Is there any good documentation for how to write

os-query packs

What are you looking to do? Query packs to use with osquery directly or query packs used with a 3rd party TLS server?

To user directly