api: run handler doesn't lock app