Updates an existing time off request using JSON Merge Patch semantics: only the fields present in the body are changed, and employeeNote may be set to null to clear it. Accepts both application/merge-patch+json and application/json.

Editing a request whose status is REQUESTED replaces the stored request and restarts its approval workflow, so the id in the response differs from the id in the path. That id is authoritative and should replace any id the client is holding; the id that was replaced returns 410 from then on. requestedAt is carried over from the replaced request, and editing a request whose status is APPROVED updates it in place, so id and requestedAt are both unchanged in that case.

Changing startDate or endDate requires sending dailyAmounts in the same request, so the per-day breakdown always covers the stored range. Omitting it returns 422; the server does not redistribute amounts on the caller's behalf.

OAuth Scopes: time_off:requests.write