diff --git a/scripts/build-release.sh b/scripts/build-release.sh
index b49579a..adf6782 100755
--- a/scripts/build-release.sh
+++ b/scripts/build-release.sh
@@ -126,7 +126,7 @@ RUNTIME_SCRIPTS=(
   install.sh
   nocodb-init.sh gitea-init.sh mkdocs-entrypoint.sh
   backup.sh restore.sh
-  upgrade.sh upgrade-check.sh upgrade-watcher.sh
+  upgrade.sh upgrade-check.sh upgrade-watcher.sh upgrade-stash-cleanup.sh
   uninstall.sh test-deployment.sh
   validate-env.sh pangolin-teardown.sh ccp-deregister.sh register-with-ccp.sh
   update-env.sh
@@ -178,6 +178,13 @@ if [[ -f "$PROJECT_DIR/scripts/mkdocs-build-trigger.py" ]]; then
   cp "$PROJECT_DIR/scripts/mkdocs-build-trigger.py" "$STAGE_DIR/scripts/"
 fi
 
+# Shared shell libraries (scripts/lib/) — sourced by upgrade.sh + image-upgrade.sh.
+# Whole directory ships verbatim; safe because nothing executable lives here
+# besides the .sh helpers that the runtime scripts depend on.
+if [[ -d "$PROJECT_DIR/scripts/lib" ]]; then
+  cp -a "$PROJECT_DIR/scripts/lib" "$STAGE_DIR/scripts/"
+fi
+
 # Systemd units
 if [[ -d "$PROJECT_DIR/scripts/systemd" ]]; then
   cp -r "$PROJECT_DIR/scripts/systemd" "$STAGE_DIR/scripts/"