---
title: "POST /code/runtime/pull-requests/{number}/update-head"
method: POST
path: "/code/runtime/pull-requests/{number}/update-head"
---

# POST /code/runtime/pull-requests/{number}/update-head

`POST /code/runtime/pull-requests/{number}/update-head`

## Request

- Base URL: `https://api.caveman.so/api/v1`
- URL: `https://api.caveman.so/api/v1/code/runtime/pull-requests/{number}/update-head`
- Auth: HTTP bearer

POST /api/v1/code/runtime/pull-requests/{number}/update-head on the Caveman Cloud control plane. Requires a Caveman Code runtime token (Authorization: Bearer ccrt_...), minted by POST /code/runtimes/{runtimeId}/token. Not exposed to autonomous agents: Not RBAC-guarded — authenticated by a Caveman Code runtime token, only for a person's own chat on that Cloud computer that started on that pull request (bound by pull-request-info), whose person GitHub confirms may push to the repository Cloud made the computer for, on a computer no other person's work shares; Cloud fast-forwards the pull request's own branch with the GitHub App, never forced and never a .github/workflows change (ADR 0136). Agents authenticate through a scoped control-plane session and never touch these directly.

## Response `2XX`

Successful response. Exact status depends on synchronous or durable delivery outcome.

## Other responses

- `4XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.
- `5XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.

---

[API](https://skmtc.dev/caveman/apis/caveman-cloud-api.md) - [All operations](https://skmtc.dev/caveman/apis/caveman-cloud-api/llms.txt) - [OpenAPI document](https://skmtc.dev/caveman/apis/caveman-cloud-api/revisions/508312d01cfc?raw)