Patch card limits

PATCH 
/api/partner/cards/:id/limits

Updates one or more card limits in a single call. Each item needs a concrete name (a CardLimitType) and a non-negative value.

First call GET /cards/{id}/limits and use approvalThreshold and max from that response.

For each requested value:

• Above max → rejected with 400.
• Above approvalThreshold, but at or below max → the whole batch needs approval. Nothing changes on the card yet. Response is 201 with pendingApproval: true and a taskId. A new batch cancels any older pending request for the same card.
• At or below approvalThreshold → applied immediately (200).

Request

Responses

200

Limits updated immediately

201

Batch requires approval — nothing changed on the card yet

400

Bad request — missing or invalid fields

401

Unauthorized — missing or invalid JWT

403

Forbidden — resource not owned by the calling partner