Workflow Credential Reference Mapper

Scenario

Use when a workflow export has imported successfully but environment credentials and variable references must be reconnected manually.

Input and output

Input has source_refs, target_refs, and optional explicit mapping pairs. Output separates mapped, missing_target, unmapped_source, target_only, and a reconnect_status.

Execution and recovery

Run the example command. Duplicate mapping keys or malformed arrays return a visible error. BLOCKED means a human must supply an approved reference mapping; it never guesses.

Privacy boundary and acceptance

Use names or redacted identifiers only. Never place credentials, cookies, passwords, tokens, or private values in the input. The normal example returns REVIEW with a non-empty reconnect queue.