    echo -e "${GREEN}Converting to GIF: ${name}${NC}"
+    "$REPO_DIR/agg" --cols 120 --rows 30 --speed 1.5 "$cast_file" "$gif_file" 2>/dev/null || \
+    agg --cols 120 --rows 30 --speed 1.5 "$cast_file" "$gif_file"
+
+    # Clean up cast file
+    rm -f "$cast_file"
+    echo "  → $gif_file"
+}
+
+# 1. Hero demo: JSON logs with color-coded output
+record_demo "demo-json" "$DEMO $SCRIPT_DIR/sample-json.log"
+
+# 2. Logfmt format demo
+record_demo "demo-logfmt" "$DEMO $SCRIPT_DIR/sample-logfmt.log"
+
+# 3. Plain text format demo  
+record_demo "demo-plain" "$DEMO $SCRIPT_DIR/sample-plain.log"
+
+# 4. Pipe demo: simulated streaming
+record_demo "demo-pipe" "bash -c 'echo \"Streaming logs via pipe...\"; echo; cat $SCRIPT_DIR/sample-json.log | $DEMO /dev/stdin'"
+
+# 5. Format detection demo: show all 3 formats
+record_demo "demo-formats" "bash -c '
+echo \"=== JSON Logs ===\"
+$DEMO $SCRIPT_DIR/sample-json.log
+echo
+echo \"=== Logfmt Logs ===\"
+$DEMO $SCRIPT_DIR/sample-logfmt.log
+echo
+echo \"=== Plain Text Logs ===\"
+$DEMO $SCRIPT_DIR/sample-plain.log
+'"
+
+echo ""
+echo -e "${GREEN}All demos recorded!${NC}"
+echo "GIFs saved to: $GIF_DIR/"
+ls -la "$GIF_DIR"/*.gif 2>/dev/null

docs/demos/demo-logfmt.gif

@@ -0,0 +1,15 @@
+{"timestamp":"2026-02-17T20:00:01Z","level":"info","message":"Server starting on :8080","service":"api","version":"1.2.3"}
+{"timestamp":"2026-02-17T20:00:02Z","level":"info","message":"Connected to PostgreSQL","service":"api","host":"db.internal:5432"}
+{"timestamp":"2026-02-17T20:00:02Z","level":"info","message":"Redis connection pool initialized","service":"api","pool_size":10}
+{"timestamp":"2026-02-17T20:00:03Z","level":"info","message":"Loading middleware: auth, cors, ratelimit","service":"api"}
+{"timestamp":"2026-02-17T20:00:05Z","level":"info","message":"Ready to accept connections","service":"api","workers":8}
+{"timestamp":"2026-02-17T20:01:12Z","level":"info","message":"GET /api/v1/users 200 12ms","service":"api","method":"GET","path":"/api/v1/users","status":200,"latency_ms":12}
+{"timestamp":"2026-02-17T20:01:15Z","level":"debug","message":"Cache hit for user:1234","service":"api","cache":"redis","key":"user:1234"}
+{"timestamp":"2026-02-17T20:01:18Z","level":"info","message":"POST /api/v1/orders 201 45ms","service":"api","method":"POST","path":"/api/v1/orders","status":201,"latency_ms":45}
+{"timestamp":"2026-02-17T20:02:30Z","level":"warn","message":"Slow query detected","service":"api","query":"SELECT * FROM orders WHERE...","duration_ms":850}
+{"timestamp":"2026-02-17T20:02:45Z","level":"warn","message":"Rate limit approaching for client 10.0.1.50","service":"api","client_ip":"10.0.1.50","remaining":5}
+{"timestamp":"2026-02-17T20:03:01Z","level":"error","message":"Connection refused to payment service","service":"api","target":"payments:443","retry":1}
+{"timestamp":"2026-02-17T20:03:03Z","level":"error","message":"Connection refused to payment service","service":"api","target":"payments:443","retry":2}
+{"timestamp":"2026-02-17T20:03:05Z","level":"error","message":"Payment service unavailable after 3 retries","service":"api","target":"payments:443","retry":3}
+{"timestamp":"2026-02-17T20:03:05Z","level":"fatal","message":"Critical dependency down — entering degraded mode","service":"api","dependency":"payments"}
+{"timestamp":"2026-02-17T20:03:10Z","level":"warn","message":"Health check reporting degraded","service":"api","healthy_deps":3,"total_deps":4}

docs/demos/demo-pipe.gif

@@ -0,0 +1,10 @@
+ts=2026-02-17T20:00:01Z level=info msg="Starting worker pool" workers=4 queue=jobs
+ts=2026-02-17T20:00:02Z level=info msg="Connected to message broker" broker=rabbitmq host=mq.internal:5672
+ts=2026-02-17T20:01:00Z level=info msg="Processing job" job_id=j-8821 type=email_send queue=jobs
+ts=2026-02-17T20:01:01Z level=debug msg="Template rendered" job_id=j-8821 template=welcome_email render_ms=3
+ts=2026-02-17T20:01:02Z level=info msg="Job completed" job_id=j-8821 duration_ms=2100 status=success
+ts=2026-02-17T20:01:30Z level=info msg="Processing job" job_id=j-8822 type=image_resize queue=media
+ts=2026-02-17T20:01:35Z level=warn msg="Image resize took longer than expected" job_id=j-8822 duration_ms=5200 threshold_ms=3000
+ts=2026-02-17T20:02:00Z level=error msg="Job failed: invalid image format" job_id=j-8823 type=image_resize error="unsupported format: webp"
+ts=2026-02-17T20:02:01Z level=info msg="Retrying job" job_id=j-8823 attempt=2 max_attempts=3
+ts=2026-02-17T20:02:10Z level=error msg="Job permanently failed" job_id=j-8823 attempts=3 moved_to=dead_letter

docs/demos/demo-plain.gif

@@ -0,0 +1,12 @@
+2026-02-17 20:00:01 INFO  Application starting up
+2026-02-17 20:00:02 INFO  Loading configuration from /etc/app/config.yaml
+2026-02-17 20:00:02 INFO  Database migration: 3 pending
+2026-02-17 20:00:03 INFO  Running migration 042_add_user_index
+2026-02-17 20:00:04 INFO  Running migration 043_add_audit_table
+2026-02-17 20:00:05 INFO  Running migration 044_add_notifications
+2026-02-17 20:00:05 INFO  All migrations completed successfully
+2026-02-17 20:01:00 DEBUG Request received: GET /health
+2026-02-17 20:01:30 WARN  Disk usage at 82% on /var/data
+2026-02-17 20:02:00 ERROR Failed to send notification: smtp timeout
+2026-02-17 20:02:15 ERROR Retrying notification send (attempt 2/3)
+2026-02-17 20:02:30 INFO  Notification sent successfully on retry