Loopback server

Agent API — Authorization: Bearer <LOOPBACK_AGENT_KEY>
  POST   /api/agent/requests[?wait=N]          create a request (optionally wait N s for the answer)
  GET    /api/agent/requests/:id               fetch one
  GET    /api/agent/requests/:id/wait?timeout=N  long-poll until answered/cancelled
  DELETE /api/agent/requests/:id               cancel

App API — Authorization: Bearer <LOOPBACK_APP_KEY>
  GET    /api/app/requests?status=pending      list (pending|answered|cancelled|all)
  GET    /api/app/requests/:id                 fetch one
  POST   /api/app/requests/:id/answer          { selected: string[], text?: string }
  GET    /api/app/devices                      list registered devices
  POST   /api/app/devices                      { token, platform, name? } register push token