[Security Solution][Endpoint] Add additional properties to the Script defintion

[paul-tavares]

Summary

Note

This change is for Scripts Library feature which is currently behind feature flag responseActionsScriptLibraryManagement

• Adds the following additional fields to a Script document:
  • fileName - the name of the file that was uploaded
  • fileSize - size of file in bytes
  • fileHash - replaces existing hash property
• Some additional internal changes to better manager scripts and associated file - we now store the Script entry ID along with the file and also store the File ID in the Script Entry sot hat we have proper cross references

---

New output with file related fields:

{
  "data": {
    "id": "ed093e83-074f-42d0-96e7-ce0370e429cd",
    "name": "aaaaa my script",
    "platform": [
      "windows"
    ],
    "fileName": "scripts_library_test_file.sh",
    "fileSize": 83,
    "fileHash": "abf573681eb54aac5e05e35bf186d4d31abe45ecf242461490523f11d2a8fbb8",
    "downloadUri": "/api/endpoint/scripts_library/ed093e83-074f-42d0-96e7-ce0370e429cd/download",
    "requiresInput": false,
    "createdBy": "elastic",
    "updatedBy": "elastic",
    "createdAt": "2025-12-04T15:57:10.742Z",
    "updatedAt": "2025-12-04T15:57:10.742Z",
    "version": "WzEwLDFd"
  }
}

Checklist

• Unit or functional tests were updated or added to match the most common scenarios

[elasticmachine]

Pinging @elastic/security-defend-workflows (Team:Defend Workflows)

[florent-leborgne]

LGTM from a docs perspective

[ashokaditya]

Thanks for the update. I tested it out and works as expected.

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 16d0f97

Metrics [docs]

✅ unchanged

cc @paul-tavares