fix: enforce recipient email in Yivi session and add retry on failure (#47)

- In processPolicy(), restore the email attribute value from the
  publicly known recipient map key before sending the key request to the
  PKG, so Yivi requires the user to prove that specific email address
  rather than any email. Private/hint attributes (mobile number etc.)
  continue to have their values omitted.
- Add minimal: true to YiviCore config on the download page
- Add retry() function and centered retry button on the IdentityMismatch
  error state so users can re-scan after proving the wrong identity
- Add tryAgain i18n keys (en/nl)

Author: rubenhensen

src/lib/locales/en.json

@@ -108,7 +108,8 @@
             "notFoundMessage": "Ask the sender to send the files <strong>once more</strong>.",
             "identityMismatchTitle": "Decryption failed",
             "identityMismatchSubtitle": "The identity you provided does not match the intended recipient.",
-            "identityMismatchMessage": "Please make sure you are proving the correct email address in Yivi."
+            "identityMismatchMessage": "Please make sure you are proving the correct email address in Yivi.",
+            "tryAgain": "Try again"
         },
         "encryptPanel": {
             "fileBox": {

src/lib/locales/nl.json

@@ -108,7 +108,8 @@
             "notFoundMessage": "Vraag de verzender de bestanden <strong>nog een keer te versturen</strong>.",
             "identityMismatchTitle": "Ontsleutelen mislukt",
             "identityMismatchSubtitle": "De opgegeven identiteit komt niet overeen met de beoogde ontvanger.",
-            "identityMismatchMessage": "Zorg ervoor dat u het juiste e-mailadres bewijst in Yivi."
+            "identityMismatchMessage": "Zorg ervoor dat u het juiste e-mailadres bewijst in Yivi.",
+            "tryAgain": "Opnieuw proberen"
         },
         "encryptPanel": {
             "fileBox": {

src/routes/download/+page.svelte

@@ -2,9 +2,9 @@
     import { onMount, tick } from 'svelte'
     import { browser, dev } from '$app/environment'
     import { _ } from 'svelte-i18n'
-    import YiviCore from '@privacybydesign/yivi-core'
-    import YiviClient from '@privacybydesign/yivi-client'
-    import YiviWeb from '@privacybydesign/yivi-web'
+    import { YiviCore } from '@privacybydesign/yivi-core'
+    import { YiviClient } from '@privacybydesign/yivi-client'
+    import { YiviWeb } from '@privacybydesign/yivi-web'
     import YiviQRCode from '$lib/components/filesharing/YiviQRCode.svelte'
     import FileList from '$lib/components/filesharing/FileList.svelte'
     import { isMobile } from '$lib/browser-detect'
@@ -159,9 +159,14 @@
 
         recipientStripped = JSON.parse(JSON.stringify(recipientAndCreds))
         for (const c of recipientStripped) {
-            delete c.v
+            if (c.t?.includes('.email.')) {
+                // Email is the public map key — restore the value so Yivi enforces it
+                c.v = key
+            } else {
+                // Private/hint attributes: don't reveal their value to the PKG
+                delete c.v
+            }
         }
-
         keyRequest = {
             con: recipientStripped,
             validity: secondsTill4AM(),
@@ -172,6 +177,11 @@
         tick().then(() => startYiviSession())
     }
 
+    function retry() {
+        downloadState = 'Ready'
+        tick().then(() => startYiviSession())
+    }
+
     async function startYiviSession() {
         try {
             const { PKG_URL } = await import('$lib/env')
@@ -212,6 +222,7 @@
                 debugging: false,
                 session,
                 element: '#yivi-download',
+                minimal: true,
                 language: selectedLang.toLowerCase(),
                 state: {
                     serverSentEvents: false,
@@ -389,6 +400,14 @@
         {:else if downloadState === 'IdentityMismatch'}
             <p class="error-description">{$_('filesharing.decryptpanel.identityMismatchSubtitle')}</p>
             <p class="error-description">{$_('filesharing.decryptpanel.identityMismatchMessage')}</p>
+            <div class="retry-wrapper">
+                <Chip
+                    text={$_('filesharing.decryptpanel.tryAgain')}
+                    onclick={retry}
+                    size="lg"
+                    variant="dark"
+                />
+            </div>
         {/if}
     </div>
 </div>
@@ -564,6 +583,11 @@
         background: var(--pg-general-background);
     }
 
+    .retry-wrapper {
+        display: flex;
+        justify-content: center;
+    }
+
     .error-description {
         margin: 0;
         font-family: var(--pg-font-family);