@@ -14,9 +14,30 @@ The same bridge connects selected moderation and roleplay events to the wider co
 - **Moderation connections** — sends player warnings, and bans, unbans and expired timed bans from the server ban list, to the linked services so the Discord Banned role follows the in-game ban.
 - **Player benefit synchronization** — shares resolved player metadata and entitlements with ProvinceSystem.
 - **Bird-mail notifications** — provides the connection for BirdMessenger arrival notifications to linked Discord accounts.
+- **Staff-panel LuckPerms bridge** — publishes LuckPerms groups, tracks and player permissions to the website's staff panel, and applies the rank and permission changes staff queue there through LuckPerms.
 
 These features rely on the corresponding TF-Minecraft services and gameplay integrations being available.
 
+## LuckPerms bridge
+
+The bridge is off by default and needs LuckPerms on the server:
+
+```yaml
+luckperms-bridge:
+  publish: false        # send LuckPerms snapshots to this server's site
+  apply: false          # also apply staff-queued changes (implies publish)
+  poll-seconds: 3       # how often to fetch queued changes when applying
+  snapshot-seconds: 30  # how often to publish a snapshot
+```
+
+LuckPerms storage is shared between servers, so set `apply: true` on exactly one
+of them. A server that only publishes makes its site's panel read-only. Changes
+are checked against live LuckPerms data, saved together or not at all, logged in
+`/lp log`, and followed by a fresh snapshot. A change made by a website admin
+(rather than root) is refused if the player already holds a staff group, or if
+the group it adds, or any group that group inherits, is outside the admin groups. `/web status` shows the bridge state
+and the age of the last snapshot.
+
 ## Documentation
 
 [Project documentation](https://github.com/TF-Minecraft/Docs/blob/main/projects/TFMCWeb/README.md)
 
@@ -76,6 +76,13 @@ public final class Cache {
 	public static boolean banMirrorEnabled = true;
 	public static int banMirrorPollSeconds = 30;
 
+	/** Publish LuckPerms snapshots to this server's site. {@link #luckPermsBridgeApply} implies it. */
+	public static boolean luckPermsBridgePublish = false;
+	/** Apply staff-queued LuckPerms changes. LuckPerms storage is shared: one server only. */
+	public static boolean luckPermsBridgeApply = false;
+	public static int luckPermsBridgePollSeconds = 3;
+	public static int luckPermsBridgeSnapshotSeconds = 30;
+
 	private Cache() {}
 
 	/** Mutable noble/gilded/ascended → same-name group map. */
 
@@ -10,6 +10,7 @@
 import net.tfminecraft.tfmcweb.gate.DiscordGateService;
 import net.tfminecraft.tfmcweb.listeners.PlayerJoinListener;
 import net.tfminecraft.tfmcweb.loaders.ConfigLoader;
+import net.tfminecraft.tfmcweb.luckperms.LuckPermsBridge;
 import net.tfminecraft.tfmcweb.entitlements.PlayerMetaSyncService;
 import net.tfminecraft.tfmcweb.managers.BanMirrorPoller;
 import net.tfminecraft.tfmcweb.managers.LinkDiscordCommand;
@@ -30,6 +31,7 @@ public class TFMCWeb extends JavaPlugin {
 	private DiscordGateService gateService;
 	private PluginNoticePoller noticePoller;
 	private PatreonRankWriter rankWriter;
+	private LuckPermsBridge luckPermsBridge;
 	private BanMirrorPoller banMirror;
 
 	@Override
@@ -52,6 +54,8 @@ public void onEnable() {
 		noticePoller.start();
 		rankWriter = new PatreonRankWriter(this);
 		rankWriter.refresh();
+		luckPermsBridge = new LuckPermsBridge(this);
+		luckPermsBridge.refresh();
 
 		if (getCommand("linkdiscord") != null) {
 			getCommand("linkdiscord").setExecutor(new LinkDiscordCommand(this, linkCache, gateService));
@@ -66,7 +70,13 @@ public void onEnable() {
 			getLogger().severe("Command unlinkdiscord missing from plugin.yml");
 		}
 		if (getCommand("web") != null) {
-			WebCommand web = new WebCommand(this, linkCache, gateService, rankWriter);
+			WebCommand web = new WebCommand(
+				this,
+				linkCache,
+				gateService,
+				rankWriter,
+				luckPermsBridge
+			);
 			getCommand("web").setExecutor(web);
 			getCommand("web").setTabCompleter(web);
 		} else {
@@ -116,6 +126,9 @@ public void onDisable() {
 		if (rankWriter != null) {
 			rankWriter.stop();
 		}
+		if (luckPermsBridge != null) {
+			luckPermsBridge.stop();
+		}
 		if (banMirror != null) {
 			banMirror.stop();
 		}
@@ -134,6 +147,9 @@ public void reloadLocalConfig() {
 		if (rankWriter != null) {
 			rankWriter.refresh();
 		}
+		if (luckPermsBridge != null) {
+			luckPermsBridge.refresh();
+		}
 		PlayerMetaSyncService.pushAllOnlineAsync();
 	}