Execute checked capability bindings through scoped package runners

test/emit-portable-reader.ts

@@ -1,6 +1,7 @@
 /** Qualification artifact emitted after tests, never a production fixture dependency. */
 import { mkdir, writeFile } from "node:fs/promises";
 import { loadReaderWorkspace } from "./reader-fixture.js";
+import { compileKernelProgram } from "../src/execution-world/kernel.js";
 import { compileExecutionPlan } from "../src/execution-world/plan.js";
 import { generatePortableTypeScriptBindings } from "../src/bindings/portable.js";
 const plan = compileExecutionPlan(await loadReaderWorkspace());
@@ -11,6 +12,7 @@ for (const target of ["browser", "server"])
     generatePortableTypeScriptBindings(plan.definition.bindingSchema, "package:reader-runtime@1", { target }),
   );
 await writeFile("dist/portable-reader/plan.json", JSON.stringify(plan));
+await writeFile("dist/portable-reader/kernel.json", JSON.stringify(compileKernelProgram(plan)));
 const serviceWorkspace = structuredClone(plan.definition.workspace);
 serviceWorkspace.atoms = [];
 serviceWorkspace.conformances = [];