diff --git a/assistant/src/daemon/message-types/host-bash.ts b/assistant/src/daemon/message-types/host-bash.ts
index b72526e7fba..3b0b1711e00 100644
--- a/assistant/src/daemon/message-types/host-bash.ts
+++ b/assistant/src/daemon/message-types/host-bash.ts
@@ -13,6 +13,8 @@ export interface HostBashRequest {
   timeout_seconds?: number;
   /** Extra environment variables to inject into the subprocess (e.g. VELLUM_UNTRUSTED_SHELL). */
   env?: Record<string, string>;
+  /** When set, route this request only to the client with this ID. */
+  targetClientId?: string;
 }
 
 export interface HostBashCancelRequest {
diff --git a/assistant/src/runtime/pending-interactions.ts b/assistant/src/runtime/pending-interactions.ts
index 74f2ae04379..4aa441be869 100644
--- a/assistant/src/runtime/pending-interactions.ts
+++ b/assistant/src/runtime/pending-interactions.ts
@@ -51,6 +51,8 @@ export interface PendingInteraction {
   confirmationDetails?: ConfirmationDetails;
   /** For ACP permissions: resolves directly without a Conversation object. */
   directResolve?: (decision: UserDecision) => void;
+  /** When set, the host_bash request should be routed to this specific client. */
+  targetClientId?: string;
 }
 
 const pending = new Map<string, PendingInteraction>();