feat: account for VM memory ballooning in host memory reporting (#1750)

* feat: account for VM memory ballooning in host memory reporting

Extend hostMemory.ts with a readBalloonedMemory() function that parses the
Balloon: field from /proc/meminfo, following the same fail-open pattern as
the ZFS ARC integration. When a nonzero balloon is detected, effective
memory fields (effectiveUsed, effectiveFree, effectiveUsagePercent) are
computed and exposed through /api/system/stats and /api/fleet/overview.

All consumers that derive meaning from host memory now prefer effective
values when present: the dashboard gauge, Fleet card RAM bar, mobile
views, health verdict, health status bar stat tile, and host RAM alerts.

Backward compatible: missing /proc/meminfo or absent Balloon: line
preserves exact current behavior. Old remote nodes without the new fields
continue rendering normally.

* refactor: extract shared helpers for balloon memory wiring

Extract readCandidateFile() and logSelectedPath() in hostMemory.ts to
deduplicate ARC and balloon file-read logic. Add memoryToWire() to
centralize the optional-field spread used by /api/system/stats and
/api/fleet/overview. Add getNodeMemUsed()/getNodeMemTotal() helpers
in nodeUtils.ts for frontend byte-text consumers.

* fix: make desktop fleet masthead aggregate balloon-aware

The desktop fleet overview's memory aggregate in useFleetOverview.ts still
summed raw memory.used, while the mobile fleet aggregate and per-node cards
already used effective values. Update to use getNodeMemUsed/getNodeMemTotal
helpers.

* fix: revert balloon adjustment from alerting and health decisions

Ballooned memory is host-reclaimed (unlike ZFS ARC, which the guest can
reclaim on demand). The guest cannot get ballooned pages back until the
hypervisor deflates them, so treating ballooned memory as available for
alerting or health can mask real memory pressure.

Keep balloon parsing, wire fields, and the dashboard context line as
informational-only. The memory gauge, health verdict, and host RAM alerts
now use the standard ARC-adjusted working-set percentage regardless of
balloon. Updated configuration.mdx and dashboard.mdx to document that
balloon data is informational and does not influence alerting.

frontend/src/components/dashboard/HealthStatusBar.tsx

@@ -80,7 +80,7 @@ export function HealthStatusBar({
   const unreadAlerts = countVisibleUnread(notifications);
   const running = `${stats.active}/${stats.total}`;
   const cpuLabel = systemStats ? `${parseFloat(systemStats.cpu.usage).toFixed(0)}%` : '--';
-  const memLabel = systemStats ? formatGib(systemStats.memory.used) : '--';
+  const memLabel = systemStats ? formatGib(systemStats.memory.effectiveUsed ?? systemStats.memory.used) : '--';
   const lastSyncLabel = lastSyncAt ? `last sync ${formatAgo(now - lastSyncAt)}` : 'connecting…';
   const metaLine = `${activeNodeName} · ${nodeCount} ${nodeCount === 1 ? 'node' : 'nodes'} · ${lastSyncLabel}`;
   const reasonsLine = reasons.join(' · ');

frontend/src/components/dashboard/ResourceGauges.tsx

@@ -49,7 +49,13 @@ function GaugeBar({ value, warn = 80, crit = 90 }: { value: number; warn?: numbe
 
 export function ResourceGauges({ systemStats, cpuHistory, netHistory, historyEndAt }: ResourceGaugesProps) {
   const cpuVal = parseFloat(systemStats?.cpu.usage || '0');
+  // Primary gauge driven by raw ARC-adjusted percent only. Ballooned memory
+  // is host-reclaimed (not guest-reclaimable like ARC), so it must not mask
+  // real memory pressure in the gauge color or percent hero.
   const ramVal = parseFloat(systemStats?.memory.usagePercent || '0');
+  const ramEffectivePercent = systemStats?.memory.effectiveUsagePercent ?? null;
+  const ramUsed = systemStats?.memory.effectiveUsed ?? systemStats?.memory.used ?? 0;
+  const ramTotal = systemStats?.memory.effectiveTotal ?? systemStats?.memory.total ?? 0;
   const diskVal = parseFloat(systemStats?.disk?.usagePercent || '0');
 
   const cpuPeak = cpuHistory.length > 0 ? Math.max(...cpuHistory) : 0;
@@ -102,8 +108,14 @@ export function ResourceGauges({ systemStats, cpuHistory, netHistory, historyEnd
           {systemStats ? `${ramVal.toFixed(0)}%` : '--'}
         </div>
         <div className="mt-1.5 font-mono text-[11px] text-stat-subtitle">
-          {systemStats ? `${formatBytes(systemStats.memory.used)} / ${formatBytes(systemStats.memory.total)}` : '\u00A0'}
+          {systemStats ? `${formatBytes(ramUsed)} / ${formatBytes(ramTotal)}` : '\u00A0'}
         </div>
+        {systemStats?.memory.ballooned && systemStats.memory.ballooned > 0 ? (
+          <div className="mt-1 font-mono text-[10px] text-stat-subtitle/70">
+            Ballooned to host: {formatBytes(systemStats.memory.ballooned)}
+            {ramEffectivePercent !== null ? ` (effective ${parseFloat(ramEffectivePercent).toFixed(0)}%)` : ''}
+          </div>
+        ) : null}
         {systemStats ? <GaugeBar value={ramVal} /> : null}
       </div>
 

frontend/src/components/dashboard/deriveHealth.ts

@@ -10,7 +10,10 @@ export interface HealthResult {
 // drift apart.
 export function deriveHealth(stats: Stats, systemStats: SystemStats | null, notifications: NotificationItem[]): HealthResult {
   const cpu = parseFloat(systemStats?.cpu.usage || '0');
-  const ram = parseFloat(systemStats?.memory.usagePercent || '0');
+  // Ballooned memory is NOT subtracted for health: unlike ARC, ballooned
+  // pages are host-reclaimed and the guest cannot get them back on demand.
+  // A ballooned VM with real memory pressure must still show degraded/critical.
+  const ram = parseFloat(systemStats?.memory.usagePercent ?? '0');
   const disk = parseFloat(systemStats?.disk?.usagePercent || '0');
   const unreadErrors = notifications.filter(n => !n.is_read && n.level === 'error').length;
 

frontend/src/components/dashboard/types.ts

@@ -16,6 +16,12 @@ export interface SystemStats {
     used: number;
     free: number;
     usagePercent: string;
+    ballooned?: number;
+    effectiveTotal?: number;
+    effectiveUsed?: number;
+    effectiveFree?: number;
+    effectiveUsagePercent?: string;
+    balloonSource?: string;
   };
   disk: {
     fs: string;