diff --git a/.changeset/bundled-deps-are-dev.md b/.changeset/bundled-deps-are-dev.md
new file mode 100644
index 00000000..82d44600
--- /dev/null
+++ b/.changeset/bundled-deps-are-dev.md
@@ -0,0 +1,5 @@
+---
+"@taskless/cli": patch
+---
+
+Installing `@taskless/cli` no longer downloads the JavaScript libraries its build already bundles into `dist/` (zod, yaml, citty, @clack/prompts, posthog-node and seven others). They are now `devDependencies`. The only runtime dependency left is `tsx`, which the CLI locates and spawns to run runtime rules, plus the platform's ast-grep and Vale binaries through `optionalDependencies`, unchanged.
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 6cb784b3..341898a0 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -55,29 +55,29 @@
     "node": ">=22.22.0"
   },
   "dependencies": {
+    "tsx": "^4.21.0"
+  },
+  "devDependencies": {
+    "@ast-grep/cli": "0.45.3",
     "@clack/prompts": "^1.2.0",
     "@jedmao/ini-parser": "0.2.4",
+    "@types/sprintf-js": "^1.1.4",
     "chalk": "^5.6.2",
     "citty": "^0.1.6",
     "jose": "^6.2.2",
     "openapi-fetch": "^0.17.0",
+    "openapi-typescript": "^7.13.0",
     "posthog-node": "^5.28.11",
+    "prettier": "^3.8.1",
     "smol-toml": "^1.6.1",
     "sprintf-js": "^1.1.3",
-    "tsx": "^4.21.0",
-    "uqr": "^0.1.3",
-    "yaml": "^2.8.2",
-    "zod": "^4.3.6"
-  },
-  "devDependencies": {
-    "@ast-grep/cli": "0.45.3",
-    "@types/sprintf-js": "^1.1.4",
-    "openapi-typescript": "^7.13.0",
-    "prettier": "^3.8.1",
     "typescript": "^5.7.2",
+    "uqr": "^0.1.3",
     "vite": "^7.3.1",
     "vite-tsconfig-paths": "^5.1.4",
-    "vitest": "^3.2.3"
+    "vitest": "^3.2.3",
+    "yaml": "^2.8.2",
+    "zod": "^4.3.6"
   },
   "bin": {
     "taskless": "./dist/index.js"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 67578bc3..93718444 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -74,12 +74,22 @@ importers:
 
   packages/cli:
     dependencies:
+      tsx:
+        specifier: ^4.21.0
+        version: 4.21.0
+    devDependencies:
+      '@ast-grep/cli':
+        specifier: 0.45.3
+        version: 0.45.3
       '@clack/prompts':
         specifier: ^1.2.0
         version: 1.2.0
       '@jedmao/ini-parser':
         specifier: 0.2.4
         version: 0.2.4
+      '@types/sprintf-js':
+        specifier: ^1.1.4
+        version: 1.1.4
       chalk:
         specifier: ^5.6.2
         version: 5.6.2
@@ -92,43 +102,27 @@ importers:
       openapi-fetch:
         specifier: ^0.17.0
         version: 0.17.0
+      openapi-typescript:
+        specifier: ^7.13.0
+        version: 7.13.0(typescript@5.9.3)
       posthog-node:
         specifier: ^5.28.11
         version: 5.28.11
+      prettier:
+        specifier: ^3.8.1
+        version: 3.8.1
       smol-toml:
         specifier: ^1.6.1
         version: 1.6.1
       sprintf-js:
         specifier: ^1.1.3
         version: 1.1.3
-      tsx:
-        specifier: ^4.21.0
-        version: 4.21.0
-      uqr:
-        specifier: ^0.1.3
-        version: 0.1.3
-      yaml:
-        specifier: ^2.8.2
-        version: 2.8.2
-      zod:
-        specifier: ^4.3.6
-        version: 4.3.6
-    devDependencies:
-      '@ast-grep/cli':
-        specifier: 0.45.3
-        version: 0.45.3
-      '@types/sprintf-js':
-        specifier: ^1.1.4
-        version: 1.1.4
-      openapi-typescript:
-        specifier: ^7.13.0
-        version: 7.13.0(typescript@5.9.3)
-      prettier:
-        specifier: ^3.8.1
-        version: 3.8.1
       typescript:
         specifier: ^5.7.2
         version: 5.9.3
+      uqr:
+        specifier: ^0.1.3
+        version: 0.1.3
       vite:
         specifier: ^7.3.1
         version: 7.3.1(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.31.1)(tsx@4.21.0)(yaml@2.8.2)
@@ -138,6 +132,12 @@ importers:
       vitest:
         specifier: ^3.2.3
         version: 3.2.4(@types/node@25.3.3)(jiti@2.6.1)(lightningcss@1.31.1)(tsx@4.21.0)(yaml@2.8.2)
+      yaml:
+        specifier: ^2.8.2
+        version: 2.8.2
+      zod:
+        specifier: ^4.3.6
+        version: 4.3.6
     optionalDependencies:
       '@ast-grep/cli-darwin-arm64':
         specifier: 0.45.3