From 7b8c4104cbc62e713cebb3ec0b6eb5668f7f7a70 Mon Sep 17 00:00:00 2001
From: Anmol1696 <anmol1696@gmail.com>
Date: Mon, 26 Jan 2026 16:07:01 +0400
Subject: [PATCH] fix 12factor evn to read env variables as well

---
 packages/12factor-env/src/index.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/packages/12factor-env/src/index.ts b/packages/12factor-env/src/index.ts
index 465ef1708..6f196e0d5 100644
--- a/packages/12factor-env/src/index.ts
+++ b/packages/12factor-env/src/index.ts
@@ -143,7 +143,9 @@ const env = <S extends Specs, V extends Specs>(
   const _secrets = secretEnv(varEnv as unknown as Record<string, string | undefined>, secrets);
 
   // Second pass: validate secrets with file values merged in
-  const mergedEnv = { ...varEnv, ..._secrets } as unknown as Record<string, string | undefined>;
+  // Include inputEnv first so env vars (e.g., Kubernetes secretKeyRef) are available,
+  // then varEnv overrides, then file-based secrets have highest priority
+  const mergedEnv = { ...inputEnv, ...varEnv, ..._secrets } as unknown as Record<string, string | undefined>;
   return cleanEnv(mergedEnv, secrets) as unknown as CleanedEnv<S & V>;
 };