diff --git a/src/api/client.test.ts b/src/api/client.test.ts
index 57ad53e..962a388 100644
--- a/src/api/client.test.ts
+++ b/src/api/client.test.ts
@@ -23,7 +23,11 @@ describe("unused SPA API client", () => {
     const fetchMock = vi.fn(async () => new Response(JSON.stringify({ stage: "local", sha: "x" })));
     vi.stubGlobal("fetch", fetchMock);
     await apiFetch("/api/health", { headers: { Authorization: "Bearer leaked" } });
-    const init = fetchMock.mock.calls[0]?.[1] as RequestInit;
+    expect(fetchMock).toHaveBeenCalledWith(
+      "/api/health",
+      expect.objectContaining({ credentials: "include" }),
+    );
+    const init = fetchMock.mock.calls[0]?.[1] as unknown as RequestInit;
     expect(init.credentials).toBe("include");
     const headers = new Headers(init.headers);
     expect(headers.get("Authorization")).toBeNull();