diff --git a/k8s/openclaw/silverbullet.secret.yaml b/k8s/openclaw/silverbullet.secret.yaml
index 3187e7e..36f834f 100644
Binary files a/k8s/openclaw/silverbullet.secret.yaml and b/k8s/openclaw/silverbullet.secret.yaml differ
diff --git a/terraform/authentik.tf b/terraform/authentik.tf
index 33e08d0..057a7ff 100644
--- a/terraform/authentik.tf
+++ b/terraform/authentik.tf
@@ -349,6 +349,7 @@ resource "authentik_provider_proxy" "silverbullet" {
   authorization_flow    = data.authentik_flow.default_authorization_flow.id
   invalidation_flow     = data.authentik_flow.default_invalidation_flow.id
   intercept_header_auth = true
+  skip_path_regex       = "^/service_worker\\.js$|^/\\.client/.*|^/manifest\\.json$"
 }
 
 resource "authentik_application" "silverbullet" {
diff --git a/terraform/terraform.tfstate b/terraform/terraform.tfstate
index ad9cb66..7a45dce 100644
--- a/terraform/terraform.tfstate
+++ b/terraform/terraform.tfstate
@@ -1,7 +1,7 @@
 {
   "version": 4,
   "terraform_version": "1.14.3",
-  "serial": 413,
+  "serial": 415,
   "lineage": "8aff5d23-05f6-10eb-0ae6-1084c787677e",
   "outputs": {
     "coder_oauth_client_secret": {
@@ -2479,7 +2479,7 @@
             "name": "SilverBullet",
             "property_mappings": null,
             "refresh_token_validity": "days=30",
-            "skip_path_regex": ""
+            "skip_path_regex": "^/service_worker\\.js$|^/\\.client/.*|^/manifest\\.json$"
           },
           "sensitive_attributes": [],
           "identity_schema_version": 0,
diff --git a/terraform/terraform.tfstate.backup b/terraform/terraform.tfstate.backup
index d732b0e..ad9cb66 100644
--- a/terraform/terraform.tfstate.backup
+++ b/terraform/terraform.tfstate.backup
@@ -1,7 +1,7 @@
 {
   "version": 4,
   "terraform_version": "1.14.3",
-  "serial": 410,
+  "serial": 413,
   "lineage": "8aff5d23-05f6-10eb-0ae6-1084c787677e",
   "outputs": {
     "coder_oauth_client_secret": {
@@ -197,6 +197,39 @@
         }
       ]
     },
+    {
+      "mode": "data",
+      "type": "authentik_user",
+      "name": "amy",
+      "provider": "provider[\"registry.terraform.io/goauthentik/authentik\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "attributes": "{\"settings\":{\"locale\":\"\"}}",
+            "avatar": "data:image/svg+xml;base64,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",
+            "date_joined": "2026-09-05T14:23:01.528947Z",
+            "email": "",
+            "groups": [
+              "ad33b003-77a4-4571-bec8-8301f6d6552b"
+            ],
+            "id": "7",
+            "is_active": true,
+            "is_superuser": false,
+            "last_login": "2026-09-05T14:23:02.674777Z",
+            "name": "Amelie Graf",
+            "path": "users",
+            "pk": 7,
+            "type": "internal",
+            "uid": "771cd00470626adede1ffc8b70a4589a6778daf6de3280dfeaeaf11ae2aef8cf",
+            "username": "Amy",
+            "uuid": "bf49987e-864e-4b22-925b-e08bb8dc6cc9"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
     {
       "mode": "managed",
       "type": "authentik_application",
@@ -692,7 +725,7 @@
         {
           "schema_version": 0,
           "attributes": {
-            "backchannel_providers": null,
+            "backchannel_providers": [],
             "group": "",
             "id": "silverbullet",
             "meta_description": "",
@@ -961,6 +994,34 @@
         }
       ]
     },
+    {
+      "mode": "managed",
+      "type": "authentik_group",
+      "name": "family",
+      "provider": "provider[\"registry.terraform.io/goauthentik/authentik\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "attributes": "{}",
+            "id": "5e91f468-a0f2-4433-aa23-a7b6ad69df38",
+            "is_superuser": false,
+            "name": "family",
+            "parents": null,
+            "roles": null,
+            "users": [
+              7
+            ]
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "private": "bnVsbA==",
+          "dependencies": [
+            "data.authentik_user.amy"
+          ]
+        }
+      ]
+    },
     {
       "mode": "managed",
       "type": "authentik_group",
@@ -1574,6 +1635,40 @@
         }
       ]
     },
+    {
+      "mode": "managed",
+      "type": "authentik_policy_binding",
+      "name": "silverbullet_family",
+      "provider": "provider[\"registry.terraform.io/goauthentik/authentik\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "enabled": true,
+            "failure_result": false,
+            "group": "5e91f468-a0f2-4433-aa23-a7b6ad69df38",
+            "id": "210387b6-770a-4ef6-8996-96aa9428e46b",
+            "negate": false,
+            "order": 1,
+            "policy": "",
+            "target": "7bae1695-db74-48e9-9d1e-be81025701be",
+            "timeout": 30,
+            "user": 0
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "private": "bnVsbA==",
+          "dependencies": [
+            "authentik_application.silverbullet",
+            "authentik_group.family",
+            "authentik_provider_proxy.silverbullet",
+            "data.authentik_flow.default_authorization_flow",
+            "data.authentik_flow.default_invalidation_flow",
+            "data.authentik_user.amy"
+          ]
+        }
+      ]
+    },
     {
       "mode": "managed",
       "type": "authentik_policy_binding",
@@ -2378,8 +2473,8 @@
             "internal_host_ssl_validation": true,
             "invalidation_flow": "9add9e98-4fe7-48c5-bca8-d68968e0a7ba",
             "jwks_sources": null,
-            "jwt_federation_providers": null,
-            "jwt_federation_sources": null,
+            "jwt_federation_providers": [],
+            "jwt_federation_sources": [],
             "mode": "forward_single",
             "name": "SilverBullet",
             "property_mappings": null,