Yeah, You have:

"3600": SELECT...

https://osquery.readthedocs.io/en/stable/deployment/configuration/ documents

"interval": {
      "3600": [
        "SELECT total_seconds AS uptime FROM uptime;"
      ]
    }

that was it exactly!! config was hosed changed that var to list and all is working well. Thank you very much for taking the time, this took more time than I care to admit to debug :)

Error is definitely quite hidden