diff --git a/.gitignore b/.gitignore
index 55676e0..a1f0cc5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -25,7 +25,8 @@ composer.local.json
 composer.local.lock
 
 # Docker files
-compose.override.yml
+# (compose.override.yml is intentionally TRACKED — deploy.sh pins -f compose.yml
+# so it is never merged on the server, but every developer gets the same setup)
 /docker/nginx/ssl/
 
 # Docker data volumes
@@ -45,4 +46,8 @@ docker/data/
 *:Zone.Identifier
 
 # Temp files
-/public/favicon-code.html
\ No newline at end of file
+/public/favicon-code.html
+
+# opencode (local AI agent config — kept out of the repo)
+/AGENTS.md
+/.opencode/
\ No newline at end of file
diff --git a/README.md b/README.md
index 83633aa..9d637f5 100644
--- a/README.md
+++ b/README.md
@@ -16,28 +16,65 @@ The repository serves for [webifycms.com](https://webifycms.com) site which runs
 
 ### Docker Setup (recommended)
 
-**Local development:**
+**Local development** — `compose.override.yml` is applied automatically by
+`docker compose`, giving you live host bind-mounts (code and asset changes are
+picked up instantly) and local HTTPS via self-signed certs:
 
 ```bash
-# Start the containers (compose.override.yml is applied automatically)
+# Host-side dependencies (target the same files the containers bind-mount)
+npm install
+
+# Start the containers
 docker compose up -d
 
 # Install PHP dependencies
 docker compose exec app composer install
 
-# Install front-end dependencies and build assets
-docker compose exec app npm install
+# Build front-end assets (this also copies assets/img/ → public/assets/img/)
 docker compose exec app npm run build
 ```
 
-**Production (server):**
+The site is then available at `http://localhost:${NGINX_PORT}` and
+`https://webifycms.com.local:${NGINX_PORT_SSL}` (both set in `.env`). For the
+HTTPS hostname, add `127.0.0.1 webifycms.com.local` to `/etc/hosts` and trust
+the self-signed cert in `docker/nginx/ssl/` once.
+
+**Production (server)** — only the base `compose.yml` is used, so the
+local-only override is never merged:
 
 ```bash
-# Ignore compose.override.yml — only the base compose.yml is used
-docker compose -f compose.yml up -d
+# Build and start (compose.override.yml is ignored)
+docker compose -f compose.yml up -d --build
 ```
 
-The site will be available at `http://localhost:3000` (configurable via `NGINX_PORT` in `.env`).
+The two environments differ only in `compose.override.yml`:
+
+| | Local (`docker compose`) | Production (`docker compose -f compose.yml`) |
+|---|---|---|
+| `app` image | `docker/php/local.Dockerfile` + host bind-mount | `docker/php/Dockerfile` (bundles code + assets + images) |
+| nginx config | `docker/nginx/nginx.local.conf` (local TLS) | `docker/nginx/nginx.caddy.conf` (HTTP, Caddy terminates TLS) |
+| SSL certs | `docker/nginx/ssl/` (gitignored, self-signed) | none (Caddy-managed) |
+| Web root | host `./` bind-mounted | shared `app-data` volume seeded from the image |
+
+The `compose.override.yml` used for local development:
+
+```yaml
+services:
+  app:
+    build:
+      context: .
+      dockerfile: ./docker/php/local.Dockerfile
+    volumes:
+      - ./:/var/www/html
+  server:
+    volumes:
+      - ./:/var/www/html
+      - ./docker/nginx/nginx.local.conf:/etc/nginx/conf.d/default.conf
+      - ./docker/nginx/ssl:/etc/nginx/ssl:ro
+    ports:
+      - "${NGINX_PORT}:80"
+      - "${NGINX_PORT_SSL}:443"
+```
 
 ### Manual Setup
 
@@ -73,6 +110,7 @@ npm run build
 - JS is extracted from inline `<script>` tags into `assets/js/app.js`
 - In development, `App\Infrastructure\Helper\Vite` serves assets from the Vite dev server
 - In production, it reads `public/.vite/manifest.json` for hashed filenames
+- `npm run build` also copies `assets/img/` into `public/assets/img/` so images referenced directly from templates (e.g. `logo.png`) are served in every environment — same as the production Dockerfile
 - Add the Vite dev server origin (`http://localhost:5173`) to your `.env` if needed
 
 ### Asset structure
diff --git a/assets/css/app.css b/assets/css/app.css
index 5045f0d..2b00d9e 100644
--- a/assets/css/app.css
+++ b/assets/css/app.css
@@ -998,6 +998,10 @@ img {
 	gap: 1rem;
 }
 
+.ext-themes {
+	padding-top: 5.5rem;
+}
+
 @media (min-width: 48rem) {
 	.ext-list {
 		grid-template-columns: 1fr 1fr;
@@ -1582,6 +1586,11 @@ img {
 	opacity: 0.3;
 }
 
+.post-header__updated {
+	color: var(--violet);
+	font-weight: 600;
+}
+
 .post-header__title {
 	font-family: var(--font-display);
 	font-size: clamp(2.25rem, 5vw, 3.5rem);
@@ -2537,6 +2546,12 @@ img {
 	transform: translateY(-0.125rem);
 }
 
+.sponsor__card--mono,
+.sponsor__card--mono:hover {
+	filter: none;
+	transition-property: opacity, transform;
+}
+
 .sponsors__cta {
 	text-align: center;
 	font-size: 0.9375rem;
diff --git a/assets/img/opencode.svg b/assets/img/opencode.svg
new file mode 100644
index 0000000..bb9ab91
--- /dev/null
+++ b/assets/img/opencode.svg
@@ -0,0 +1,18 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="234" height="42" viewBox="0 0 234 42" fill="none">
+	<path d="M18 30H6V18H18V30Z" fill="#4B4646"/>
+	<path d="M18 12H6V30H18V12ZM24 36H0V6H24V36Z" fill="#B7B1B1"/>
+	<path d="M48 30H36V18H48V30Z" fill="#4B4646"/>
+	<path d="M36 30H48V12H36V30ZM54 36H36V42H30V6H54V36Z" fill="#B7B1B1"/>
+	<path d="M84 24V30H66V24H84Z" fill="#4B4646"/>
+	<path d="M84 24H66V30H84V36H60V6H84V24ZM66 18H78V12H66V18Z" fill="#B7B1B1"/>
+	<path d="M108 36H96V18H108V36Z" fill="#4B4646"/>
+	<path d="M108 12H96V36H90V6H108V12ZM114 36H108V12H114V36Z" fill="#B7B1B1"/>
+	<path d="M144 30H126V18H144V30Z" fill="#4B4646"/>
+	<path d="M144 12H126V30H144V36H120V6H144V12Z" fill="#F1ECEC"/>
+	<path d="M168 30H156V18H168V30Z" fill="#4B4646"/>
+	<path d="M168 12H156V30H168V12ZM174 36H150V6H174V36Z" fill="#F1ECEC"/>
+	<path d="M198 30H186V18H198V30Z" fill="#4B4646"/>
+	<path d="M198 12H186V30H198V12ZM204 36H180V6H198V0H204V36Z" fill="#F1ECEC"/>
+	<path d="M234 24V30H216V24H234Z" fill="#4B4646"/>
+	<path d="M216 12V18H228V12H216ZM234 24H216V30H234V36H210V6H234V24Z" fill="#F1ECEC"/>
+</svg>
diff --git a/compose.override.yml b/compose.override.yml
new file mode 100644
index 0000000..70e71d0
--- /dev/null
+++ b/compose.override.yml
@@ -0,0 +1,26 @@
+# Local development overrides.
+#
+# Automatically merged by `docker compose up -d` (no -f flag needed) on
+# developer machines. It is NEVER applied in production: scripts/deploy.sh
+# and the docs pin `docker compose -f compose.yml`, so this file is ignored
+# on the server even after `git pull`.
+services:
+  # PHP service — live code, no image copy. Requires host-side deps:
+  # `composer install`, `npm install`, and `npm run build` (see README).
+  app:
+    build:
+      context: .
+      dockerfile: ./docker/php/local.Dockerfile
+    volumes:
+      - ./:/var/www/html
+
+  # Nginx service — serve the live host docroot and terminate TLS locally
+  # with the self-signed certs in docker/nginx/ssl/ (gitignored).
+  server:
+    volumes:
+      - ./:/var/www/html
+      - ./docker/nginx/nginx.local.conf:/etc/nginx/conf.d/default.conf
+      - ./docker/nginx/ssl:/etc/nginx/ssl:ro
+    ports:
+      - "${NGINX_PORT}:80"
+      - "${NGINX_PORT_SSL}:443"
diff --git a/docker/nginx/nginx.local.conf b/docker/nginx/nginx.local.conf
new file mode 100644
index 0000000..876e1bf
--- /dev/null
+++ b/docker/nginx/nginx.local.conf
@@ -0,0 +1,55 @@
+map $server_port $fastcgi_https {
+    443 on;
+    default off;
+}
+
+server {
+    charset utf-8;
+    client_max_body_size 10M;
+
+    listen 80;
+    listen 443 ssl;
+
+    ssl_certificate     /etc/nginx/ssl/server.crt;
+    ssl_certificate_key /etc/nginx/ssl/server.key;
+
+    server_name _;
+    root /var/www/html/public;
+    index index.php;
+
+    # Security headers
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
+    add_header X-XSS-Protection "1; mode=block" always;
+    server_tokens off;
+
+    error_log /var/log/nginx/app_error.log;
+    access_log /var/log/nginx/app_access.log;
+
+    location / {
+        try_files $uri $uri/ /index.php$is_args$args;
+        gzip_static on;
+    }
+
+    # deny accessing php files for the /assets directory
+    location ~ ^/assets/.*\.php$ {
+        deny all;
+    }
+
+    location ~ \.php$ {
+        try_files $uri =404;
+        fastcgi_split_path_info ^(.+\.php)(/.+)$;
+        fastcgi_pass app:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_param PATH_INFO $fastcgi_path_info;
+        fastcgi_param HTTPS $fastcgi_https;
+    }
+
+    location ~* /\. {
+        deny all;
+    }
+}
diff --git a/docs/DEPLOYMENT.md b/docs/DEPLOYMENT.md
index 8bc7157..64be918 100644
--- a/docs/DEPLOYMENT.md
+++ b/docs/DEPLOYMENT.md
@@ -108,15 +108,20 @@ docker network create shared-proxy
 
 ### 6. Initial Build and Start
 
+> **Important:** production always uses `-f compose.yml`. The local-only
+> `compose.override.yml` must never be merged on the server — running plain
+> `docker compose` would auto-load it and break the site (it switches to the
+> dev image, host bind-mounts, and local TLS config).
+
 ```bash
 # Build and start containers
-docker compose up -d --build
+docker compose -f compose.yml up -d --build
 
 # Verify containers are running
-docker compose ps
+docker compose -f compose.yml ps
 
 # Check logs
-docker compose logs -f
+docker compose -f compose.yml logs -f
 ```
 
 ## GitHub Actions Setup
@@ -152,10 +157,27 @@ cat deploy_key
 1. When you push to `main` or merge a PR, the workflow triggers
 2. **Test job**: Runs static analysis, code style checks, and tests
 3. **Deploy job** (only if tests pass):
-   - Builds frontend assets locally (`npm run build`)
+   - Builds frontend assets locally (`npm run build`) — this also copies `assets/img/` into `public/assets/img/`
    - Uploads built assets (`public/assets/`, `public/.vite/`) to the server via SCP
    - SSHes into the server and runs `scripts/deploy.sh`
-4. The deploy script pulls the latest code, rebuilds Docker containers, and restarts them
+4. The deploy script pulls the latest code, rebuilds Docker containers (`docker compose -f compose.yml`), and restarts them
+5. The server image is built by `docker/php/Dockerfile`, which bundles the app code, the built assets, and the `assets/img/` images into the `app-data` volume — this is what nginx actually serves
+
+### Environment separation
+
+The project ships **one** `compose.yml` for production and a **separate** `compose.override.yml` for local development:
+
+| | Production (server) | Local development |
+|---|---|---|
+| Compose files | `docker compose -f compose.yml` | `docker compose` (override auto-merged) |
+| `app` image | `docker/php/Dockerfile` (code + assets + images bundled) | `docker/php/local.Dockerfile` (live host bind-mount) |
+| nginx config | `docker/nginx/nginx.caddy.conf` (HTTP only, Caddy terminates TLS) | `docker/nginx/nginx.local.conf` (local TLS, self-signed certs) |
+| SSL certs | Caddy-managed, none required | `docker/nginx/ssl/` (gitignored, local only) |
+| Web root | shared `app-data` volume seeded from the image | host `./` bind-mounted into both containers |
+
+`compose.override.yml` is meant to be committed so every developer gets the
+same local setup, and `deploy.sh` pins `-f compose.yml` so it is ignored on
+the server.
 
 ## Manual Deployment
 
@@ -187,9 +209,9 @@ git log --oneline -10  # Find the commit you want
 git checkout <commit-hash>
 
 # Rebuild and restart
-docker compose down
-docker compose build --no-cache
-docker compose up -d
+docker compose -f compose.yml down
+docker compose -f compose.yml build --no-cache
+docker compose -f compose.yml up -d
 
 # Or go back to the previous version
 git checkout main~1
@@ -201,11 +223,11 @@ git checkout main~1
 
 ```bash
 # Check container logs
-docker compose logs app
-docker compose logs server
+docker compose -f compose.yml logs app
+docker compose -f compose.yml logs server
 
-# Check if port 3000 is in use
-sudo netstat -tulpn | grep ':3000\s'
+# Check if the port configured in NGINX_PORT is in use
+sudo netstat -tulpn | grep ":${NGINX_PORT} "
 ```
 
 ### Permission errors
diff --git a/resources/posts/2026-07-alpha-release.md b/resources/posts/2026-07-alpha-release.md
index 2d9fc6b..2879d9d 100644
--- a/resources/posts/2026-07-alpha-release.md
+++ b/resources/posts/2026-07-alpha-release.md
@@ -2,6 +2,7 @@
 title: 'WebifyCMS First Alpha Release - The Bedrock'
 slug: webifycms-first-alpha-release-the-bedrock
 date: '2026-07-10'
+updated: '2026-07-31'
 ---
 
 # WebifyCMS First Alpha Release
@@ -26,9 +27,11 @@ metadata enforcement, ensuring the core is solid from day one.
 
 ## Current Development Status
 
-With the base layer complete, work is now actively underway on `ext-user`, which will provide identity,
-authentication, and authorization. Future extensions on the roadmap include content management (`ext-cms`),
-an administration panel (`ext-admin`), and a marketplace for themes and extensions (`ext-marketplace`).
+With the base layer complete, work is now actively underway on the three pieces that unlock the first
+beta: `ext-user` (identity, authentication, and authorization), `ext-admin` (the slot-based admin panel),
+and the official default theme `webifycms/theme-canvas`, which powers the front-end. Future extensions on
+the roadmap include content management (`ext-cms`) and a marketplace for themes and extensions
+(`ext-marketplace`).
 
 ## How to Get Involved
 
@@ -44,8 +47,9 @@ to be transparent — every layer, every boundary, and every decision is open fo
 
 ## What Comes Next
 
-The immediate focus is on completing `ext-user` and preparing for the first beta release.
-Alongside that, we will continue expanding documentation, improving test coverage,
-and refining the developer experience.
+The immediate focus is on completing `ext-user`. Because the user experience spans both the admin panel and
+the front-end, that work goes hand in hand with `ext-admin` and the default `theme-canvas` theme — all three
+are in progress together. Once they land, we will prepare the first beta release while continuing to expand
+documentation, improve test coverage, and refine the developer experience.
 
 Stay tuned for more updates, and thank you for following the WebifyCMS journey.
diff --git a/resources/posts/posts.json b/resources/posts/posts.json
index a83cff7..9186f8c 100644
--- a/resources/posts/posts.json
+++ b/resources/posts/posts.json
@@ -3,6 +3,7 @@
         "title": "WebifyCMS First Alpha Release - The Bedrock",
         "slug": "webifycms-first-alpha-release-the-bedrock",
         "date": "2026-07-10",
+        "updated": "2026-07-31",
         "excerpt": "We are excited to announce the very first alpha release of WebifyCMS — version 0.1.0-alpha \"Bedrock\" is now available. This marks a major milestone for...",
         "file": "2026-07-alpha-release.md"
     },
@@ -10,6 +11,7 @@
         "title": "WebifyCMS Logo Concept",
         "slug": "webifycms-logo-concept",
         "date": "2026-06-25",
+        "updated": "2026-06-25",
         "excerpt": "The WebifyCMS logo combines a geometric hexagon mark with bold monospaced typography to communicate structure, clarity, and developer focus. The design...",
         "file": "2026-06-logo-concept.md"
     },
@@ -17,6 +19,7 @@
         "title": "Introduction to WebifyCMS",
         "slug": "introduction-webifycms",
         "date": "2026-06-17",
+        "updated": "2026-06-17",
         "excerpt": "Summary: WebifyCMS is an open-source PHP application framework built from the ground up on Clean Architecture and Domain-Driven Design (DDD). It was...",
         "file": "2026-06-introduction.md"
     }
diff --git a/resources/themes.json b/resources/themes.json
new file mode 100644
index 0000000..a05fc26
--- /dev/null
+++ b/resources/themes.json
@@ -0,0 +1,10 @@
+[
+	{
+		"name": "Canvas",
+		"package": "webifycms/theme-canvas",
+		"status": "In progress",
+		"version": "",
+		"description": "The official default theme that ships with WebifyCMS.",
+		"url": "https://github.com/webifycms/theme-canvas"
+	}
+]
diff --git a/scripts/deploy.sh b/scripts/deploy.sh
index 9a78b22..c51e1b5 100755
--- a/scripts/deploy.sh
+++ b/scripts/deploy.sh
@@ -28,42 +28,46 @@ fi
 echo ">>> Pulling latest changes..."
 git pull origin main
 
+# Compose files used on the server. `-f compose.yml` is pinned explicitly so
+# the local-only compose.override.yml is NEVER auto-merged in production.
+COMPOSE=(docker compose -f compose.yml)
+
 # Stop existing containers and remove volumes for a clean build
 echo ">>> Stopping existing containers..."
-docker compose down -v
+"${COMPOSE[@]}" down -v
 
 # Build new image (no cache for clean build)
 echo ">>> Building Docker image..."
-docker compose build --no-cache
+"${COMPOSE[@]}" build --no-cache
 
 # Start containers
 echo ">>> Starting containers..."
-docker compose up -d
+"${COMPOSE[@]}" up -d
 
 # Wait for containers to be healthy
 echo ">>> Waiting for containers to start..."
 sleep 5
 
 # Check if containers are running
-if docker compose ps | grep -q "Up"; then
+if "${COMPOSE[@]}" ps | grep -q "Up"; then
     echo ">>> Installing Composer dependencies inside container..."
-    docker compose exec -T app composer install --no-dev --no-autoloader --no-progress --no-interaction
-    docker compose exec -T app composer dump-autoload --classmap-authoritative --no-dev
+    "${COMPOSE[@]}" exec -T app composer install --no-dev --no-autoloader --no-progress --no-interaction
+    "${COMPOSE[@]}" exec -T app composer dump-autoload --classmap-authoritative --no-dev
 
     echo ">>> Clearing page cache..."
-    docker compose exec -T app php bin/console pageCache:clear
+    "${COMPOSE[@]}" exec -T app php bin/console pageCache:clear
 
     echo ">>> Setting directory permissions inside container..."
-    docker compose exec -T app mkdir -p runtime/cache/rate-limiter
-    docker compose exec -T app chmod -R 0775 runtime
-    docker compose exec -T app chmod -R 0775 public/assets 2>/dev/null || true
+    "${COMPOSE[@]}" exec -T app mkdir -p runtime/cache/rate-limiter
+    "${COMPOSE[@]}" exec -T app chmod -R 0775 runtime
+    "${COMPOSE[@]}" exec -T app chmod -R 0775 public/assets 2>/dev/null || true
 
     echo "=========================================="
     echo "  Deployment Complete!"
     echo "=========================================="
-    docker compose ps
+    "${COMPOSE[@]}" ps
 else
     echo "ERROR: Containers failed to start!"
-    docker compose logs
+    "${COMPOSE[@]}" logs
     exit 1
 fi
diff --git a/src/Infrastructure/Persistence/Filesystem/PostIndexer.php b/src/Infrastructure/Persistence/Filesystem/PostIndexer.php
index 4314f55..5c5083a 100644
--- a/src/Infrastructure/Persistence/Filesystem/PostIndexer.php
+++ b/src/Infrastructure/Persistence/Filesystem/PostIndexer.php
@@ -26,6 +26,7 @@
  *     title: string,
  *     slug: string,
  *     date: string,
+ *     updated: string,
  *     excerpt: string,
  *     file: string,
  * }
@@ -131,6 +132,7 @@ private function parseFrontMatter(string $contents, string $basename): ?array
 			'title'   => $metadata['title'],
 			'slug'    => $metadata['slug'],
 			'date'    => $metadata['date'],
+			'updated' => $metadata['updated'] ?? $metadata['date'],
 			'excerpt' => $this->generateExcerpt($body),
 			'file'    => $basename,
 		];
diff --git a/src/Infrastructure/Persistence/Filesystem/PostReader.php b/src/Infrastructure/Persistence/Filesystem/PostReader.php
index 5e90511..b28c452 100644
--- a/src/Infrastructure/Persistence/Filesystem/PostReader.php
+++ b/src/Infrastructure/Persistence/Filesystem/PostReader.php
@@ -34,6 +34,7 @@
  *     title: string,
  *     slug: string,
  *     date: string,
+ *     updated: string,
  *     excerpt: string,
  *     file: string,
  * }
@@ -41,6 +42,7 @@
  *     title: string,
  *     slug: string,
  *     date: string,
+ *     updated: string,
  *     excerpt: string,
  *     body: string,
  *     html: string,
@@ -112,6 +114,7 @@ public function findBySlug(string $slug): ?array
 				'title'   => $entry['title'],
 				'slug'    => $entry['slug'],
 				'date'    => $entry['date'],
+				'updated' => $entry['updated'] ?? $entry['date'],
 				'excerpt' => $entry['excerpt'],
 				'body'    => $body,
 				'html'    => $html,
diff --git a/src/Infrastructure/Persistence/Filesystem/ThemesReader.php b/src/Infrastructure/Persistence/Filesystem/ThemesReader.php
new file mode 100644
index 0000000..3ed9656
--- /dev/null
+++ b/src/Infrastructure/Persistence/Filesystem/ThemesReader.php
@@ -0,0 +1,71 @@
+<?php
+
+/**
+ * The file is part of the "webifycms/site", WebifyCMS site.
+ *
+ * @see https://webifycms.com
+ *
+ * @copyright Copyright (c) 2026 WebifyCMS
+ * @license https://webifycms.com/license
+ * @author Mohammed Shifreen <mshifreen@gmail.com>
+ */
+declare(strict_types=1);
+
+namespace App\Infrastructure\Persistence\Filesystem;
+
+use Webify\Base\Application\Service\ConfigInterface;
+
+/**
+ * Reads theme data from the resources/themes.json file.
+ *
+ * The JSON file is the single source of truth for theme metadata.
+ * To add or update a theme, edit the JSON — no PHP changes needed.
+ *
+ * @phpstan-type Theme array{
+ *     name: string,
+ *     package: string,
+ *     status: string,
+ *     version: string,
+ *     description: string,
+ *     url: string,
+ * }
+ */
+final readonly class ThemesReader
+{
+	/**
+	 * @var string absolute path to resources/themes.json
+	 */
+	private string $path;
+
+	/**
+	 * The constructor.
+	 */
+	public function __construct(
+		private ConfigInterface $config,
+	) {
+		$this->path = $this->config->basePath . '/resources/themes.json';
+	}
+
+	/**
+	 * Returns all themes from the JSON file.
+	 *
+	 * @return Theme[]
+	 */
+	public function findAll(): array
+	{
+		if (!file_exists($this->path)) {
+			return [];
+		}
+
+		$contents = file_get_contents($this->path);
+
+		if (false === $contents) {
+			return [];
+		}
+
+		/** @var null|Theme[] $data */
+		$data = json_decode($contents, true);
+
+		return is_array($data) ? $data : [];
+	}
+}
diff --git a/src/Infrastructure/Presentation/Http/Controller/Page/Extensions.php b/src/Infrastructure/Presentation/Http/Controller/Page/Extensions.php
index b187c5b..5043df4 100644
--- a/src/Infrastructure/Presentation/Http/Controller/Page/Extensions.php
+++ b/src/Infrastructure/Presentation/Http/Controller/Page/Extensions.php
@@ -13,14 +13,14 @@
 
 namespace App\Infrastructure\Presentation\Http\Controller\Page;
 
-use App\Infrastructure\Persistence\Filesystem\ExtensionsReader;
+use App\Infrastructure\Persistence\Filesystem\{ExtensionsReader, ThemesReader};
 use App\Infrastructure\Presentation\Http\Controller\Base;
 use App\Infrastructure\Service\View;
 use Nyholm\Psr7\Factory\Psr17Factory;
 use Psr\Http\Message\{ResponseInterface, ServerRequestInterface};
 
 /**
- * Renders the /extensions page listing the WebifyCMS extension ecosystem.
+ * Renders the /extensions page listing the WebifyCMS extension ecosystem and themes.
  */
 final readonly class Extensions extends Base
 {
@@ -30,7 +30,8 @@
 	public function __construct(
 		View $view,
 		Psr17Factory $psr17Factory,
-		private ExtensionsReader $extensions
+		private ExtensionsReader $extensions,
+		private ThemesReader $themes,
 	) {
 		parent::__construct($view, $psr17Factory);
 	}
@@ -45,6 +46,9 @@ public function __invoke(ServerRequestInterface $request, array $args = []): Res
 		$this->view->canonical   = $this->view->url('/extensions');
 		$this->view->currentPath = '/extensions';
 
-		return $this->render('extensions', ['extensions' => $this->extensions->findAll()]);
+		return $this->render('extensions', [
+			'extensions' => $this->extensions->findAll(),
+			'themes'     => $this->themes->findAll(),
+		]);
 	}
 }
diff --git a/src/Infrastructure/Presentation/Http/Controller/Page/Home.php b/src/Infrastructure/Presentation/Http/Controller/Page/Home.php
index 0b4c83e..ef590a6 100644
--- a/src/Infrastructure/Presentation/Http/Controller/Page/Home.php
+++ b/src/Infrastructure/Presentation/Http/Controller/Page/Home.php
@@ -26,7 +26,7 @@
 	 */
 	public function __invoke(ServerRequestInterface $request, array $args = []): ResponseInterface
 	{
-		$this->view->title       = 'The PHP Framework for Developers';
+		$this->view->title       = 'The PHP CMS Built the Right Way';
 		$this->view->description = 'WebifyCMS is an open-source PHP application framework built on Clean Architecture and Domain-Driven Design. Your business logic stays pure, testable, and framework-agnostic.';
 		$this->view->canonical   = $this->view->url('/');
 
diff --git a/src/Infrastructure/Presentation/Http/Controller/Publishing/Single.php b/src/Infrastructure/Presentation/Http/Controller/Publishing/Single.php
index 996c4b2..d44e8dc 100644
--- a/src/Infrastructure/Presentation/Http/Controller/Publishing/Single.php
+++ b/src/Infrastructure/Presentation/Http/Controller/Publishing/Single.php
@@ -67,6 +67,7 @@ public function __invoke(ServerRequestInterface $request, array $args): Response
 				'title'    => $post['title'],
 				'slug'     => $post['slug'],
 				'date'     => $post['date'],
+				'updated'  => $post['updated'],
 				'excerpt'  => $post['excerpt'],
 				'content'  => $post['html'],
 				'prev'     => $pagination['prev'],
diff --git a/src/Infrastructure/definitions.php b/src/Infrastructure/definitions.php
index 87cc738..ec180cd 100644
--- a/src/Infrastructure/definitions.php
+++ b/src/Infrastructure/definitions.php
@@ -13,7 +13,7 @@
 
 use App\Infrastructure\Contract\HttpClientInterface;
 use App\Infrastructure\Contract\Service\SubscribeInterface;
-use App\Infrastructure\Persistence\Filesystem\{ExtensionsReader, PostReader, RateLimitStorage};
+use App\Infrastructure\Persistence\Filesystem\{ExtensionsReader, PostReader, RateLimitStorage, ThemesReader};
 use App\Infrastructure\Persistence\GitHub\DocsReader;
 use App\Infrastructure\Presentation\Api\Middleware\{ExceptionHandler, RateLimiter};
 use App\Infrastructure\Presentation\Api\{RequestParser, ResponseBuilder};
@@ -94,6 +94,12 @@ static function (ConfigInterface $config): ExtensionsReader {
 			return new ExtensionsReader($config);
 		}
 	),
+	// Themes data reader
+	ThemesReader::class              => factory(
+		static function (ConfigInterface $config): ThemesReader {
+			return new ThemesReader($config);
+		}
+	),
 	// CommonMark converter with full GFM support (tables, strikethrough, autolinks, etc.)
 	// + HeadingPermalinkExtension to add id attributes to headings so internal anchor links work.
 	ConverterInterface::class        => factory(
diff --git a/templates/extensions.php b/templates/extensions.php
index 8f9d230..8c79cbb 100644
--- a/templates/extensions.php
+++ b/templates/extensions.php
@@ -45,22 +45,65 @@
 					</div>
 					<code class="ext-card__package"><?= htmlspecialchars($ext['package'], ENT_QUOTES); ?></code>
 					<p class="ext-card__desc"><?= htmlspecialchars($ext['description'], ENT_QUOTES); ?></p>
-					<div class="ext-card__foot">
-						<?php if ('' !== $ext['version']) { ?>
-							<span class="ext-card__version"><?= htmlspecialchars($ext['version'], ENT_QUOTES); ?></span>
-						<?php } ?>
-						<?php if ('' !== $ext['url']) { ?>
-							<a href="<?= htmlspecialchars($ext['url'], ENT_QUOTES); ?>" target="_blank" rel="noopener" class="ext-card__link">
-								View on GitHub
-								<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" width="14" height="14">
-									<path d="M7 17l9.2-9.2M17 17V7H7"/>
-								</svg>
-							</a>
-						<?php } ?>
-					</div>
+					<?php if ('' !== $ext['version'] || '' !== $ext['url']) { ?>
+						<div class="ext-card__foot">
+							<?php if ('' !== $ext['version']) { ?>
+								<span class="ext-card__version"><?= htmlspecialchars($ext['version'], ENT_QUOTES); ?></span>
+							<?php } ?>
+							<?php if ('' !== $ext['url']) { ?>
+								<a href="<?= htmlspecialchars($ext['url'], ENT_QUOTES); ?>" target="_blank" rel="noopener" class="ext-card__link">
+									View on GitHub
+									<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" width="14" height="14">
+										<path d="M7 17l9.2-9.2M17 17V7H7"/>
+									</svg>
+								</a>
+							<?php } ?>
+						</div>
+					<?php } ?>
 				</div>
 			<?php } ?>
 		</div>
+
+		<?php if ([] !== $view->data['themes']) { ?>
+			<div class="ext-themes">
+				<div class="ext-themes__head reveal">
+					<p class="label">// Themes</p>
+					<h2 class="title" style="margin-top: 14px">The default <em>theme</em></h2>
+					<p class="lead" style="margin-top: 18px">
+						Ships with WebifyCMS as the default front-end theme.
+					</p>
+				</div>
+				<div class="ext-list">
+					<?php foreach ($view->data['themes'] as $theme) { ?>
+						<div class="ext-card">
+							<div class="ext-card__head">
+								<h2 class="ext-card__name"><?= htmlspecialchars($theme['name'], ENT_QUOTES); ?></h2>
+								<span class="ext-card__tag ext-card__tag--<?= strtolower(str_replace(' ', '-', $theme['status'])); ?>">
+									<?= htmlspecialchars($theme['status'], ENT_QUOTES); ?>
+								</span>
+							</div>
+							<code class="ext-card__package"><?= htmlspecialchars($theme['package'], ENT_QUOTES); ?></code>
+							<p class="ext-card__desc"><?= htmlspecialchars($theme['description'], ENT_QUOTES); ?></p>
+							<?php if ('' !== $theme['version'] || '' !== $theme['url']) { ?>
+								<div class="ext-card__foot">
+									<?php if ('' !== $theme['version']) { ?>
+										<span class="ext-card__version"><?= htmlspecialchars($theme['version'], ENT_QUOTES); ?></span>
+									<?php } ?>
+									<?php if ('' !== $theme['url']) { ?>
+										<a href="<?= htmlspecialchars($theme['url'], ENT_QUOTES); ?>" target="_blank" rel="noopener" class="ext-card__link">
+											View on GitHub
+											<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" width="14" height="14">
+												<path d="M7 17l9.2-9.2M17 17V7H7"/>
+											</svg>
+										</a>
+									<?php } ?>
+								</div>
+							<?php } ?>
+						</div>
+					<?php } ?>
+				</div>
+			</div>
+		<?php } ?>
 	</div>
 </section>
 
diff --git a/templates/home.php b/templates/home.php
index 896992e..99057fd 100644
--- a/templates/home.php
+++ b/templates/home.php
@@ -304,22 +304,25 @@
 	</div>
 </section>
 
-<section class="section" id="sponsors">
+<section class="section" id="supporters">
 	<div class="container">
 		<div class="reveal" style="text-align: center; margin-bottom: 48px">
-			<p class="label label--center">// Sponsors</p>
+			<p class="label label--center">// Supporters</p>
 			<h2 class="title" style="margin-top: 14px">Supporting <em>WebifyCMS</em></h2>
-			<p class="lead" style="margin: 14px auto 0">The people and organizations who make this project possible.</p>
+			<p class="lead" style="margin: 14px auto 0">The people, organizations, and tools who make this project possible.</p>
 		</div>
 
 		<div class="sponsors__grid">
 			<a href="https://daisycon.com" target="_blank" rel="noopener" class="sponsor__card reveal">
 				<img src="<?= $view->assetUrl('img/daisycon.svg'); ?>" alt="Daisycon" width="300" height="85">
 			</a>
+			<a href="https://opencode.ai" target="_blank" rel="noopener" class="sponsor__card sponsor__card--mono reveal">
+				<img src="<?= $view->assetUrl('img/opencode.svg'); ?>" alt="opencode" width="234" height="42">
+			</a>
 		</div>
 
 		<div class="sponsors__cta reveal">
-			<p>Want to sponsor? <a href="mailto:mshifreen@gmail.com">Get in touch</a> &mdash; sponsor logos link back to your site.</p>
+			<p>Want to support the project? <a href="mailto:mshifreen@gmail.com">Get in touch</a> &mdash; we'd love to feature you here.</p>
 		</div>
 	</div>
 </section>
diff --git a/templates/post.php b/templates/post.php
index e5abed0..8090914 100644
--- a/templates/post.php
+++ b/templates/post.php
@@ -18,6 +18,7 @@
 		"headline": "<?= json_encode($view->data['title'], JSON_UNESCAPED_UNICODE); ?>",
 		"description": "<?= json_encode($view->data['excerpt'], JSON_UNESCAPED_UNICODE); ?>",
 		"datePublished": "<?= json_encode($view->data['date'], JSON_UNESCAPED_UNICODE); ?>",
+		"dateModified": "<?= json_encode($view->data['updated'], JSON_UNESCAPED_UNICODE); ?>",
 		"url": "<?= $view->url('/publishing/' . $view->data['slug']); ?>",
 		"author": {
 			"@type": "Organization",
@@ -51,6 +52,10 @@
 			</a>
 			<div class="post-header__meta">
 				<span class="post-header__date"><?= htmlspecialchars($view->data['date'], ENT_QUOTES); ?></span>
+				<?php if (($view->data['updated'] ?? '') !== $view->data['date']) { ?>
+					<span class="post-header__meta-sep"></span>
+					<span class="post-header__updated">Updated <?= htmlspecialchars($view->data['updated'], ENT_QUOTES); ?></span>
+				<?php } ?>
 				<span class="post-header__meta-sep"></span>
 				<span>Article</span>
 			</div>
diff --git a/vite.config.js b/vite.config.js
index 2816874..139675e 100644
--- a/vite.config.js
+++ b/vite.config.js
@@ -27,10 +27,28 @@ export default defineConfig(({ mode }) => {
         };
     }
 
+    // Copies source images referenced directly by templates (via assetUrl('img/...'))
+    // into the public docroot, mirroring the production Dockerfile step
+    // (docker/php/Dockerfile: `COPY assets/img/ ./public/assets/img/`).
+    // Only images imported by the bundle are emitted by Vite on their own.
+    function copyPublicImg() {
+        const source = path.resolve(__dirname, 'assets/img')
+        const target = path.resolve(__dirname, 'public/assets/img')
+
+        return {
+            name: 'copy-public-img',
+            closeBundle() {
+                fs.mkdirSync(target, { recursive: true })
+                fs.cpSync(source, target, { recursive: true })
+            },
+        };
+    }
+
     return {
         plugins: [
-            liveReload(['templates/**/*', 'src/**/*']),
             hotFilePlugin(),
+            copyPublicImg(),
+            liveReload(['templates/**/*', 'src/**/*']),
         ],
         server: {
             host: true,