fix: persist server mute/deafen state across reloads and prevent client bypass

Server-side: add DB persistence for voice restrictions (schema, migration,
ready payload, cleanup on leave). Client-side: fix four bugs that wiped or
bypassed server restriction state — leaveVoice() no longer clears global
restriction Sets, voice_state_update leave no longer drops amber icons,
toggleMic/toggleDeafen now guard against server restrictions, and force-mute/
deafen uses direct setState instead of fragile toggle calls.

packages/server/src/ws/events.ts

@@ -476,6 +476,36 @@ function handleVoiceJoin(event: Record<string, unknown>, userId: string): void {
       isScreenSharing: status.isScreenSharing,
     });
   }
+
+  // Load persistent voice restrictions for this user in this space
+  const db = getDb();
+  const restrictions = db.select()
+    .from(schema.voiceRestrictions)
+    .where(and(
+      eq(schema.voiceRestrictions.spaceId, spaceId),
+      eq(schema.voiceRestrictions.userId, userId),
+    ))
+    .all();
+
+  for (const r of restrictions) {
+    if (r.restrictionType === 'mute') {
+      connectionManager.setServerMuted(userId, true);
+      connectionManager.sendToSpace(spaceId, {
+        type: 'voice_server_muted',
+        userId,
+        channelId,
+        muted: true,
+      });
+    } else if (r.restrictionType === 'deafen') {
+      connectionManager.setServerDeafened(userId, true);
+      connectionManager.sendToSpace(spaceId, {
+        type: 'voice_server_deafened',
+        userId,
+        channelId,
+        deafened: true,
+      });
+    }
+  }
 }
 
 function handleVoiceLeave(userId: string): void {
@@ -1092,6 +1122,26 @@ function handleVoiceServerMute(event: Record<string, unknown>, userId: string):
 
   connectionManager.setServerMuted(targetUserId, muted);
 
+  // Persist to DB
+  const db = getDb();
+  if (muted) {
+    db.insert(schema.voiceRestrictions).values({
+      spaceId: meta.spaceId,
+      userId: targetUserId,
+      restrictionType: 'mute',
+      moderatorId: userId,
+      createdAt: Date.now(),
+    }).onConflictDoNothing().run();
+  } else {
+    db.delete(schema.voiceRestrictions).where(
+      and(
+        eq(schema.voiceRestrictions.spaceId, meta.spaceId),
+        eq(schema.voiceRestrictions.userId, targetUserId),
+        eq(schema.voiceRestrictions.restrictionType, 'mute'),
+      )
+    ).run();
+  }
+
   // Broadcast to all space members
   connectionManager.sendToSpace(meta.spaceId, {
     type: 'voice_server_muted',
@@ -1129,6 +1179,26 @@ function handleVoiceServerDeafen(event: Record<string, unknown>, userId: string)
 
   connectionManager.setServerDeafened(targetUserId, deafened);
 
+  // Persist to DB
+  const db = getDb();
+  if (deafened) {
+    db.insert(schema.voiceRestrictions).values({
+      spaceId: meta.spaceId,
+      userId: targetUserId,
+      restrictionType: 'deafen',
+      moderatorId: userId,
+      createdAt: Date.now(),
+    }).onConflictDoNothing().run();
+  } else {
+    db.delete(schema.voiceRestrictions).where(
+      and(
+        eq(schema.voiceRestrictions.spaceId, meta.spaceId),
+        eq(schema.voiceRestrictions.userId, targetUserId),
+        eq(schema.voiceRestrictions.restrictionType, 'deafen'),
+      )
+    ).run();
+  }
+
   connectionManager.sendToSpace(meta.spaceId, {
     type: 'voice_server_deafened',
     userId: targetUserId,

packages/server/src/ws/handler.ts

@@ -890,6 +890,19 @@ function buildReadyPayload(userId: string): {
     }
   }
 
+  // Also include the connecting user's own DB-persisted restrictions
+  // (covers reconnect after disconnect timeout cleared in-memory state)
+  const myRestrictions = db.select()
+    .from(schema.voiceRestrictions)
+    .where(eq(schema.voiceRestrictions.userId, userId))
+    .all();
+  for (const r of myRestrictions) {
+    const existing = serverVoiceStates[userId] ?? { serverMuted: false, serverDeafened: false };
+    if (r.restrictionType === 'mute') existing.serverMuted = true;
+    if (r.restrictionType === 'deafen') existing.serverDeafened = true;
+    serverVoiceStates[userId] = existing;
+  }
+
   // Fetch read states for unread tracking
   const readStateRows = db.select()
     .from(schema.readStates)