[process-manager PM-4] Restart controller: pure nextDelay(state, policy, clock)

[rickylabs]

Summary

Pure restart-decision function nextDelay(state, policy, clock): S7 numbers locked (E3 — exp backoff double-to-cap-15000ms, reset-after-30000ms stable), windowed restart budget, skip-exit-codes, and poll-based memory threshold with default pollIntervalMs: 5000, configurable per policy (latency explicit).

Scope

• Archetype / area: packages/plugin-process-manager-core engine
• Part of Epic: NetScript Process Manager — bare-metal supervisor + admin console (pup/pm2 done right) #510
• Depends on: [process-manager PM-1] Process-graph contract v1 (ProcessGraphShape/ProcessSpecShape + state vocabulary + restart policies) #512 · Blocks: PM-6

Design source

• research/design/d1-supervision-engine-core.md (restart controller) · plan.md §4 PM-4, E3

Acceptance criteria

• gate: pure function — deterministic under injected clock; unit tests cover backoff/reset/budget/skip-exit-codes
• gate: memory threshold is poll-based with configurable pollIntervalMs (default 5000) — never marketed as a watchdog (R10)
• gate: scoped check/lint/fmt wrappers green (--ext ts,tsx)

Non-scope

• Process spawning (PM-5); OS watchdogs (systemd WatchdogSec is PM-15/16).

Drift / Debt

• none