chore: remove 'any' types and update metadata

[Zoltan Hricz (hriczzoli)]

No description provided.

[linear]

DXA-2887 Tighten up the project with TypeScript Strict Mode Compliance

[Copilot]

Pull request overview

This PR focuses on tightening TypeScript typing (removing any-based narrowing) across error formatting and postMessage handling, while also updating package metadata and adding targeted tests to lock in the new behavior.

Changes:

• Add tests for formatError to validate object-based error formatting and status-code extraction.
• Replace any usage with type guards / safer narrowing in errorFormatter and PostMessageHandler.
• Update public API typing for setCredentials, and refactor iframe sandbox policy into a constant.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
test/error-formatter.test.ts	Adds coverage for formatError object/JSON-details behavior.
src/utils/errorFormatter.ts	Introduces isRecord narrowing and refactors object error handling to avoid any.
src/utils/PostMessageHandler.ts	Adds type guards for incoming postMessage data and types pending request handlers.
src/types/api.ts	Switches setCredentials argument type to SetCredentialsPayload.
src/CortiEmbedded.ts	Replaces as any sandbox binding with a reusable constant.
package.json	Updates sideEffects metadata (now includes src/corti-embedded.ts).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

[Morten Barklund (barklund)]

Looks solid