Zahlungs- und Rechnungseinstellungen speichern

{
  "operationId": "put_v2_paymentsystem",
  "summary": "Zahlungs- und Rechnungseinstellungen speichern",
  "description": "Ändert die übergebenen Felder der eigenen Zahlungskonfiguration. Rechnungsaktivierung benötigt vorhandene Angaben für Inhaber, IBAN und BIC; PayPal/Stripe-Aktivierung setzt eine nutzbare Verbindung voraus. stripev3 lässt sich nach Aktivierung nicht deaktivieren. Saferpay erlaubt partielle Slot-Änderungen und bewahrt maskierte Werte. QR-Konfigurationen und E-Rechnungsprofile werden feldspezifisch validiert. Die früheren PayPal-v1-Felder paypal/paypal_email/paypal_aktiv/paypal_ipn_email werden ignoriert. Beim Basisendpunkt ist die äußere account-ID erforderlich.",
  "tags": [
    "paymentsystem"
  ],
  "security": [
    {
      "bearerAuth": [],
      "accountContext": []
    },
    {
      "sessionCookie": [],
      "accountContext": []
    }
  ],
  "parameters": [
    {
      "name": "language",
      "in": "header",
      "required": false,
      "description": "Account language code, where the resource supports setLanguage().",
      "schema": {
        "type": "string",
        "examples": [
          "de"
        ]
      }
    },
    {
      "name": "X-Edoobox-If-Revision",
      "in": "header",
      "required": false,
      "schema": {
        "type": "string",
        "pattern": "^[a-f0-9]{32}$",
        "examples": [
          "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        ]
      },
      "description": "Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review."
    }
  ],
  "responses": {
    "200": {
      "description": "Öffentliche account-ID und update; keine Zugangsdaten im Schreibresultat.",
      "content": {
        "application/json": {
          "example": {
            "success": true,
            "error": false,
            "data": {
              "id": "account_012345abcdef_123456",
              "update": true
            }
          },
          "schema": {
            "type": "object",
            "properties": {
              "success": {
                "type": "boolean"
              },
              "error": {
                "type": [
                  "boolean",
                  "string"
                ]
              },
              "error_code": {
                "type": "string"
              },
              "data": {
                "type": "object",
                "properties": {
                  "id": {
                    "type": "string",
                    "pattern": "^account_[a-f0-9]{12}_-?[0-9]+$",
                    "description": "Öffentliche v2-ID aus diesem Konto; keine interne Datenbank-ID.",
                    "examples": [
                      "account_012345abcdef_123456"
                    ]
                  },
                  "update": {
                    "type": "boolean"
                  }
                },
                "additionalProperties": true
              },
              "type": {
                "type": "string"
              }
            },
            "additionalProperties": true
          }
        }
      },
      "headers": {
        "X-Edoobox-Revision": {
          "schema": {
            "type": "string",
            "pattern": "^[a-f0-9]{32}$"
          },
          "description": "Rotated account revision supplied for the next action in one reviewed sequence."
        }
      }
    },
    "400": {
      "description": "Invalid request.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40006"
          }
        }
      }
    },
    "401": {
      "description": "Missing/expired token, missing account context, account paused or model-specific authorization failure.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40103"
          }
        }
      }
    },
    "402": {
      "description": "Missing/invalid action data or subscription/operation restriction.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80100"
          }
        }
      }
    },
    "403": {
      "description": "Permission denied. Browser CORS rejection may have an empty body.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40340"
          }
        }
      }
    },
    "404": {
      "description": "Unknown resource/action or unsupported method.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80019"
          }
        }
      }
    },
    "409": {
      "description": "The account changed after the reviewed read. No domain operation is dispatched; obtain fresh state and review again.",
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "additionalProperties": true
          },
          "example": {
            "error": "ED40901",
            "error_code": "mutation_revision_conflict"
          }
        }
      }
    },
    "422": {
      "description": "Validation failed.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80020"
          }
        }
      }
    },
    "429": {
      "description": "Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED42902"
          }
        }
      },
      "headers": {
        "Retry-After": {
          "description": "Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.",
          "schema": {
            "type": "string",
            "examples": [
              "30"
            ]
          }
        }
      }
    },
    "502": {
      "description": "Server-side operation failed.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED50201"
          }
        }
      }
    },
    "503": {
      "description": "The account mutation lock or revision store is unavailable. No unprotected fallback is executed.",
      "headers": {
        "Retry-After": {
          "schema": {
            "type": "integer",
            "const": 1
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "additionalProperties": true
          },
          "example": {
            "error": "ED50301",
            "error_code": "mutation_revision_busy"
          }
        }
      }
    }
  },
  "x-edoobox-mutates-state": true,
  "requestBody": {
    "required": true,
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "properties": {
            "data": {
              "type": "object",
              "properties": {
                "id": false,
                "paypal_v2": {
                  "description": "Canonical boolean; PHP loose truthiness chooses enable/disable. Existing PayPal connection must be completed and non-revoked. No boolean-only wire-type rejection is implemented.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "boolean",
                  "examples": [
                    false,
                    true
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 34,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact <Resource>func hook with original full payload: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 847,
                      "reason": "Actual activation hook and prerequisite conditions.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 857,
                      "reason": "Ordinary POST payment settings creation is unsupported.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/paymentsystem/Paypalprovider.php",
                      "line": 340,
                      "reason": "Connection lookup is account-scoped and completed/non-revoked.",
                      "sha256": "b2b234c67075a768b6cb86bd4f0ac591b010433b6a1aadf305afc2e5592cf4b5"
                    },
                    {
                      "file": "application/models/paymentsystem/Paypalprovider.php",
                      "line": 386,
                      "reason": "Returns false when no matching connection exists.",
                      "sha256": "b2b234c67075a768b6cb86bd4f0ac591b010433b6a1aadf305afc2e5592cf4b5"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "paypalv2_connect": false,
                "invoice_auto": {
                  "description": "Canonical boolean; PHP loose truthiness chooses enable/disable. Existing invoice_holder, invoice_iban and invoice_bic must be nonempty. No boolean-only wire-type rejection is implemented.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "boolean",
                  "examples": [
                    false,
                    true
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 81,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact <Resource>func hook with original full payload: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 437,
                      "reason": "Actual activation hook and prerequisite conditions.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 857,
                      "reason": "Ordinary POST payment settings creation is unsupported.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 413,
                      "reason": "Prerequisites are loaded through existing ordinary GET output, not merged from request values.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 585,
                      "reason": "Common storage helper invokes the incoming getter with insert=true.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "invoice_manual": {
                  "description": "Canonical boolean; PHP loose truthiness chooses enable/disable. Existing invoice_holder, invoice_iban and invoice_bic must be nonempty. No boolean-only wire-type rejection is implemented.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "boolean",
                  "examples": [
                    false,
                    true
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 91,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact <Resource>func hook with original full payload: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 457,
                      "reason": "Actual activation hook and prerequisite conditions.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 857,
                      "reason": "Ordinary POST payment settings creation is unsupported.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 413,
                      "reason": "Prerequisites are loaded through existing ordinary GET output, not merged from request values.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 585,
                      "reason": "Common storage helper invokes the incoming getter with insert=true.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "invoice_holder": {
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-maxStoredLength": 100,
                  "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                  "examples": [
                    "Example"
                  ],
                  "x-edoobox-sourceLine": 101
                },
                "invoice_iban": {
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-maxStoredLength": 100,
                  "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                  "examples": [
                    "Example"
                  ],
                  "x-edoobox-sourceLine": 110
                },
                "invoice_bic": {
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-maxStoredLength": 20,
                  "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                  "examples": [
                    "Example"
                  ],
                  "x-edoobox-sourceLine": 119
                },
                "invoice_alias": {
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-maxStoredLength": 5,
                  "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                  "examples": [
                    "Example"
                  ],
                  "x-edoobox-sourceLine": 128
                },
                "invoice_number": {
                  "x-edoobox-schemaStatus": "source-inferred",
                  "x-edoobox-sourceLine": 137,
                  "x-edoobox-canonicalType": "integer",
                  "x-edoobox-normalization": "PHP coercion/normalization is applied by the Structure getter; its return type is not a rejecting wire-input type restriction.",
                  "examples": [
                    1
                  ]
                },
                "invoice_paytime": {
                  "x-edoobox-schemaStatus": "source-inferred",
                  "x-edoobox-sourceLine": 147,
                  "x-edoobox-canonicalType": "integer",
                  "x-edoobox-normalization": "PHP coercion/normalization is applied by the Structure getter; its return type is not a rejecting wire-input type restriction.",
                  "examples": [
                    1
                  ]
                },
                "invoice_paytime_auto": {
                  "x-edoobox-schemaStatus": "source-inferred",
                  "x-edoobox-sourceLine": 156,
                  "x-edoobox-canonicalType": "boolean",
                  "x-edoobox-normalization": "PHP coercion/normalization is applied by the Structure getter; its return type is not a rejecting wire-input type restriction.",
                  "examples": [
                    false
                  ]
                },
                "invoice_recalculate_due_date": {
                  "x-edoobox-schemaStatus": "source-inferred",
                  "x-edoobox-sourceLine": 165,
                  "x-edoobox-canonicalType": "boolean",
                  "x-edoobox-normalization": "PHP coercion/normalization is applied by the Structure getter; its return type is not a rejecting wire-input type restriction.",
                  "examples": [
                    false
                  ]
                },
                "invoice_address_email": {
                  "description": "PHP loose switch recognizes 2/3, including numeric strings; every other input becomes 1. Recognized values are guidance, not a rejecting enum.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "integer",
                  "x-edoobox-recognizedValues": [
                    1,
                    2,
                    3
                  ],
                  "examples": [
                    1,
                    2,
                    3
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 174,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT dispatches API_DATA with Modal Paymentsystem; named deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1808,
                      "reason": "Joined update invokes getter directly.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "invoice_qriso20022": {
                  "x-edoobox-schemaStatus": "source-inferred",
                  "x-edoobox-sourceLine": 207,
                  "x-edoobox-canonicalType": "boolean",
                  "x-edoobox-normalization": "PHP coercion/normalization is applied by the Structure getter; its return type is not a rejecting wire-input type restriction.",
                  "examples": [
                    false
                  ]
                },
                "invoice_qriso20022_config": {
                  "description": "Canonical shape in x-edoobox-supportedWireSchema. Type is QRR iff loosely equal to QRR, else SCOR. Rebuilds parts, forces first accepted block 1..6/locked and start-27 block end 27/locked, ignores supplied lock and unknown keys, sanitizes/truncates field to 50, preserves label. Throws for length<1; contiguous noninitial nonnull value longer than range; contiguous end>27 or end===27 with start!=27. Positive-length noncontiguous parts are omitted. No mandatory coverage/minItems/field enum.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "object",
                  "x-edoobox-supportedWireSchema": {
                    "type": "object",
                    "properties": {
                      "type": {
                        "type": "string"
                      },
                      "config": {
                        "type": "object",
                        "properties": {
                          "parts": {
                            "type": "array",
                            "items": {
                              "type": "object",
                              "properties": {
                                "start": {
                                  "type": "integer"
                                },
                                "end": {
                                  "type": "integer"
                                },
                                "value": {
                                  "anyOf": [
                                    {
                                      "type": "integer"
                                    },
                                    {
                                      "type": "string"
                                    },
                                    {
                                      "type": "null"
                                    }
                                  ]
                                },
                                "field": {
                                  "anyOf": [
                                    {
                                      "type": "string"
                                    },
                                    {
                                      "type": "null"
                                    }
                                  ]
                                },
                                "label": {},
                                "lock": {}
                              },
                              "additionalProperties": true
                            }
                          }
                        },
                        "additionalProperties": true
                      }
                    },
                    "additionalProperties": true
                  },
                  "examples": [
                    {
                      "type": "QRR",
                      "config": {
                        "parts": [
                          {
                            "start": 1,
                            "end": 6,
                            "value": null,
                            "field": null,
                            "label": "Synthetic label"
                          },
                          {
                            "start": 7,
                            "end": 26,
                            "value": null,
                            "field": "invoice_number",
                            "label": null
                          },
                          {
                            "start": 27,
                            "end": 27,
                            "value": null,
                            "field": null,
                            "label": null
                          }
                        ]
                      }
                    }
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 226,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT dispatches API_DATA with Modal Paymentsystem; named deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1808,
                      "reason": "Joined update invokes incoming getter directly.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "invoice_zugferd": {
                  "description": "Hook validates/defaults profile then calls this getter. A supplied truthy profile must validate. Missing/falsy supplied profile uses existing stored profile; empty storage gets default only on truthy enable, otherwise can reject even disable.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "boolean",
                  "examples": [
                    true,
                    false
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 392,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact resource hook: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT dispatches API_DATA with Modal Paymentsystem; named deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 500,
                      "reason": "Actual checkZUGFeRDProfile hook and conditional profile rejection/defaulting.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/helpers/edooboxhelp_helper.php",
                      "line": 11523,
                      "reason": "edisset treats null and false-like supplied profiles as absent.",
                      "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e"
                    },
                    {
                      "file": "application/libraries/edoobox/EdZUGFeRD.php",
                      "line": 9,
                      "reason": "Locally added profiles and legacy aliases.",
                      "sha256": "ccd96e8ffbacf35638370441d41a61fa02240c51e58db3bc07402746aec7870d"
                    },
                    {
                      "file": "application/libraries/edoobox/EdZUGFeRD.php",
                      "line": 30,
                      "reason": "Validity checks defined constants plus PROFILEDEF.",
                      "sha256": "ccd96e8ffbacf35638370441d41a61fa02240c51e58db3bc07402746aec7870d"
                    },
                    {
                      "file": "application/libraries/edoobox/EdZUGFeRD.php",
                      "line": 106,
                      "reason": "Profile aliases normalize to default name.",
                      "sha256": "ccd96e8ffbacf35638370441d41a61fa02240c51e58db3bc07402746aec7870d"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "invoice_zugferd_profiles": {
                  "type": "string",
                  "description": "Single profile-name string validated by the native EdZUGFeRD profile validator and normalized for recognized legacy aliases. An unknown profile returns strict false; the final generic joined writer rejects ED80100 before persistence even when this field is supplied alone. The listed recognized values document known producer names; no universal future library enum is inferred.",
                  "x-edoobox-schemaStatus": "source-reviewed-runtime-validation",
                  "x-edoobox-recognizedValues": [
                    "PROFILE_BASIC",
                    "PROFILE_BASICWL",
                    "PROFILE_EN16931",
                    "PROFILE_EXTENDED",
                    "PROFILE_XRECHNUNG",
                    "PROFILE_XRECHNUNG_2",
                    "PROFILE_XRECHNUNG_2_1",
                    "PROFILE_XRECHNUNG_2_2",
                    "PROFILE_MINIMUM",
                    "PROFILE_XRECHNUNG_2_3",
                    "PROFILE_XRECHNUNG_3",
                    "PROFILE_XRECHNUNG_2_4",
                    "PROFILE_ZUGFERD_2_4",
                    "PROFILE_ZUGFERD_2_5"
                  ],
                  "examples": [
                    "PROFILE_EN16931"
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 412,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT dispatches API_DATA with Modal Paymentsystem; named deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1808,
                      "reason": "Final joined update rejects strict-false getter results before queueing and persistence.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 500,
                      "reason": "invoice_zugferd hook explicitly validates/defaults profile.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/libraries/edoobox/EdZUGFeRD.php",
                      "line": 9,
                      "reason": "Locally added profiles and legacy aliases.",
                      "sha256": "ccd96e8ffbacf35638370441d41a61fa02240c51e58db3bc07402746aec7870d"
                    },
                    {
                      "file": "application/libraries/edoobox/EdZUGFeRD.php",
                      "line": 30,
                      "reason": "Validity checks defined constants plus PROFILEDEF.",
                      "sha256": "ccd96e8ffbacf35638370441d41a61fa02240c51e58db3bc07402746aec7870d"
                    },
                    {
                      "file": "application/libraries/edoobox/EdZUGFeRD.php",
                      "line": 106,
                      "reason": "Profile aliases normalize to default name.",
                      "sha256": "ccd96e8ffbacf35638370441d41a61fa02240c51e58db3bc07402746aec7870d"
                    },
                    {
                      "file": "vendor/horstoeko/zugferd/src/ZugferdProfiles.php",
                      "line": 37,
                      "reason": "Read-only installed parent constant definitions; no dependency operation.",
                      "sha256": "d855d091ef5fa74b135d42a76b1bb8098f0480e2b45bbdfbebf8063db9a7de84"
                    },
                    {
                      "file": "vendor/horstoeko/zugferd/src/ZugferdProfiles.php",
                      "line": 98,
                      "reason": "Installed parent PROFILEDEF keys.",
                      "sha256": "d855d091ef5fa74b135d42a76b1bb8098f0480e2b45bbdfbebf8063db9a7de84"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "invoice_zugferd_managing_director": {
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-maxStoredLength": 80,
                  "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                  "examples": [
                    "Example"
                  ],
                  "x-edoobox-sourceLine": 434
                },
                "invoice_zugferd_commercial_register": {
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-maxStoredLength": 80,
                  "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                  "examples": [
                    "Example"
                  ],
                  "x-edoobox-sourceLine": 453
                },
                "invoice_zugferd_seller_tax_number": {
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-maxStoredLength": 80,
                  "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                  "examples": [
                    "Example"
                  ],
                  "x-edoobox-sourceLine": 472
                },
                "invoice_show_payment": {
                  "description": "Hook delegates to UpdateAccountData, which calls the incoming getter. Loose PHP equality to true stores 1/0; boolean is canonical.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "boolean",
                  "examples": [
                    false,
                    true
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 491,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact <Resource>func hook with original full payload: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 477,
                      "reason": "Hook forwards raw value to common helper.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 570,
                      "reason": "Common helper calls field incoming getter.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/helpers/edooboxhelp_helper.php",
                      "line": 11560,
                      "reason": "Getter supplies generated 1/0 string to aP.",
                      "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "bitpay": {
                  "x-edoobox-schemaStatus": "source-inferred",
                  "x-edoobox-sourceLine": 511,
                  "x-edoobox-canonicalType": "boolean",
                  "x-edoobox-normalization": "PHP coercion/normalization is applied by the Structure getter; its return type is not a rejecting wire-input type restriction.",
                  "examples": [
                    false
                  ]
                },
                "bitpay_key": {
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-maxStoredLength": 250,
                  "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                  "examples": [
                    "Example"
                  ],
                  "x-edoobox-sourceLine": 520
                },
                "klarnasofort": {
                  "x-edoobox-schemaStatus": "source-inferred",
                  "x-edoobox-sourceLine": 530,
                  "x-edoobox-canonicalType": "boolean",
                  "x-edoobox-normalization": "PHP coercion/normalization is applied by the Structure getter; its return type is not a rejecting wire-input type restriction.",
                  "examples": [
                    false
                  ]
                },
                "klarnasofort_key": {
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-maxStoredLength": 250,
                  "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                  "examples": [
                    "Example"
                  ],
                  "x-edoobox-sourceLine": 540
                },
                "saferpay": {
                  "x-edoobox-schemaStatus": "source-inferred",
                  "x-edoobox-sourceLine": 549,
                  "x-edoobox-canonicalType": "boolean",
                  "x-edoobox-normalization": "PHP coercion/normalization is applied by the Structure getter; its return type is not a rejecting wire-input type restriction.",
                  "examples": [
                    false
                  ]
                },
                "saferpay_version": {
                  "description": "Trims string-cast input; exact 1.50 stays 1.50 and every other value becomes 1.23. No rejecting enum or length rule.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-recognizedValues": [
                    "1.23",
                    "1.50"
                  ],
                  "examples": [
                    "1.50",
                    "1.23"
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 558,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT dispatches API_DATA with Modal Paymentsystem; named deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1808,
                      "reason": "Joined update directly executes getter.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/helpers/edooboxhelp_helper.php",
                      "line": 11560,
                      "reason": "aP gets an already normalized version string.",
                      "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "saferpay_api": {
                  "description": "PUT accepts a partial array or object with positional string fields 0–4. Only supplied, changed credential slots are encoded in the existing legacy storage format so that the provider's single decoding step receives the exact submitted credential bytes. Omitted fields, unchanged decoded values and matching GET masks or all-asterisk placeholders retain their stored bytes. Explicit empty strings clear supplied fields; the Vue reset clears fields 0–3 while retaining the legacy fifth field. Reads use only the authorized tenant. Invalid indices, nonstring values, NUL bytes and the ]=[ delimiter are rejected with ED80100. The hook returns an internal persistence patch; the public PUT response contains only the ordinary id/update acknowledgement.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "array",
                  "x-edoobox-sensitive": true,
                  "x-edoobox-supportedWireSchema": {
                    "anyOf": [
                      {
                        "type": "array",
                        "maxItems": 5,
                        "items": {
                          "type": "string",
                          "not": {
                            "anyOf": [
                              {
                                "pattern": "\\]=\\["
                              },
                              {
                                "pattern": "\\u0000"
                              }
                            ]
                          }
                        }
                      },
                      {
                        "type": "object",
                        "propertyNames": {
                          "enum": [
                            "0",
                            "1",
                            "2",
                            "3",
                            "4"
                          ]
                        },
                        "additionalProperties": {
                          "type": "string",
                          "not": {
                            "anyOf": [
                              {
                                "pattern": "\\]=\\["
                              },
                              {
                                "pattern": "\\u0000"
                              }
                            ]
                          }
                        }
                      }
                    ]
                  },
                  "examples": [
                    {
                      "3": "SYNTHETIC_PASSWORD"
                    }
                  ],
                  "anyOf": [
                    {
                      "type": "array",
                      "maxItems": 5,
                      "items": {
                        "type": "string",
                        "not": {
                          "anyOf": [
                            {
                              "pattern": "\\]=\\["
                            },
                            {
                              "pattern": "\\u0000"
                            }
                          ]
                        }
                      }
                    },
                    {
                      "type": "object",
                      "propertyNames": {
                        "enum": [
                          "0",
                          "1",
                          "2",
                          "3",
                          "4"
                        ]
                      },
                      "additionalProperties": {
                        "type": "string",
                        "not": {
                          "anyOf": [
                            {
                              "pattern": "\\]=\\["
                            },
                            {
                              "pattern": "\\u0000"
                            }
                          ]
                        }
                      }
                    }
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 585,
                      "reason": "Exact Structure declaration and response projection: each stored slot is decoded once; password slot 3 always masks nonempty values, including short passwords. Other slots retain their established masking pattern.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1867,
                      "reason": "Dispatches the original payload to the hook, merges its internal persistence patch, and returns only the normal id/update acknowledgement after a successful transaction.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 882,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 27,
                      "reason": "The PUT hook validates positional string patches, reads only authorized-tenant storage, and encodes only changed slots for the existing provider decode. Omitted fields, unchanged decoded values and known mask placeholders retain stored bytes. Returns an internal persistence patch only.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/helpers/edooboxhelp_helper.php",
                      "line": 11583,
                      "reason": "Per-slot secret masking.",
                      "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Earlier independent field-level review; its legacy saferpay_api merge description is superseded by the hook and regression-test source references in this contract.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    },
                    {
                      "file": "tests/V2/WebMcpSaferpayConfigurationTest.php",
                      "line": 1,
                      "reason": "Pest executes the real configuration hook, GET projection and controlled Provider Initialize/Assert: byte preservation, quotes/backslashes through actual HTTP Basic authentication, short-password masking, placeholder/clear semantics, tenant binding and invalid-shape rejection. All DB/HTTP boundaries use in-memory doubles.",
                      "sha256": "c871916d1cc812ff91313d819ae953cd5436c0b1344688c1d1257921e3c443cb"
                    }
                  ]
                },
                "authorize": {
                  "description": "Canonical boolean; PHP loose truthiness chooses enable/disable. Existing authorize_login_id, authorize_transaction_key and authorize_client_key must be nonempty. No boolean-only wire-type rejection is implemented.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "boolean",
                  "examples": [
                    false,
                    true
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 617,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact <Resource>func hook with original full payload: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 8,
                      "reason": "Actual activation hook and prerequisite conditions.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 857,
                      "reason": "Ordinary POST payment settings creation is unsupported.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 413,
                      "reason": "Prerequisites are loaded through existing ordinary GET output, not merged from request values.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 570,
                      "reason": "Common storage helper invokes the incoming getter with insert=true.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "authorize_login_id": {
                  "description": "Sensitive credential: strings are trimmed, line breaks replaced, SQL-escaped and truncated to 250 characters by aP; nonstrings normalize to empty. These are normalization rules, not rejecting maxLength/type rules.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-sensitive": true,
                  "examples": [
                    "SYNTHETIC_ONLY_VALUE"
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 637,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact <Resource>func hook with original full payload: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 84,
                      "reason": "Actual hook forwards original field value.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 570,
                      "reason": "Storage helper invokes getter.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/helpers/edooboxhelp_helper.php",
                      "line": 11560,
                      "reason": "aP string normalization and nonstring empty fallback.",
                      "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e"
                    },
                    {
                      "file": "application/helpers/edooboxhelp_helper.php",
                      "line": 11583,
                      "reason": "Actual response masking.",
                      "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "authorize_transaction_key": {
                  "description": "Sensitive credential: strings are trimmed, line breaks replaced, SQL-escaped and truncated to 250 characters by aP; nonstrings normalize to empty. These are normalization rules, not rejecting maxLength/type rules.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-sensitive": true,
                  "examples": [
                    "SYNTHETIC_ONLY_VALUE"
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 657,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact <Resource>func hook with original full payload: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 90,
                      "reason": "Actual hook forwards original field value.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 570,
                      "reason": "Storage helper invokes getter.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/helpers/edooboxhelp_helper.php",
                      "line": 11560,
                      "reason": "aP string normalization and nonstring empty fallback.",
                      "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e"
                    },
                    {
                      "file": "application/helpers/edooboxhelp_helper.php",
                      "line": 11583,
                      "reason": "Actual response masking.",
                      "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "authorize_client_key": {
                  "description": "Sensitive credential: strings are trimmed, line breaks replaced, SQL-escaped and truncated to 250 characters by aP; nonstrings normalize to empty. These are normalization rules, not rejecting maxLength/type rules.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "string",
                  "x-edoobox-sensitive": true,
                  "examples": [
                    "SYNTHETIC_ONLY_VALUE"
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 677,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact <Resource>func hook with original full payload: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 96,
                      "reason": "Actual hook forwards original field value.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 570,
                      "reason": "Storage helper invokes getter.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/helpers/edooboxhelp_helper.php",
                      "line": 11560,
                      "reason": "aP string normalization and nonstring empty fallback.",
                      "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e"
                    },
                    {
                      "file": "application/helpers/edooboxhelp_helper.php",
                      "line": 11583,
                      "reason": "Actual response masking.",
                      "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "stripe": {
                  "description": "Canonical boolean; PHP loose truthiness chooses enable/disable. Existing stripe_connect must not be false, then existing stripev3 must be strictly true. No boolean-only wire-type rejection is implemented.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "boolean",
                  "examples": [
                    false,
                    true
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 697,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact <Resource>func hook with original full payload: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 102,
                      "reason": "Actual activation hook and prerequisite conditions.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 857,
                      "reason": "Ordinary POST payment settings creation is unsupported.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 413,
                      "reason": "Prerequisites are loaded through existing ordinary GET output, not merged from request values.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 570,
                      "reason": "Common storage helper invokes the incoming getter with insert=true.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "stripev3": {
                  "description": "One-way V3 acceptance. If existing stripev3 is false, any submitted value activates it and inserts the default fee row. When already accepted, a loose-false input throws stripev3_cannot_be_deactivated.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "boolean",
                  "examples": [
                    true
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 717,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact <Resource>func hook with original full payload: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 127,
                      "reason": "Actual one-way activation hook; no getter/type gate before first activation.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 413,
                      "reason": "Current value comes from existing ordinary GET output.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 570,
                      "reason": "Writes through incoming Structure getter.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "stripe_cc": {
                  "description": "Hook delegates to UpdateAccountData, which calls the incoming getter. Loose PHP equality to true stores 1/0; boolean is canonical.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "boolean",
                  "examples": [
                    false,
                    true
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 737,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact <Resource>func hook with original full payload: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 157,
                      "reason": "Hook forwards raw value to common helper.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 570,
                      "reason": "Common helper calls field incoming getter.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/helpers/edooboxhelp_helper.php",
                      "line": 11560,
                      "reason": "Getter supplies generated 1/0 string to aP.",
                      "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "stripe_sepa": {
                  "description": "Hook delegates to UpdateAccountData, which calls the incoming getter. Loose PHP equality to true stores 1/0; boolean is canonical.",
                  "x-edoobox-schemaStatus": "source-reviewed-normalization",
                  "x-edoobox-canonicalType": "boolean",
                  "examples": [
                    false,
                    true
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 757,
                      "reason": "Exact Structure declaration: get converts incoming wire input; set converts response output.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/API_DATA.php",
                      "line": 1792,
                      "reason": "PUT tests update flag then dispatches exact <Resource>func hook with original full payload: true succeeds, array merges, false returns ED90100.",
                      "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c"
                    },
                    {
                      "file": "application/models/v2/Paymentsystem.php",
                      "line": 886,
                      "reason": "Default PUT sanitizes only unrelated legacy PayPal fields then dispatches API_DATA with Modal Paymentsystem; deauthorize actions dispatch elsewhere.",
                      "sha256": "cb08046675a1b90b34d42c1dc7326f55adf9b09914ac9d2caa0c30d995aca864"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 163,
                      "reason": "Hook forwards raw value to common helper.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/models/v2/Paymentsystemfunc.php",
                      "line": 570,
                      "reason": "Common helper calls field incoming getter.",
                      "sha256": "3318c0cf960ede00b4948f80dcdf8191523e0eaa703fe7883e411e6ae4fdee10"
                    },
                    {
                      "file": "application/helpers/edooboxhelp_helper.php",
                      "line": 11560,
                      "reason": "Getter supplies generated 1/0 string to aP.",
                      "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e"
                    },
                    {
                      "file": "docs/openapi/reviews/payment-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "4a3097e873943fa5090a2fd52086762dc36a50d399bdd78ad6b20e6ed595639a"
                    }
                  ]
                },
                "stripe_connect": false,
                "stripe_sepa_without_validation_paid": {
                  "description": "Nur bei vorhandener zugehöriger Datenbankspalte verfügbar; PHP-Wahrheitswert-Normalisierung.",
                  "x-edoobox-canonicalType": "boolean",
                  "examples": [
                    true,
                    false
                  ]
                },
                "auto_apply_positive_balance": {
                  "description": "Nur bei vorhandener zugehöriger Datenbankspalte verfügbar; PHP-Wahrheitswert-Normalisierung.",
                  "x-edoobox-canonicalType": "boolean",
                  "examples": [
                    true,
                    false
                  ]
                }
              },
              "additionalProperties": true,
              "description": "Source-declared fields; action-specific and account validation still apply.",
              "minProperties": 1,
              "x-edoobox-readOnlyFields": [
                "paypalv2_connect",
                "stripe_connect"
              ],
              "x-edoobox-clientRestriction": "Read-only fields are forbidden by this client contract to prevent silently ignored writes; the legacy API itself skips them. Explicit source-marked update context fields remain accepted for hook validation without changing their immutable database columns."
            },
            "id": {
              "type": "string",
              "pattern": "^account_[a-f0-9]{12}_-?[0-9]+$",
              "description": "Öffentliche v2-ID aus diesem Konto; keine interne Datenbank-ID.",
              "examples": [
                "account_012345abcdef_123456"
              ]
            }
          },
          "additionalProperties": true,
          "required": [
            "data",
            "id"
          ]
        },
        "examples": {
          "request": {
            "summary": "Zahlungs- und Rechnungseinstellungen speichern",
            "value": {
              "data": {
                "invoice_paytime": 30,
                "invoice_show_payment": true
              },
              "id": "account_012345abcdef_123456"
            }
          }
        }
      }
    }
  },
  "x-edoobox-runtimeMutationGuard": true,
  "x-edoobox-documentationReview": {
    "file": "docs/openapi/operation-contracts/04-accounting.json",
    "notes": []
  },
  "x-edoobox-source": {
    "file": "application/models/v2/Paymentsystem.php",
    "method": "updatePaymentsystem",
    "line": 886
  },
  "x-edoobox-documentationStatus": "reviewed",
  "x-edoobox-readOnly": false,
  "x-edoobox-safeForAutomation": false,
  "x-edoobox-permission": {
    "resource": "paymentsystem",
    "short": "pyst",
    "checkedByDispatcher": true,
    "levels": [
      3,
      4
    ],
    "description": "Resource permission mapping from APIPermissions(), Authfunc::_getCheckJWT. Additional model/admin/plugin checks may apply; resources absent from api_permission do not acquire a fictitious scope."
  }
}