diff --git a/app/pom.xml b/app/pom.xml
index 08ae9c5c..4d5baa2c 100644
--- a/app/pom.xml
+++ b/app/pom.xml
@@ -7,7 +7,7 @@
   <parent>
     <groupId>smecalculus.bezmen</groupId>
     <artifactId>bezmen</artifactId>
-    <version>latest</version>
+    <version>${revision}</version>
   </parent>
 
   <artifactId>app</artifactId>
@@ -100,8 +100,9 @@
                   <artifactItem>
                     <groupId>${project.groupId}</groupId>
                     <artifactId>${project.artifactId}</artifactId>
-                    <version>${project.version}</version>
+                    <version>${revision}</version>
                     <outputDirectory>${project.build.directory}/image/bin</outputDirectory>
+                    <type>${project.packaging}</type>
                   </artifactItem>
                 </artifactItems>
               </configuration>
diff --git a/app/sepuling-kotlin/pom.xml b/app/sepuling-kotlin/pom.xml
index 35e88389..930f211a 100644
--- a/app/sepuling-kotlin/pom.xml
+++ b/app/sepuling-kotlin/pom.xml
@@ -47,18 +47,6 @@
     </dependency>
   </dependencies>
 
-  <dependencyManagement>
-    <dependencies>
-      <dependency>
-        <groupId>org.jetbrains.kotlin</groupId>
-        <artifactId>kotlin-bom</artifactId>
-        <version>${kotlin.version}</version>
-        <scope>import</scope>
-        <type>pom</type>
-      </dependency>
-    </dependencies>
-  </dependencyManagement>
-
   <build>
     <plugins>
       <plugin>
diff --git a/lib/pom.xml b/lib/pom.xml
index 66ac6569..7d279a63 100644
--- a/lib/pom.xml
+++ b/lib/pom.xml
@@ -7,7 +7,7 @@
   <parent>
     <groupId>smecalculus.bezmen</groupId>
     <artifactId>bezmen</artifactId>
-    <version>latest</version>
+    <version>${revision}</version>
   </parent>
 
   <artifactId>lib</artifactId>
@@ -27,13 +27,6 @@
     <spring-boot.version>3.2.4</spring-boot.version>
   </properties>
 
-  <distributionManagement>
-    <repository>
-      <id>github</id>
-      <url>https://maven.pkg.github.com/smecalculus/bezmen</url>
-    </repository>
-  </distributionManagement>
-
   <dependencies>
     <dependency>
       <groupId>org.projectlombok</groupId>
@@ -52,37 +45,37 @@
       <dependency>
         <groupId>${project.groupId}</groupId>
         <artifactId>abstraction-client</artifactId>
-        <version>${project.version}</version>
+        <version>${revision}</version>
       </dependency>
       <dependency>
         <groupId>${project.groupId}</groupId>
         <artifactId>abstraction</artifactId>
-        <version>${project.version}</version>
+        <version>${revision}</version>
       </dependency>
       <dependency>
         <groupId>${project.groupId}</groupId>
         <artifactId>essentials</artifactId>
-        <version>${project.version}</version>
+        <version>${revision}</version>
       </dependency>
       <dependency>
         <groupId>${project.groupId}</groupId>
         <artifactId>messaging-client</artifactId>
-        <version>${project.version}</version>
+        <version>${revision}</version>
       </dependency>
       <dependency>
         <groupId>${project.groupId}</groupId>
         <artifactId>messaging</artifactId>
-        <version>${project.version}</version>
+        <version>${revision}</version>
       </dependency>
       <dependency>
         <groupId>${project.groupId}</groupId>
         <artifactId>storage</artifactId>
-        <version>${project.version}</version>
+        <version>${revision}</version>
       </dependency>
       <dependency>
         <groupId>${project.groupId}</groupId>
         <artifactId>testing</artifactId>
-        <version>latest</version>
+        <version>${revision}</version>
       </dependency>
       <dependency>
         <groupId>org.projectlombok</groupId>
@@ -94,6 +87,13 @@
         <artifactId>mapstruct</artifactId>
         <version>1.5.5.Final</version>
       </dependency>
+      <dependency>
+        <groupId>org.jetbrains.kotlin</groupId>
+        <artifactId>kotlin-bom</artifactId>
+        <version>1.9.22</version>
+        <scope>import</scope>
+        <type>pom</type>
+      </dependency>
       <dependency>
         <groupId>org.mapstruct</groupId>
         <artifactId>mapstruct-processor</artifactId>
@@ -246,31 +246,10 @@
       <plugins>
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
-          <artifactId>maven-dependency-plugin</artifactId>
-          <executions>
-            <execution>
-              <id>capture</id>
-              <goals>
-                <goal>copy</goal>
-              </goals>
-              <configuration>
-                <outputDirectory>${project.build.directory}</outputDirectory>
-                <artifactItems>
-                  <artifactItem>
-                    <groupId>${project.groupId}</groupId>
-                    <artifactId>abstraction-client</artifactId>
-                    <version>${project.version}</version>
-                  </artifactItem>
-                  <artifactItem>
-                    <groupId>${project.groupId}</groupId>
-                    <artifactId>messaging-client</artifactId>
-                    <version>${project.version}</version>
-                    <type>jar</type>
-                  </artifactItem>
-                </artifactItems>
-              </configuration>
-            </execution>
-          </executions>
+          <artifactId>maven-install-plugin</artifactId>
+          <configuration>
+            <skip>false</skip>
+          </configuration>
         </plugin>
       </plugins>
     </pluginManagement>
diff --git a/orchestrator/ansible/binaries.yaml b/orchestrator/ansible/binaries.yaml
index 8fe64f91..d7788fc3 100644
--- a/orchestrator/ansible/binaries.yaml
+++ b/orchestrator/ansible/binaries.yaml
@@ -9,7 +9,6 @@
         cmd: git hash-object --stdin
         stdin: |
           {{ lookup('ansible.builtin.pipe', 'git write-tree --prefix=lib') }}
-          {{ lookup('ansible.builtin.pipe', 'git write-tree --prefix=app') }}
       register: binary_cid
       changed_when: false
     - name: Build, check, publish
@@ -36,8 +35,7 @@
     - name: Coverage
       ansible.builtin.command:
         cmd: >-
-          mvn clean
-            antrun:run@coverage
+          mvn antrun:run@coverage
             --no-snapshot-updates
             --batch-mode
             --projects :tool
diff --git a/orchestrator/ansible/images.yaml b/orchestrator/ansible/images.yaml
index 3977f245..bd66d793 100644
--- a/orchestrator/ansible/images.yaml
+++ b/orchestrator/ansible/images.yaml
@@ -7,44 +7,17 @@
         apply:
           tags: [always]
       tags: [always]
+    - ansible.builtin.include_tasks:  # noqa: name[missing]
+        file: tasks/{{ inventory_hostname }}/build.yaml
+      when: hostvars[inventory_hostname].image_status is changed
 
-- name: DATABASE IMAGES
-  hosts: db
-  tasks:
-    - ansible.builtin.import_role:  # noqa: name[missing]
-        name: image
-        tasks_from: clean
-      vars:
-        image_keys: >-
-          {{ image_status.results
-            | select('changed')
-            | map(attribute='vendor')
-            | map('regex_replace', '^(.*)$', 'db/\1/' ~ devenv)
-          }}
-      when: image_status is changed
-    - ansible.builtin.import_tasks:  # noqa: name[missing]
-        file: tasks/db/build.yaml
-      when: image_status is changed
-
-- name: APPLICATION IMAGES
-  hosts: app
-  tasks:
-    - ansible.builtin.import_role:  # noqa: name[missing]
-        name: image
-        tasks_from: clean
-      vars:
-        image_keys: >-
-          {{ image_status.results
-            | select('changed')
-            | map(attribute='app')
-            | map('regex_replace', '^(.*)$', 'app/\1/' ~ devenv)
-          }}
-      when: image_status is changed
-
+# building everything without exception otherwise purely external libs will not be published
 - import_playbook: binaries.yaml  # noqa: name[play]
   vars:
     maven_phase: "{{ 'deploy' if repo_mode == 'rw' else 'install' }}"
-  when: hostvars.app.image_status is changed
+  when: >-
+    hostvars.app.image_status is changed or
+    hostvars.tool.image_status is changed
 
 - name: ALL IMAGES
   hosts: images
diff --git a/orchestrator/ansible/inventory/aliases.yaml b/orchestrator/ansible/inventory/aliases.yaml
index c8aa7814..5a842736 100644
--- a/orchestrator/ansible/inventory/aliases.yaml
+++ b/orchestrator/ansible/inventory/aliases.yaml
@@ -8,6 +8,7 @@ images:
   hosts:
     db:
     app:
+    tool:
 stacks:
   hosts:
     gear:
diff --git a/orchestrator/ansible/tasks/app/build.yaml b/orchestrator/ansible/tasks/app/build.yaml
new file mode 100644
index 00000000..c10d54ae
--- /dev/null
+++ b/orchestrator/ansible/tasks/app/build.yaml
@@ -0,0 +1,11 @@
+---
+- ansible.builtin.import_role:  # noqa: name[missing]
+    name: image
+    tasks_from: clean
+  vars:
+    image_keys: >-
+      {{ image_status.results
+        | select('changed')
+        | map(attribute='app')
+        | map('regex_replace', '^(.*)$', 'app/\1/' ~ devenv)
+      }}
diff --git a/orchestrator/ansible/tasks/db/build.yaml b/orchestrator/ansible/tasks/db/build.yaml
index e0c15536..82127c3c 100644
--- a/orchestrator/ansible/tasks/db/build.yaml
+++ b/orchestrator/ansible/tasks/db/build.yaml
@@ -1,4 +1,15 @@
 ---
+- ansible.builtin.import_role:  # noqa: name[missing]
+    name: image
+    tasks_from: clean
+  vars:
+    image_keys: >-
+      {{ image_status.results
+        | select('changed')
+        | map(attribute='vendor')
+        | map('regex_replace', '^(.*)$', 'db/\1/' ~ devenv)
+      }}
+
 - ansible.builtin.include_role:  # noqa: name[missing]
     name: image
     tasks_from: build
diff --git a/orchestrator/ansible/tasks/gear/capture.yaml b/orchestrator/ansible/tasks/gear/capture.yaml
index 1993e415..f3920aac 100644
--- a/orchestrator/ansible/tasks/gear/capture.yaml
+++ b/orchestrator/ansible/tasks/gear/capture.yaml
@@ -3,8 +3,6 @@
   ansible.builtin.command:
     cmd: git hash-object --stdin
     stdin: |
-      {{ lookup('ansible.builtin.pipe', 'git rev-parse :pom.xml') }}
-      {{ lookup('ansible.builtin.pipe', 'git write-tree --prefix=tool') }}
       {{ lookup('ansible.builtin.pipe', 'git write-tree --prefix=test') }}
       {{ lookup('ansible.builtin.pipe', 'git write-tree --prefix=orchestrator') }}
       {{ lookup('ansible.builtin.pipe', 'git write-tree --prefix=stack/gear/env/' ~ devenv) }}
diff --git a/orchestrator/ansible/tasks/tool/build.yaml b/orchestrator/ansible/tasks/tool/build.yaml
new file mode 100644
index 00000000..89fb6328
--- /dev/null
+++ b/orchestrator/ansible/tasks/tool/build.yaml
@@ -0,0 +1,16 @@
+---
+- ansible.builtin.import_role:  # noqa: name[missing]
+    name: image
+    tasks_from: clean
+  vars:
+    image_keys:
+      - "tool/builder/{{ devenv }}"
+
+- ansible.builtin.import_role:  # noqa: name[missing]
+    name: image
+    tasks_from: build
+  vars:
+    image_home: "{{ project.dir }}/tool"
+    image_context: .
+    image_key: "tool/builder/{{ devenv }}"
+    image_tag: "tool/builder:{{ devenv }}"
diff --git a/orchestrator/ansible/tasks/tool/capture.yaml b/orchestrator/ansible/tasks/tool/capture.yaml
new file mode 100644
index 00000000..e24a0404
--- /dev/null
+++ b/orchestrator/ansible/tasks/tool/capture.yaml
@@ -0,0 +1,24 @@
+---
+- name: Capture CID
+  ansible.builtin.command:
+    cmd: git hash-object --stdin
+    stdin: |
+      {{ lookup('ansible.builtin.pipe', 'git rev-parse :pom.xml') }}
+      {{ lookup('ansible.builtin.pipe', 'git write-tree --prefix=tool') }}
+  register: package_cid
+  changed_when: false
+
+- name: Declare tag
+  ansible.builtin.set_fact:
+    package_tag: "{{ devenv }}-{{ package_cid.stdout[:7] }}"
+  changed_when: false
+
+- name: Capture status
+  ansible.builtin.command:
+    cmd: docker {{ docker_entity }} inspect {{ image_ns }}/{{ item }}
+  register: image_status
+  failed_when: false
+  changed_when:
+    - image_status.rc != 0
+  loop:
+    - "tool/builder:{{ package_tag }}"
diff --git a/orchestrator/ansible/tasks/tool/publish.yaml b/orchestrator/ansible/tasks/tool/publish.yaml
new file mode 100644
index 00000000..8eaa0b81
--- /dev/null
+++ b/orchestrator/ansible/tasks/tool/publish.yaml
@@ -0,0 +1,8 @@
+---
+- ansible.builtin.import_role:  # noqa: name[missing]
+    name: image
+    tasks_from: publish
+  vars:
+    image_source_tag: "tool/builder:{{ devenv }}"
+    image_target_tags:
+      - "{{ image_ns }}/tool/builder:{{ hostvars.tool.package_tag }}"
diff --git a/pom.xml b/pom.xml
index 37138749..0e409988 100644
--- a/pom.xml
+++ b/pom.xml
@@ -6,8 +6,8 @@
 
   <groupId>smecalculus.bezmen</groupId>
   <artifactId>bezmen</artifactId>
+  <version>${revision}</version>
   <packaging>pom</packaging>
-  <version>latest</version>
 
   <modules>
     <module>lib</module>
@@ -29,7 +29,6 @@
       <id>church</id>
       <properties>
         <devenv>church</devenv>
-        <kotlin.version>2.0.0-Beta4</kotlin.version>
         <maven.compiler.release>21</maven.compiler.release>  <!--bump when kotlin will be ready-->
       </properties>
     </profile>
@@ -37,7 +36,6 @@
       <id>turing</id>
       <properties>
         <devenv>turing</devenv>
-        <kotlin.version>1.9.22</kotlin.version>
         <maven.compiler.release>21</maven.compiler.release>
       </properties>
     </profile>
@@ -48,12 +46,18 @@
       </activation>
       <properties>
         <devenv>godel</devenv>
-        <kotlin.version>1.8.22</kotlin.version>
         <maven.compiler.release>17</maven.compiler.release>
       </properties>
     </profile>
   </profiles>
 
+  <distributionManagement>
+    <repository>
+      <id>github</id>
+      <url>https://maven.pkg.github.com/smecalculus/bezmen</url>
+    </repository>
+  </distributionManagement>
+
   <build>
     <testResources>
       <testResource>
@@ -69,6 +73,7 @@
         <artifactId>flatten-maven-plugin</artifactId>
       </plugin>
     </plugins>
+
     <pluginManagement>
       <plugins>
         <plugin>
@@ -174,7 +179,7 @@
         <plugin>
           <groupId>org.jetbrains.kotlin</groupId>
           <artifactId>kotlin-maven-plugin</artifactId>
-          <version>${kotlin.version}</version>
+          <version>1.9.22</version>
           <configuration>
             <jvmTarget>${maven.compiler.release}</jvmTarget>
           </configuration>
@@ -280,6 +285,34 @@
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-dependency-plugin</artifactId>
           <version>3.6.1</version>
+          <executions>
+            <execution>
+              <id>get</id>
+              <phase>none</phase>
+              <goals>
+                <goal>get</goal>
+              </goals>
+              <configuration>
+                <transitive>false</transitive>
+                <groupId>${project.groupId}</groupId>
+                <artifactId>${project.artifactId}</artifactId>
+                <version>${revision}</version>
+                <packaging>${project.packaging}</packaging>
+                <remoteRepositories>${project.distributionManagement.repository.url}</remoteRepositories>
+              </configuration>
+            </execution>
+            <execution>
+              <id>purge</id>
+              <phase>none</phase>
+              <goals>
+                <goal>purge-local-repository</goal>
+              </goals>
+              <configuration>
+                <resolutionFuzziness>artifactId</resolutionFuzziness>
+                <manualIncludes>${project.groupId}:${project.artifactId}</manualIncludes>
+              </configuration>
+            </execution>
+          </executions>
         </plugin>
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
@@ -363,6 +396,9 @@
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-install-plugin</artifactId>
           <version>3.1.1</version>
+          <configuration>
+            <skip>true</skip>  <!-- enable explicitly in library modules -->
+          </configuration>
         </plugin>
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
diff --git a/test/e2e/pom.xml b/test/e2e/pom.xml
index 4a1ea4b5..84cb176e 100644
--- a/test/e2e/pom.xml
+++ b/test/e2e/pom.xml
@@ -7,7 +7,7 @@
   <parent>
     <groupId>smecalculus.bezmen</groupId>
     <artifactId>test</artifactId>
-    <version>latest</version>
+    <version>${revision}</version>
   </parent>
 
   <artifactId>e2e</artifactId>
diff --git a/test/pom.xml b/test/pom.xml
index f8b86a49..96070642 100644
--- a/test/pom.xml
+++ b/test/pom.xml
@@ -7,7 +7,7 @@
   <parent>
     <groupId>smecalculus.bezmen</groupId>
     <artifactId>bezmen</artifactId>
-    <version>latest</version>
+    <version>${revision}</version>
   </parent>
 
   <artifactId>test</artifactId>
@@ -30,7 +30,7 @@
       <dependency>
         <groupId>${project.groupId}</groupId>
         <artifactId>tool</artifactId>
-        <version>latest</version>
+        <version>${revision}</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
diff --git a/tool/Dockerfile b/tool/Dockerfile
new file mode 100644
index 00000000..2c232c01
--- /dev/null
+++ b/tool/Dockerfile
@@ -0,0 +1,2 @@
+FROM scratch
+COPY Dockerfile .
diff --git a/tool/pom.xml b/tool/pom.xml
index 1ff7a14e..8602b686 100644
--- a/tool/pom.xml
+++ b/tool/pom.xml
@@ -7,7 +7,7 @@
   <parent>
     <groupId>smecalculus.bezmen</groupId>
     <artifactId>bezmen</artifactId>
-    <version>latest</version>
+    <version>${revision}</version>
   </parent>
 
   <artifactId>tool</artifactId>
@@ -174,6 +174,13 @@
             </dependency>
           </dependencies>
         </plugin>
+        <plugin>
+          <groupId>org.apache.maven.plugins</groupId>
+          <artifactId>maven-install-plugin</artifactId>
+          <configuration>
+            <skip>false</skip>
+          </configuration>
+        </plugin>
       </plugins>
     </pluginManagement>
   </build>
diff --git a/tool/testing/pom.xml b/tool/testing/pom.xml
index 2ebd5702..893074cb 100644
--- a/tool/testing/pom.xml
+++ b/tool/testing/pom.xml
@@ -7,7 +7,7 @@
   <parent>
     <groupId>smecalculus.bezmen</groupId>
     <artifactId>tool</artifactId>
-    <version>latest</version>
+    <version>${revision}</version>
   </parent>
 
   <artifactId>testing</artifactId>