gea-program 0.78.1__tar.gz → 0.79.0__tar.gz

{gea_program-0.78.1/gea_program.egg-info → gea_program-0.79.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gea-program
-Version: 0.78.1
+Version: 0.79.0
 Summary: GEA-Program: downhole gauge monitoring - canonical measurement records, quality rules, drift evaluation with a re-fit change log, well-test validation, alarm management, model cards, store-and-forward, monthly SLA measurement, FAT/SAT protocols and a dashboard, generated from live objects in the client's reporting outline.
 Author: Daniel T. Murphy
 License: MPL-2.0
@@ -473,7 +473,7 @@ build, drop or hold and by how much (toolface and steering ratio for a
 rotary steerable system), the weight on bit, the rotary speed, the flow
 rate, and whether to drill on, circulate, or ream and wash first - with its
 reasons and the confidence of each choice. A position filter (since
-0.78.1) places the bit in the layer the way a geosteerer does, from the
+0.78.0) places the bit in the layer the way a geosteerer does, from the
 gamma and the deep-resistivity distance against the model, and the screen
 draws the band it puts the layer in. The driller accepts, rejects or
 records what was done instead, by name; every recommendation, answer and
@@ -830,7 +830,7 @@ unsigned, the key hand-overs - and shows the reports as they were signed. A
 reader made from the workspace knows the site's key fingerprints, so it
 says whether a dossier is the site's; it allows no network request, and it
 leaves the trusted time-stamp to `verify_dossier.py`. For a client who wants
-it installed, every release also carries `GEA-Reader-Setup-0.78.1.exe`: GEA
+it installed, every release also carries `GEA-Reader-Setup-0.79.0.exe`: GEA
 Reader as a Windows program of its own - its own icon and taskbar button,
 Check with GEA Reader on a dossier's right-click menu, fingerprints the client
 saves kept on that computer, nothing of GEA-Program. `gea help reader`.
@@ -1595,7 +1595,7 @@ attaches the zips to the GitHub release of that tag.
 
 ### The Windows installer
 
-Every release also carries `GEA-Program-Setup-0.78.1.exe` (for 0.78.1): the
+Every release also carries `GEA-Program-Setup-0.79.0.exe` (for 0.79.0): the
 same Windows kit installed like any Windows program, for the signed-in user
 alone and with no administrator rights (`%LOCALAPPDATA%\Programs\GEA-Program`).
 It asks for the site workspace (an existing one such as `C:\site` is used as
@@ -1614,7 +1614,7 @@ it, removes the program and leaves the workspace. Silent, for a site's
 software deployment:
 
 ```
-GEA-Program-Setup-0.78.1.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /WORKSPACE="C:\site" /SITENAME="Pad 3" /TASKS="desktopicon"
+GEA-Program-Setup-0.79.0.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /WORKSPACE="C:\site" /SITENAME="Pad 3" /TASKS="desktopicon"
 ```
 
 The setup is built by Inno Setup 6 from `tools/installer.iss` in the same

{gea_program-0.78.1 → gea_program-0.79.0}/README.md

@@ -434,7 +434,7 @@ build, drop or hold and by how much (toolface and steering ratio for a
 rotary steerable system), the weight on bit, the rotary speed, the flow
 rate, and whether to drill on, circulate, or ream and wash first - with its
 reasons and the confidence of each choice. A position filter (since
-0.78.1) places the bit in the layer the way a geosteerer does, from the
+0.78.0) places the bit in the layer the way a geosteerer does, from the
 gamma and the deep-resistivity distance against the model, and the screen
 draws the band it puts the layer in. The driller accepts, rejects or
 records what was done instead, by name; every recommendation, answer and
@@ -791,7 +791,7 @@ unsigned, the key hand-overs - and shows the reports as they were signed. A
 reader made from the workspace knows the site's key fingerprints, so it
 says whether a dossier is the site's; it allows no network request, and it
 leaves the trusted time-stamp to `verify_dossier.py`. For a client who wants
-it installed, every release also carries `GEA-Reader-Setup-0.78.1.exe`: GEA
+it installed, every release also carries `GEA-Reader-Setup-0.79.0.exe`: GEA
 Reader as a Windows program of its own - its own icon and taskbar button,
 Check with GEA Reader on a dossier's right-click menu, fingerprints the client
 saves kept on that computer, nothing of GEA-Program. `gea help reader`.
@@ -1556,7 +1556,7 @@ attaches the zips to the GitHub release of that tag.
 
 ### The Windows installer
 
-Every release also carries `GEA-Program-Setup-0.78.1.exe` (for 0.78.1): the
+Every release also carries `GEA-Program-Setup-0.79.0.exe` (for 0.79.0): the
 same Windows kit installed like any Windows program, for the signed-in user
 alone and with no administrator rights (`%LOCALAPPDATA%\Programs\GEA-Program`).
 It asks for the site workspace (an existing one such as `C:\site` is used as
@@ -1575,7 +1575,7 @@ it, removes the program and leaves the workspace. Silent, for a site's
 software deployment:
 
 ```
-GEA-Program-Setup-0.78.1.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /WORKSPACE="C:\site" /SITENAME="Pad 3" /TASKS="desktopicon"
+GEA-Program-Setup-0.79.0.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /WORKSPACE="C:\site" /SITENAME="Pad 3" /TASKS="desktopicon"
 ```
 
 The setup is built by Inno Setup 6 from `tools/installer.iss` in the same

{gea_program-0.78.1 → gea_program-0.79.0}/gea/__init__.py

@@ -123,7 +123,7 @@ from .profile_catalog import (
     read_pangaea_txt,
 )
 
-__version__ = "0.78.1"
+__version__ = "0.79.0"
 __all__ = [
     "aging_rate", "rate_psi_yr", "accuracy_psi",
     "Sensor", "SimulatorConfig", "DownholeEngine",

{gea_program-0.78.1 → gea_program-0.79.0}/gea/__main__.py

@@ -370,7 +370,7 @@ def main(argv=None) -> int:
     p_ws.add_argument("--path", type=str, required=True, help="the workspace folder")
     p_ws.add_argument("--action", type=str, default="list",
                       choices=["init", "add-file", "add-catalog", "add-live", "remove", "list", "migrate", "refresh", "audit",
-                               "add-seismic", "refresh-seismic", "remove-seismic", "sar-film", "bit-image", "field-pull", "driller-pull", "refresh-all", "add-track", "refresh-track", "remove-track",
+                               "add-seismic", "refresh-seismic", "remove-seismic", "sar-film", "bit-image", "field-pull", "driller-pull", "driller-shadow", "refresh-all", "add-track", "refresh-track", "remove-track",
                                "seismic-dataset", "seismic-field", "add-site", "sites", "site-report", "remove-site", "rename",
                                "set-well", "sra-define", "sra-report", "associate", "osdu-export", "quakeml-export", "well-identity", "vibration-report",
                                "add-live-station", "live-fold", "live-run", "month-end", "add-layer", "layers", "remove-layer", "structure", "interval",
@@ -3563,6 +3563,20 @@ def main(argv=None) -> int:
                 if not a.track:
                     raise SystemExit("remove-track needs --track TRACK_ID")
                 ws.remove_track(a.track, actor=a.actor); print("removed (folder kept):", a.track); return 0
+            elif a.action == "driller-shadow":
+                from . import driller_link as DL
+                if not a.well:
+                    raise SystemExit("driller-shadow needs --well Well-30636033 (a well with a drilling-recorder export)")
+                try:
+                    r = DL.shadow(ws, a.well, actor=a.actor)
+                except (ValueError, RuntimeError) as e:
+                    raise SystemExit(f"driller-shadow: {e}")
+                sm = r['summary']
+                print(f"{r['label']} - {r['display']}: {sm['decisions']} decisions over {sm['lateral_ft']:,.0f} ft of lateral; the steer agrees {sm['steer_agree_pct']:.0f}%, opposes {sm['steer_oppose_pct']:.0f}%; "
+                      f"WOB {sm['wob_agree_pct']:.0f}%, rpm {sm['rpm_agree_pct']:.0f}%, flow {sm['flow_agree_pct']:.0f}%; out by the gamma {sm['out_by_gamma_pct']:.0f}% in {sm['exits']} stretch(es), "
+                      f"the advisor called the way back at the first reading {sm['exits_called_at_first_reading']} time(s); the model {'read off the lateral in hindsight' if r['model_derived'] else 'as given'}; "
+                      f"the report: {r['report']['html']}")
+                return 0
             elif a.action == "driller-pull":
                 from . import driller_link as DL
                 if not a.box or not a.well:

{gea_program-0.78.1 → gea_program-0.79.0}/gea/acceptance_tests.py

@@ -16730,6 +16730,117 @@ def section_dv_driller(tmp: str) -> None:
        "card, the workspace command, the VPN kind, the kit and the workflow, and the help page carry it" + (f" [failed: {', '.join(failed4)}]" if failed4 else ""))
 
 
+def section_dw_shadow(tmp: str) -> None:
+    """Section DW - shadow mode: a drilled lateral replayed through the advisor against the record. A lateral drilled
+    in the twin by the agent itself, written as the driller's lateral file: the heel found below a vertical
+    approach, the model read off the gamma in hindsight close to the twin's own layer, one decision per 30 ft, the
+    agent agreeing with its own record more often than not, the exits the gamma marks called at the first reading,
+    the report in three files labelled SHADOW MODE; in GEA, a drilling-recorder well shadowed as a job from the
+    card, the lateral file written from the export beside the well, the report under the well's reports, the
+    audit line, the refusals and the help."""
+    import http.cookiejar
+    import importlib
+    import urllib.error
+    import urllib.request
+    from . import driller_link as DL
+    from . import edr as E
+    from . import helplib as H
+    from .service import Service, Users
+    from .workspace import Workspace
+    pkg = Path(__file__).parent
+    d = Path(tmp, "dw"); d.mkdir()
+    prog = DL.program()
+    if prog is None:
+        ok(True, "DW the driller's program (gea-driller) is not installed beside GEA in this install; nothing to shadow here")
+        return
+    if prog["env"] and prog["env"] not in sys.path:
+        sys.path.insert(0, prog["env"])
+    SH = importlib.import_module("gea_driller.shadow"); P = importlib.import_module("gea_driller.policy"); S = importlib.import_module("gea_driller.service")
+    np_ = importlib.import_module("numpy")
+    pol = P.Policy.load(S.SHIPPED_POLICY)
+    # -- DW1 the replay on a lateral whose layer is known ------------------------------------------------------------------
+    lat_csv = str(d / "lat.csv")
+    info = SH.twin_lateral(lat_csv, seed=7, act_fn=P.policy_act_fn(pol))
+    lat = SH.read_lateral(lat_csv)
+    heel = SH.find_heel(lat["md_ft"], lat["tvd_ft"])
+    res = SH.run(lat_csv, pol, out_dir=str(d / "out"), well="Twin 7", site="Pad 3 shadow")
+    sc = info["scene"]; m = res["model"]; sm = res["summary"]
+    bad_cols = str(d / "bad.csv")
+    Path(bad_cols).write_text("md_ft,tvd_ft\n1,2\n", encoding="utf-8")
+    try:
+        SH.read_lateral(bad_cols); cols_refused = False
+    except ValueError:
+        cols_refused = True
+    given = SH.run(lat_csv, pol, model={"layer_top_tvd_ft": sc["layer_top_heel_ft"], "thickness_ft": sc["thickness_ft"], "dip_deg": sc["dip_deg"], "gamma_in": sc["gamma_in_above_below"][0],
+                                        "gamma_above": sc["gamma_in_above_below"][1], "gamma_below": sc["gamma_in_above_below"][2], "heel_md_ft": info["heel_md"]}, well="Twin 7")
+    md_text = Path(res["paths"]["md"]).read_text(encoding="utf-8"); html_text = Path(res["paths"]["html"]).read_text(encoding="utf-8")
+    c1 = {
+        "heel": -150.0 <= lat["md_ft"][heel] - info["heel_md"] <= 30.0,          # found in the last of the build, never past the heel
+        "model": abs(m["layer_top_tvd_ft"] - sc["layer_top_heel_ft"]) <= 40.0 and 0.5 <= m["thickness_ft"] / sc["thickness_ft"] <= 1.6 and abs(m["dip_deg"] - sc["dip_deg"]) <= 1.0 and res["model_derived"],
+        "decisions": abs(sm["decisions"] - sm["lateral_ft"] / 30.0) <= 4 and sm["decisions"] >= 100,
+        "self_agreement": sm["steer_agree_pct"] >= 35.0 and sm["steer_oppose_pct"] <= 30.0 and sm["steer_agree_pct"] > sm["steer_oppose_pct"],
+        "exits": sm["exits"] >= 1 and sm["exits_called_at_first_reading"] >= 1,
+        "given_model": not given["model_derived"] and given["model"]["thickness_ft"] == sc["thickness_ft"] and given["summary"]["model_fit"] == "given" and sm["model_fit"] in ("good", "fair"),
+        "report": all(Path(res["paths"][k]).is_file() for k in ("json", "md", "html")) and "SHADOW MODE" in md_text and "SHADOW MODE" in html_text and "<svg" in html_text
+                  and "Not the pre-drill model" in md_text and "nothing here touched the well" in md_text.lower(),
+        "refusal": cols_refused,
+    }
+    failed1 = [k for k, v in c1.items() if not v]
+    ok(not failed1,
+       f"DW1 a lateral drilled in the twin by the agent, replayed: the heel found below the vertical approach, the model read off the gamma in hindsight within "
+       f"40 ft, a factor and a degree of the twin's own layer, one decision per 30 ft ({sm['decisions']}), the agent agreeing with its own record "
+       f"{sm['steer_agree_pct']:.0f}% and opposing it {sm['steer_oppose_pct']:.0f}%, the gamma's exits called at the first reading, a given model taken as given, "
+       "the report in three files labelled SHADOW MODE with the drawing, a lateral file without the columns refused" + (f" [failed: {', '.join(failed1)}]" if failed1 else ""))
+    # -- DW2 GEA: a drilling-recorder well shadowed from the card -----------------------------------------------------------
+    ws = Workspace.create(str(d / "ws"), "Pad 3 shadow", actor="tester")
+    exp = E.selftest(str(d), 3000)
+    w = ws.add_well_file(exp["path"], display="Well EDR", actor="tester")
+    w2 = ws.add_well_records("Paper well", actor="tester")
+    rec = DL.shadow(ws, w["id"], actor="tester")
+    try:
+        DL.shadow(ws, w2["id"], actor="tester"); no_edr_refused = False
+    except ValueError:
+        no_edr_refused = True
+    Users(str(Path(ws.path, "users.json"))).add("op", "op-pass-123", "operator")
+    svc = Service(ws.path, port=0, scheduler=False).start()
+    base = svc.url.rstrip("/")
+    opener = urllib.request.build_opener(urllib.request.HTTPCookieProcessor(http.cookiejar.CookieJar()))
+
+    def gcall(method, path, body=None):
+        rq = urllib.request.Request(base + path, method=method, data=(json.dumps(body).encode() if body is not None else None))
+        rq.add_header("Content-Type", "application/json"); rq.add_header("X-GEA-Action", "1")
+        try:
+            with opener.open(rq, timeout=60) as rr_:
+                return rr_.status, json.loads(rr_.read())
+        except urllib.error.HTTPError as e:
+            return e.code, json.loads(e.read() or b"{}")
+    try:
+        gcall("POST", "/api/login", {"name": "op", "password": "op-pass-123"})
+        s_d, dd = gcall("GET", "/api/driller")
+        s_bad, _ = gcall("POST", "/api/driller/shadow", {"well": w2["id"]})
+        s_job, job = gcall("POST", "/api/driller/shadow", {"well": w["id"]})
+    finally:
+        svc.stop()
+    app_src = (pkg / "web" / "app.html").read_text(encoding="utf-8")
+    main_src = (pkg / "__main__.py").read_text(encoding="utf-8")
+    c2 = {
+        "lateral_file": Path(ws.path, "wells", w["id"], "driller", "lateral.csv").is_file() and rec["lateral"]["rows"] >= 1000 and rec["lateral"]["gamma_rows"] > 0,
+        "report": all(Path(ws.reports_dir, rec["report"][k]).is_file() for k in ("html", "md", "json")) and rec["label"] == "SHADOW MODE" and rec["summary"]["decisions"] >= 20 and rec["model_derived"],
+        "record": DL.last_shadow(ws, w["id"]) is not None and [x["well"] for x in DL.shadow_wells(ws)] == [w["id"]],
+        "refusal": no_edr_refused,
+        "audit": any(a["action"] == "driller.shadow" and a["detail"]["label"] == "SHADOW MODE" for a in ws.audit_log()),
+        "routes": s_d == 200 and [x["well"] for x in dd["shadow"]] == [w["id"]] and dd["shadow"][0]["shadow"]["summary"]["decisions"] >= 20 and s_bad == 400 and s_job == 200 and "id" in job,
+        "card": all(t_ in app_src for t_ in ("Shadow a drilled well", "/api/driller/shadow", "Shadow mode")),
+        "cli": '"driller-shadow"' in main_src and "DL.shadow" in main_src,
+        "help": not H.check("driller") and "SHADOW MODE" in (pkg / "help" / "driller.md").read_text(encoding="utf-8"),
+    }
+    failed2 = [k for k, v in c2.items() if not v]
+    ok(not failed2,
+       "DW2 in GEA a drilling-recorder well is shadowed: the lateral file written from the export beside the well, the driller's program run on it, the report "
+       "under the well's reports labelled SHADOW MODE, the run recorded and audited; a well without an export is refused; the route runs it as a job and "
+       "refuses the wrong well; the card, the workspace command and the help page carry it" + (f" [failed: {', '.join(failed2)}]" if failed2 else ""))
+
+
 def main() -> int:
     print("GEA-Program - ACCEPTANCE SUITE (the product gate)")
     # a handle a job subprocess still holds at the end must not turn a finished gate into a traceback on Windows:
@@ -16859,6 +16970,7 @@ def main() -> int:
         section_dt_vpn(tmp)
         section_du_tutorial(tmp)
         section_dv_driller(tmp)
+        section_dw_shadow(tmp)
     if _FAILS:
         print(f"[ACCEPTANCE] {len(_FAILS)} FAILURES ({_PASS} passed):")
         for f in _FAILS:

{gea_program-0.78.1 → gea_program-0.79.0}/gea/driller_link.py

@@ -276,3 +276,131 @@ def wells_with_records(ws) -> List[dict]:
         if lp:
             out.append({'well': w['id'], 'display': w.get('display', w['id']), 'pulled_utc': lp['pulled_utc'], 'source': lp['source'], 'summary': lp['summary'], 'rig_well': lp.get('rig_well')})
     return out
+
+
+# -- shadow mode: a drilled well of this workspace replayed through the advisor ---------------------------------------------
+
+LATERAL_COLUMNS = ('md_ft', 'tvd_ft', 'gamma_api', 'wob_klb', 'rpm', 'flow_gpm', 'rop_ft_hr', 'spp_psi', 'hours')
+
+
+def lateral_from_edr(ws, well_id: str, out_csv: str) -> dict:
+    """The driller's lateral file from a well's drilling-recorder export: one row per foot of hole made while on
+    bottom - the first second the hole reached that foot - with the gamma as the median of the seconds since the
+    foot before, and the rig's parameters at that second. Written beside the well; the export is read, not copied."""
+    import csv as _csv
+    from . import edr as E
+    well = next((w for w in ws.wells() if w['id'] == well_id), None)
+    if well is None:
+        raise ValueError(f'no well {well_id}')
+    src = next((os.path.join(ws.path, 'wells', well_id, 'source', f) for f in well.get('files', []) if f.lower().endswith('.csv')), None)
+    if not src or not E.is_edr(src):
+        raise ValueError(f"{well_id} has no drilling-recorder export (an EDR CSV) under its sources")
+    st = E.read(src)
+    ch = {k: E._ch(st, k) for k in ('hole', 'tvd', 'gamma', 'wob', 'rpm', 'flow', 'rop', 'spp', 'onb')}
+    hole = ch['hole']
+    if hole is None or ch['tvd'] is None:
+        raise ValueError('the export carries no hole depth or no interpolated TVD; the lateral cannot be placed')
+    # the depth channel read for what it can be trusted for, as the drilling record reads it: a section that opens on
+    # another well's depth, a re-reference, a sidetrack's abandoned hole are left out
+    de = E.depth_events(st)
+    keep_h, _ = E._keep_masks(st, de)
+    secs = st.index
+    n = len(hole)
+    rows = []
+    seen = set(); g_acc = []
+    for i in range(n):
+        h = hole[i]
+        if h is None or (isinstance(h, float) and (h != h)) or not keep_h[i]:
+            continue
+        if ch['gamma'] is not None and not (ch['gamma'][i] != ch['gamma'][i]):
+            g_acc.append(float(ch['gamma'][i]))
+        foot = int(h)
+        if foot in seen:
+            continue
+        seen.add(foot)
+        tvd = ch['tvd'][i]
+        rows.append({'md_ft': float(h), 'tvd_ft': float(tvd) if not (tvd != tvd) else float('nan'),
+                     'gamma_api': float(sorted(g_acc)[len(g_acc) // 2]) if g_acc else float('nan'),
+                     'wob_klb': _v(ch['wob'], i), 'rpm': _v(ch['rpm'], i), 'flow_gpm': _v(ch['flow'], i), 'rop_ft_hr': _v(ch['rop'], i), 'spp_psi': _v(ch['spp'], i),
+                     'hours': float(secs[i]) / 3600.0})
+        g_acc = []
+    if len(rows) < 100:
+        raise ValueError(f'the export yields only {len(rows)} feet of new hole; a lateral is thousands')
+    rows.sort(key=lambda r: r['md_ft'])
+    os.makedirs(os.path.dirname(out_csv), exist_ok=True)
+    with open(out_csv, 'w', encoding='utf-8', newline='') as f:
+        w = _csv.DictWriter(f, fieldnames=list(LATERAL_COLUMNS)); w.writeheader()
+        for r in rows:
+            w.writerow({c: ('' if (isinstance(r[c], float) and r[c] != r[c]) or r[c] is None else f'{r[c]:.3f}') for c in LATERAL_COLUMNS})
+    rows.sort(key=lambda r: r['md_ft'])
+    return {'rows': len(rows), 'source': src, 'md_from': rows[0]['md_ft'], 'md_to': rows[-1]['md_ft'], 'gamma_rows': sum(1 for r in rows if r['gamma_api'] == r['gamma_api']),
+            'seconds': int(n), 'excluded_rows': int((~keep_h).sum()), 'depth_events': {k: len(v) for k, v in de.items() if isinstance(v, list)}}
+
+
+def _v(arr, i):
+    if arr is None:
+        return float('nan')
+    x = arr[i]
+    return float(x) if not (x != x) else float('nan')
+
+
+def shadow(ws, well_id: str, actor: str = 'system', model: Optional[dict] = None, timeout_s: float = 1800.0) -> dict:
+    """SHADOW MODE on a well of this workspace: the lateral file from its export, the driller's own program run
+    on it as a process of its own, the report kept under the well's reports and the summary in the driller folder."""
+    from . import __version__
+    prog = program()
+    if prog is None:
+        raise ValueError("the driller's program (gea-driller) is not installed beside GEA: the kit and the setup carry it")
+    well = next((w for w in ws.wells() if w['id'] == well_id), None)
+    if well is None:
+        raise ValueError(f'no well {well_id}')
+    d = ws.dir('wells', well_id, 'driller')
+    lat_csv = os.path.join(d, 'lateral.csv')
+    lat = lateral_from_edr(ws, well_id, lat_csv)
+    if model is None and os.path.isfile(os.path.join(d, 'model.json')):       # the site's pre-drill model, kept beside the well
+        with open(os.path.join(d, 'model.json'), encoding='utf-8') as f:
+            model = json.load(f)
+        model = model.get('model', model)
+    out = ws.dir('reports', 'wells', well_id, 'driller_shadow')
+    cmd = [sys.executable, '-m', 'gea_driller', 'shadow', '--lateral', lat_csv, '--out', out, '--well', str(well.get('display', well_id)), '--site', str(ws.manifest.get('name') or 'site'), '--json']
+    if model:
+        mp = os.path.join(d, 'model.json')
+        if not os.path.isfile(mp):
+            with open(mp, 'w', encoding='utf-8') as f:
+                json.dump({'model': model}, f, indent=1)
+        cmd += ['--model', mp]
+    env = dict(os.environ)
+    if prog['env']:
+        env['PYTHONPATH'] = prog['env'] + (os.pathsep + env['PYTHONPATH'] if env.get('PYTHONPATH') else '')
+    r = subprocess.run(cmd, capture_output=True, text=True, env=env, timeout=timeout_s)
+    if r.returncode != 0:
+        raise RuntimeError(f"the driller's shadow run failed: {(r.stderr or r.stdout).strip()[-600:]}")
+    res = json.loads(r.stdout)
+    rec = {'well': well_id, 'display': well.get('display', well_id), 'run_utc': res['run_utc'], 'by': actor, 'label': res['label'], 'driller_version': res['version'],
+           'lateral': lat, 'model': res['model'], 'model_derived': res['model_derived'], 'summary': res['summary'], 'exits': res['exits'][:50],
+           'report': {k: os.path.relpath(v, ws.reports_dir) for k, v in res['paths'].items()}, 'gea_version': __version__}
+    with open(os.path.join(d, 'shadow.json'), 'w', encoding='utf-8') as f:
+        json.dump(rec, f, indent=1)
+    ws.audit(actor, 'driller.shadow', {'well': well_id, 'decisions': res['summary']['decisions'], 'steer_agree_pct': round(res['summary']['steer_agree_pct'], 1),
+                                       'model_derived': res['model_derived'], 'label': res['label']}, inputs=[lat['source']])
+    return rec
+
+
+def last_shadow(ws, well_id: str) -> Optional[dict]:
+    p = os.path.join(ws.path, 'wells', well_id, 'driller', 'shadow.json')
+    try:
+        with open(p, encoding='utf-8') as f:
+            return json.load(f)
+    except (OSError, ValueError):
+        return None
+
+
+def shadow_wells(ws) -> List[dict]:
+    """The wells a shadow run can take (a drilling-recorder export among their sources), with the last run if any."""
+    from . import edr as E
+    out = []
+    for w in ws.wells():
+        srcs = [os.path.join(ws.path, 'wells', w['id'], 'source', f) for f in w.get('files', []) if f.lower().endswith('.csv')]
+        if any(os.path.isfile(p) and E.is_edr(p) for p in srcs):
+            out.append({'well': w['id'], 'display': w.get('display', w['id']), 'shadow': last_shadow(ws, w['id'])})
+    return out

{gea_program-0.78.1 → gea_program-0.79.0}/gea/help/driller.md

@@ -2,7 +2,7 @@
 
 > A program on the rig PC that reads the rig's own feed and the pre-drill model, places the bit in the layer with a position filter, and, every 30 ft, recommends in the driller's units what to do next - a policy trained by reinforcement learning in a physics twin of the lateral - with the driller's answer, every command, and the records pulled into GEA.
 
-**The command**: on the rig PC, `GEA-Driller-0.78.1.tar.gz` from the release (or the kit's `installers` folder, fetched on the Audit / Update tab): unpack it and run `sudo sh install.sh` on Linux or `install.cmd` on Windows, once; edit its config - the EDR's WITS0 feed (`tcp`, the host and port; `serial`, the COM port), the pre-drill model (the target layer's top TVD at the heel, its thickness and dip, the gamma in, above and below, the deep-resistivity tool, the heel's MD and TVD), the tool's cap, the limits - and restart it. The driller's screen is at port 8790 of the rig PC: `http://192.168.1.60:8790/live`. It shows the section with the model's layer window, the hole drilled through it and - since 0.78.0 - the **position filter**'s band: where the layer is from the readings, as a geosteerer places it (a particle filter over the layer's offset from the model, its dip error and its thickness, moved every decision and kept to the guesses that explain the gamma and the deep-resistivity distance), with the probability the bit is in the layer, above or below it and the distance to the top and the base with its spread, sixty feet ahead; the agent reads the same estimate, and so does the textbook driller it is judged against. Then the recommendation in words - *Build +1.5°/100 ft (toolface up, 25% steering); 25 klb WOB, 120 rpm, 500 gpm* - with its reasons (what the deep-resistivity tool says, the gamma against the model's values, the model's bracket, the limits) and the confidence of each choice, the rig's numbers against the limits, and **Accept**, **Reject** or **Did something else…** with the operator's name. In GEA: the **Drill string** tab's card **GEA Driller** - the rig PC's address and the well, **Pull**: the records come in checked against their hashes, and the table says how many decisions, accepted, rejected, done otherwise, the hole under advice, the armed sections and the commands. **Open the driller's screen** opens the rig PC's screen from its address. Before there is a rig PC: **Start the twin as the rig** runs the driller's program on this computer with a scene drilling itself under the agent - **Open its screen** is the driller's screen with the twin behind it, labelled SIMULATION - and **Pull from it** brings its records in; **Stop it** closes them. Over a cellular modem the rig PC joins GEA-VPN as a member of kind `driller` and GEA pulls from `http://10.77.0.4:8790`. The closed loop: `closed_loop.allowed` in the rig PC's config puts the switch on its screen; an operator arms it by name for one section of at most 500 ft (**Arm for this section**), every decision then goes to the downlink as a command, and the loop disarms itself on a stale feed, a crossed limit, the section's end or **Disarm now** - and this version's only downlink is the null one, which keeps every command on record and sends none, because no vendor's downlink protocol ships with it. From a terminal: `gea workspace --path C:\site --action driller-pull --box http://192.168.1.60:8790 --well SWD-1`; on the rig PC `gea-driller sim --seed 7 --pace 3 --port 8790`, `gea-driller evaluate --scenes 20`, `gea-driller train --seconds 600 --out policy.json`, `gea-driller selftest`.
+**The command**: on the rig PC, `GEA-Driller-0.79.0.tar.gz` from the release (or the kit's `installers` folder, fetched on the Audit / Update tab): unpack it and run `sudo sh install.sh` on Linux or `install.cmd` on Windows, once; edit its config - the EDR's WITS0 feed (`tcp`, the host and port; `serial`, the COM port), the pre-drill model (the target layer's top TVD at the heel, its thickness and dip, the gamma in, above and below, the deep-resistivity tool, the heel's MD and TVD), the tool's cap, the limits - and restart it. The driller's screen is at port 8790 of the rig PC: `http://192.168.1.60:8790/live`. It shows the section with the model's layer window, the hole drilled through it and - since 0.78.0 - the **position filter**'s band: where the layer is from the readings, as a geosteerer places it (a particle filter over the layer's offset from the model, its dip error and its thickness, moved every decision and kept to the guesses that explain the gamma and the deep-resistivity distance), with the probability the bit is in the layer, above or below it and the distance to the top and the base with its spread, sixty feet ahead; the agent reads the same estimate, and so does the textbook driller it is judged against. Then the recommendation in words - *Build +1.5°/100 ft (toolface up, 25% steering); 25 klb WOB, 120 rpm, 500 gpm* - with its reasons (what the deep-resistivity tool says, the gamma against the model's values, the model's bracket, the limits) and the confidence of each choice, the rig's numbers against the limits, and **Accept**, **Reject** or **Did something else…** with the operator's name. In GEA: the **Drill string** tab's card **GEA Driller** - the rig PC's address and the well, **Pull**: the records come in checked against their hashes, and the table says how many decisions, accepted, rejected, done otherwise, the hole under advice, the armed sections and the commands. **Open the driller's screen** opens the rig PC's screen from its address. Before there is a rig PC: **Start the twin as the rig** runs the driller's program on this computer with a scene drilling itself under the agent - **Open its screen** is the driller's screen with the twin behind it, labelled SIMULATION - and **Pull from it** brings its records in; **Stop it** closes them. **Shadow a drilled well** (since 0.79.0): a well of this workspace with a drilling-recorder export is replayed through the advisor - every 30 ft the agent sees what the rig had shown to that point and nothing past it, and its recommendation is set beside what the record did next: the build actually made over the following 90 ft, the weight, speed and flow used, and at each stretch the gamma marks as out of the layer, whether the advisor called the way back at the first reading. The report, **SHADOW MODE**, is under the well's reports with a drawing of the lateral against the layer; the layer model is read off the well's own gamma in hindsight and says so - and grades how well it fits the well (good, fair, poor: a well steered to a rock that is not the low gamma reads poor, and the agent's calls against a poor model mean little) - unless the site's pre-drill model is given: a file `wells\Well-30636033\driller\model.json` with the config's `model` block (the target layer's top TVD at the heel, its thickness and dip, the gamma in, above and below, the heel's MD and TVD) is used whenever it is there (`gea workspace --path C:\site --action driller-shadow --well Well-30636033`). The export is read on this computer and nothing of it leaves it. Agreement with the driller says the two would have done alike, not that either was right. Over a cellular modem the rig PC joins GEA-VPN as a member of kind `driller` and GEA pulls from `http://10.77.0.4:8790`. The closed loop: `closed_loop.allowed` in the rig PC's config puts the switch on its screen; an operator arms it by name for one section of at most 500 ft (**Arm for this section**), every decision then goes to the downlink as a command, and the loop disarms itself on a stale feed, a crossed limit, the section's end or **Disarm now** - and this version's only downlink is the null one, which keeps every command on record and sends none, because no vendor's downlink protocol ships with it. From a terminal: `gea workspace --path C:\site --action driller-pull --box http://192.168.1.60:8790 --well SWD-1`; on the rig PC `gea-driller sim --seed 7 --pace 3 --port 8790`, `gea-driller evaluate --scenes 20`, `gea-driller train --seconds 600 --out policy.json`, `gea-driller selftest`.
 
 **What it writes**: on the rig PC, `decisions.jsonl` (every observation, recommendation, confidence, reasons and answer), `commands.jsonl` (every arming, command and disarming with its reason) and `surveys.csv`, each with a `.sha256` beside it, and `manifest.json`. In GEA, `wells\SWD-1\driller\` holds the same files as pulled, `manifest.json` and `last_pull.json` with the summary; the audit lines `driller.pull`, `driller.sim_start`, `driller.sim_stop`. The twin as the rig writes under `field\sim-driller\data`.
 

{gea_program-0.78.1 → gea_program-0.79.0}/gea/help/install.md

@@ -2,7 +2,7 @@
 
 > GEA-Program-Setup: the program installed for you like any Windows program - a window of its own, an icon in the notification area, Start-menu and desktop shortcuts, an Add/Remove Programs entry, upgrades in place - with no administrator rights and the site's data left where it is.
 
-**The command**: download the setup from the release on GitHub (`GEA-Program-Setup-0.78.1.exe` for this version) and run it. It installs for you alone, under `%LOCALAPPDATA%\Programs\GEA-Program`, and asks for the site workspace - the folder that holds the wells, reports, records, accounts and keys. An existing one such as `C:\site` is used exactly as it is, its name included; for a new one (by default `%LOCALAPPDATA%\GEA-Program\site`) it also asks the site's name, which heads every report, and makes the workspace with it (left empty, the workspace is named after its folder; an administrator renames the site in Administration's site settings). Then the Start menu's **GEA-Program** (and the desktop shortcut) starts the control panel when it is not running and opens it in a window of its own. A newer setup installs over the older one: it stops the control panel, replaces the program, keeps the workspace and the choices made before. For a site's software deployment: `GEA-Program-Setup-0.78.1.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /WORKSPACE="C:\site" /SITENAME="Pad 3" /TASKS="desktopicon"` (`/SITENAME` names a workspace the setup makes; one that exists keeps its own name). From a terminal: `gea launch` does what the shortcut does, `gea launch --selftest` says what it would do, `gea tray --selftest` checks the icon.
+**The command**: download the setup from the release on GitHub (`GEA-Program-Setup-0.79.0.exe` for this version) and run it. It installs for you alone, under `%LOCALAPPDATA%\Programs\GEA-Program`, and asks for the site workspace - the folder that holds the wells, reports, records, accounts and keys. An existing one such as `C:\site` is used exactly as it is, its name included; for a new one (by default `%LOCALAPPDATA%\GEA-Program\site`) it also asks the site's name, which heads every report, and makes the workspace with it (left empty, the workspace is named after its folder; an administrator renames the site in Administration's site settings). Then the Start menu's **GEA-Program** (and the desktop shortcut) starts the control panel when it is not running and opens it in a window of its own. A newer setup installs over the older one: it stops the control panel, replaces the program, keeps the workspace and the choices made before. For a site's software deployment: `GEA-Program-Setup-0.79.0.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /WORKSPACE="C:\site" /SITENAME="Pad 3" /TASKS="desktopicon"` (`/SITENAME` names a workspace the setup makes; one that exists keeps its own name). From a terminal: `gea launch` does what the shortcut does, `gea launch --selftest` says what it would do, `gea tray --selftest` checks the icon.
 
 **The window**: Microsoft Edge's app window (`msedge --app=`: the control panel with no tabs and no address bar, its own button on the taskbar, which shows the program's derrick and pins as GEA-Program, not as Edge), with a browser profile of its own (`%LOCALAPPDATA%\GEA-Program\window`, no extensions; the first time, Edge may say it signed that profile in to your Microsoft account - Got it), else Google Chrome's, else a tab in the default browser. Where the browser keeps no cookies (its settings or a policy block them), the sign-in page says so and the control panel holds the sign-in itself, in the window's address, until the window is closed. The control panel itself runs with no window of its own: `gea supervise` keeps it running in the background, starts it again when it asks for a restart, and writes everything it would have shown in a console - the start, the sign-ins, the jobs, a stop and why - to `records\console.log` in the workspace. No PowerShell or console window opens. The kit's `start-dashboard.cmd` still runs it in a console window, for a site that wants to watch it there.
 
@@ -18,7 +18,7 @@
 
 **The number to check**: Add/Remove Programs lists GEA-Program with the version you installed; `gea doctor --workspace C:\site` ends with `nothing blocks serving`; the Start menu's **Verify GEA-Program** runs the acceptance gate from the installation and ends with `[ACCEPTANCE] OK - N checks passed`. The release's build installs, upgrades and uninstalls the setup silently before it is published, with the control panel running, and checks the workspace untouched afterwards.
 
-**Signed**: when the publisher's code-signing certificate is configured for the build, the setup is signed with it (Authenticode, timestamped) and Windows names the publisher; until then it ships unsigned and Windows SmartScreen says "unknown publisher" (More info, then Run anyway). The build's provenance holds either way: `gh attestation verify GEA-Program-Setup-0.78.1.exe -R Daniel8Murphy0007/GEA-Program`. The uninstaller the setup leaves behind is Inno Setup's own and is not signed separately.
+**Signed**: when the publisher's code-signing certificate is configured for the build, the setup is signed with it (Authenticode, timestamped) and Windows names the publisher; until then it ships unsigned and Windows SmartScreen says "unknown publisher" (More info, then Run anyway). The build's provenance holds either way: `gh attestation verify GEA-Program-Setup-0.79.0.exe -R Daniel8Murphy0007/GEA-Program`. The uninstaller the setup leaves behind is Inno Setup's own and is not signed separately.
 
 **What this page will not call a measurement**: the icon's running or stopped is whether the control panel's port answers on this computer, read every three seconds - not whether every patch, job or report behind it is healthy (Home and the Verification page say that).
 

{gea_program-0.78.1 → gea_program-0.79.0}/gea/help/reader.md

@@ -4,7 +4,7 @@
 
 **The command**: Reports tab -> Signed dossiers -> **Download GEA Reader for your clients**, or `gea reader --workspace C:\site --out C:\site\GEA-Reader.html`. Send the file once, by any channel (email, a USB stick, the client's portal); send the site's key fingerprint separately - by phone, email or in the contract - as for any dossier. The client opens GEA-Reader.html, drops a dossier on it (or chooses it), and reads the verdict: **Valid** (signed with the site's key, or with a newer key the site's key handed over to), **Valid, but signed by a key you were not given**, or **Not valid** with the reason. Below the verdict: each check, the signer's fingerprint, the key hand-overs, and every file the dossier holds - a report opens in the page as it was signed, a PDF in the browser's own viewer, a table or a log as text, and any file can be saved. A dossier that lists source records by hash without carrying them lets the client choose their copies and checks each against its hash.
 
-**The program**: for a client who wants it installed, **GEA-Reader-Setup-0.78.1.exe** on the release page installs GEA Reader as a Windows program of its own, for the signed-in user, with no administrator rights and nothing of GEA-Program: GEA Reader in the Start menu and on the desktop with its own icon (a white page with a green seal, on blue) and its own taskbar button, and **Check with GEA Reader** on the right-click menu of .zip files (on Windows 11, under Show more options), which opens the dossier at once. It opens the same page in Microsoft Edge's app window with a browser profile of its own (`%LOCALAPPDATA%\GEA-Reader\window`), so a fingerprint the client saves - **Remember this fingerprint**, with whose it is - stays on that computer, and every later dossier signed with that key reads **Valid** with the name the client gave it. `GEA-Reader-portable-0.78.1.zip` is the same program to unzip and run (`GEA-Reader.cmd`). `python\python.exe -m gea_reader --selftest`, in the installed folder, checks the page, the icon, the taskbar identity and the hand-over of a dossier without opening a window.
+**The program**: for a client who wants it installed, **GEA-Reader-Setup-0.79.0.exe** on the release page installs GEA Reader as a Windows program of its own, for the signed-in user, with no administrator rights and nothing of GEA-Program: GEA Reader in the Start menu and on the desktop with its own icon (a white page with a green seal, on blue) and its own taskbar button, and **Check with GEA Reader** on the right-click menu of .zip files (on Windows 11, under Show more options), which opens the dossier at once. It opens the same page in Microsoft Edge's app window with a browser profile of its own (`%LOCALAPPDATA%\GEA-Reader\window`), so a fingerprint the client saves - **Remember this fingerprint**, with whose it is - stays on that computer, and every later dossier signed with that key reads **Valid** with the name the client gave it. `GEA-Reader-portable-0.79.0.zip` is the same program to unzip and run (`GEA-Reader.cmd`). `python\python.exe -m gea_reader --selftest`, in the installed folder, checks the page, the icon, the taskbar identity and the hand-over of a dossier without opening a window.
 
 **What it writes**: the one file, GEA-Reader.html (about 40 KB): the checks, written in the page's own script - Ed25519 (RFC 8032) in its own arithmetic, SHA-256 from the browser - and, when made from a workspace, the site's name and the fingerprints of every key it has signed with (the current one and each retired one from the key history: public halves only; the signing key never leaves `keys\`). The audit log records each download (`reader.download`) and each `gea reader` (`reader.write`) with the fingerprints the reader carried. The reader page writes nothing on the client's computer but the fingerprints a client saves (in the browser's storage for the page): it reads the zip it is given, in memory, and a saved copy goes where the client's browser saves downloads. The installed program also writes the page it opens to `%LOCALAPPDATA%\GEA-Reader\page` (with the dossier inside it when one was right-clicked; removed ten minutes later) and its right-click entry under the user's own registry keys, removed with the program.
 

{gea_program-0.78.1 → gea_program-0.79.0}/gea/help/recorder.md

@@ -2,7 +2,7 @@
 
 > GEA Recorder is the program on the pad: a Raspberry Pi in a sealed box that records the ground channels (geophones, accelerometers, electrode dipoles) through a 24-bit ADC and the rig's WITS0 feed, every sample on one GPS-disciplined clock, into hourly miniSEED files with a SHA-256 beside each and a manifest, and serves one status page on the pad network. Nothing to type: power it and it records. GEA pulls its files in and makes stations of them.
 
-**The command**: the **Seismic** tab, the card **Field recorder**: the box's address on the pad network (`http://192.168.1.50:8780` - the status page shows the address) or the folder of the USB mirror carried to the office, a station name if the site's is not wanted, then **Pull** (a job). GEA fetches the manifest, downloads every file it does not have, checks each against its SHA-256, and makes or updates two stations: the array of the ground-motion sensors (band 8-80 Hz, the sensors' positions from the box's config) and the electrode station (0.01-5 Hz); each sensor's hours are joined in order into one record, nothing re-sampled or filtered. Pull again later: only the new hours come across, and the stations are updated in place. From a terminal: `gea workspace --path C:\site --action field-pull --box http://192.168.1.50:8780`. On the box: `gea-recorder status`, `gea-recorder selftest`; `sudo sh kiosk.sh` once puts the live view full-screen on a monitor on the box's HDMI port from boot - RECORDING in green or what is wrong in red, the clock, the rig's depth, every channel's last minute and the ground sensors' spectrogram, nothing to press - and the same view is at `/live` on the box's page from any browser on the pad network; `sudo sh install.sh` once, from the release's `GEA-Recorder-0.78.1.tar.gz`; the box's README has the parts list, the wiring and the three chrony lines for the GPS clock.
+**The command**: the **Seismic** tab, the card **Field recorder**: the box's address on the pad network (`http://192.168.1.50:8780` - the status page shows the address) or the folder of the USB mirror carried to the office, a station name if the site's is not wanted, then **Pull** (a job). GEA fetches the manifest, downloads every file it does not have, checks each against its SHA-256, and makes or updates two stations: the array of the ground-motion sensors (band 8-80 Hz, the sensors' positions from the box's config) and the electrode station (0.01-5 Hz); each sensor's hours are joined in order into one record, nothing re-sampled or filtered. Pull again later: only the new hours come across, and the stations are updated in place. From a terminal: `gea workspace --path C:\site --action field-pull --box http://192.168.1.50:8780`. On the box: `gea-recorder status`, `gea-recorder selftest`; `sudo sh kiosk.sh` once puts the live view full-screen on a monitor on the box's HDMI port from boot - RECORDING in green or what is wrong in red, the clock, the rig's depth, every channel's last minute and the ground sensors' spectrogram, nothing to press - and the same view is at `/live` on the box's page from any browser on the pad network; `sudo sh install.sh` once, from the release's `GEA-Recorder-0.79.0.tar.gz`; the box's README has the parts list, the wiring and the three chrony lines for the GPS clock.
 
 **Before there is a Pi**: on the same card, **Start the simulated box**: the recorder's own program runs on this computer with its test signal in place of the ADC (a process of its own, its files under `field\sim-box\` in the workspace, its page on port 8781), **Open its monitor** shows the live screen the attendant will see, **Pull from it** brings its files in as stations, **Stop it** closes every file and lists them. **Open the box's monitor** opens any real box's live screen from its address. The kit and the setup install the recorder's program beside GEA for this; a pip install adds it with `pip install gea-recorder`. **From the office, over the internet**: GEA-VPN (`gea help vpn`, Administration) gives every box a private address the office pulls from (`http://10.77.0.3:8780`) through a tunnel from the pad's cellular modem; the box's zip from that card holds `vpn.sh`, run once on the Pi.
 

{gea_program-0.78.1 → gea_program-0.79.0}/gea/help/tutorial/01-install.md

@@ -5,10 +5,10 @@ Takes: 15 minutes
 > The program installed like any Windows program, with the site's folder chosen once.
 
 ## Before you start
-You need a Windows PC that will stay on while the site is watched (the office machine, or the doghouse PC), and the setup file for this version, `GEA-Program-Setup-0.78.1.exe`, from the release page on GitHub. No administrator rights are needed: the program installs for you alone.
+You need a Windows PC that will stay on while the site is watched (the office machine, or the doghouse PC), and the setup file for this version, `GEA-Program-Setup-0.79.0.exe`, from the release page on GitHub. No administrator rights are needed: the program installs for you alone.
 
 ## Steps
-1. Double-click `GEA-Program-Setup-0.78.1.exe`. If Windows asks whether to run it, choose **Run** - the setup is published by the site, not by a store.
+1. Double-click `GEA-Program-Setup-0.79.0.exe`. If Windows asks whether to run it, choose **Run** - the setup is published by the site, not by a store.
 2. The setup asks for the **site workspace**: the one folder that will hold the wells, the reports, the records, the accounts and the keys. For a new site keep the default or type `C:\site`. For a workspace that already exists, point at it - it is used exactly as it is, its name included.
 3. For a new workspace it asks the **site's name** (`Pad 3`). This name heads every report the program writes; an administrator can change it later in Administration, site settings.
 4. Tick the desktop shortcut and finish. The setup puts **GEA-Program** in the Start menu and an icon in the notification area by the clock.

{gea_program-0.78.1 → gea_program-0.79.0}/gea/help/tutorial/19-dossier-reader.md

@@ -8,7 +8,7 @@ Takes: 20 minutes
 1. On **Reports**, **Signed dossiers**: **Sign a dossier for the pad**, or one of the wells (the operator role). Tick *embed the source records* to carry the drilling records themselves rather than their hashes. The dossier is a zip: the reports as they stand, the declarations behind them, the audit log, the source records' hashes, the site's Ed25519 signature, and a checker inside (`verify_dossier.py`, plain Python).
 2. **Check** re-checks a dossier this site signed against the workspace as it now stands; a workspace that no longer matches a signed dossier raises an alert. *Check a dossier someone sent you* checks an uploaded one.
 3. **Download GEA Reader for your clients**: one HTML file. Send it to the client once by any channel - email, a USB stick, their portal. Send the site's **key fingerprint** separately - by phone, or in the contract - as for any dossier; the card shows it.
-4. The client opens `GEA-Reader.html` in any current browser, offline, and drops a dossier on it. The verdict: **Valid** (signed with the site's key, or a newer key the site's key handed over to), **Valid, but signed by a key you were not given**, or **Not valid** with the reason. Below it, every file the dossier holds: a report opens in the page as it was signed, a PDF in the browser's own viewer. A client who wants it installed, with a right-click **Check with GEA Reader** on dossiers, gets `GEA-Reader-Setup-0.78.1.exe` from the release page.
+4. The client opens `GEA-Reader.html` in any current browser, offline, and drops a dossier on it. The verdict: **Valid** (signed with the site's key, or a newer key the site's key handed over to), **Valid, but signed by a key you were not given**, or **Not valid** with the reason. Below it, every file the dossier holds: a report opens in the page as it was signed, a PDF in the browser's own viewer. A client who wants it installed, with a right-click **Check with GEA Reader** on dossiers, gets `GEA-Reader-Setup-0.79.0.exe` from the release page.
 5. **The key**: it lives in `keys\dossier_ed25519.json` in the workspace. The backup carries it; nothing else does; never send it. An administrator **rotates** it with a reason when a person who had access leaves; the old key's history rides in every later dossier so a reader of an old dossier still knows it was the site's.
 
 ## You know it worked when

{gea_program-0.78.1 → gea_program-0.79.0}/gea/help/tutorial/22-updates.md

@@ -8,7 +8,7 @@ Takes: 10 minutes
 1. Open **Audit / Update**, the card **The release**: the newest release on GitHub against the version running, with the three kits it carries - `GEA-Program-Setup`, `GEA-Reader-Setup` and `GEA-Recorder` - each with the SHA-256 GitHub recorded.
 2. Press **Fetch the kits** (the button names the version). A job brings them into the workspace's `installers\` folder, checks each against its recorded hash (a kit altered after that is not kept), and moves older kits to `installers\_older`. The card marks every kit on hand ✓.
 3. Press **Install now** (the button names the version). The program's setup runs silently from there with this workspace, and the reader's setup with it; the control panel stops for about a minute and is started again by a helper outside the program. Sign in again. The card now shows the new version running.
-4. The recorder's kit, `GEA-Recorder-0.78.1.tar.gz`, is in the same folder for the attendant to take to the box (lesson 25).
+4. The recorder's kit, `GEA-Recorder-0.79.0.tar.gz`, is in the same folder for the attendant to take to the box (lesson 25).
 5. On a computer that cannot reach GitHub, the setup from the release page installs over the old version the same way; the workspace is kept.
 
 ## You know it worked when

{gea_program-0.78.1 → gea_program-0.79.0}/gea/help/tutorial/25-install-recorder.md

@@ -5,10 +5,10 @@ Takes: 30 minutes
 > One script, one config file, one restart.
 
 ## Before you start
-The box assembled (lesson 24), the Pi on the pad network, and the release's `GEA-Recorder-0.78.1.tar.gz` - from the office's `installers\` folder (lesson 22) or the release page - copied to the Pi.
+The box assembled (lesson 24), the Pi on the pad network, and the release's `GEA-Recorder-0.79.0.tar.gz` - from the office's `installers\` folder (lesson 22) or the release page - copied to the Pi.
 
 ## Steps
-1. On the Pi, unpack the kit and run the installer once: `tar xzf GEA-Recorder-0.78.1.tar.gz`, `cd GEA-Recorder-0.78.1`, `sudo sh install.sh`. It makes `/opt/gea-recorder` (a Python environment of its own), writes the example config to `/etc/gea-recorder/config.json`, makes `/var/lib/gea-recorder`, enables SPI, enables the service to start at boot and runs the self-test.
+1. On the Pi, unpack the kit and run the installer once: `tar xzf GEA-Recorder-0.79.0.tar.gz`, `cd GEA-Recorder-0.79.0`, `sudo sh install.sh`. It makes `/opt/gea-recorder` (a Python environment of its own), writes the example config to `/etc/gea-recorder/config.json`, makes `/var/lib/gea-recorder`, enables SPI, enables the service to start at boot and runs the self-test.
 2. The clock: wire the GPS as lesson 24 says, then the three lines the README gives - `dtoverlay=pps-gpio,gpiopin=18` and `enable_uart=1` in `/boot/firmware/config.txt`, the two `refclock` lines in `/etc/chrony/chrony.conf` - `sudo apt install gpsd pps-tools`, and reboot. `chronyc tracking` then names PPS as the reference with an offset of microseconds.
 3. Edit the config: `sudo nano /etc/gea-recorder/config.json`. The site's name as the office spells it; the station id; the wellhead's latitude and longitude; each channel's ADC input, its id (`REF`, `S01`...), its kind (`geophone` or `electrode`) and its place in feet east and north of the wellhead; the ADC driver `ads1256` (`sim` records a test signal with no hardware); the rig feed - `rig.enabled`, the serial port or the TCP host and port the EDR offers; the mirror path for the USB stick.
 4. `sudo systemctl restart gea-recorder`. Open the box's page from any computer on the pad network: port 8780 of the box's address - `http://192.168.1.50:8780/` when that is its address. It shows the site, the station, RECORDING, the clock and what its time is worth, every channel's level, the files closed, the free space, the rig feed.

{gea_program-0.78.1 → gea_program-0.79.0}/gea/help/tutorial/28-driller-office.md

@@ -1,7 +1,7 @@
 # 28. GEA Driller from the office
 Who: office
 Where: #/drillstring
-Takes: 30 minutes
+Takes: 40 minutes
 > The directional driller's agent: what it is, the twin as the rig on this computer, its screen, and its records pulled in.
 
 ## What it is
@@ -13,7 +13,8 @@ GEA Driller is a program for the rig PC. It reads the rig's own feed and the pre
 3. Type your name and press **Accept** on a recommendation; press **Reject** on the next; press **Did something else…** and record a build of +1.5°/100 ft at 25 klb on a third. Each answer is on the record with your name; the twin drills on under the agent.
 4. The closed loop: **Arm for this section** to 300 ft further, confirm. The panel turns red: every decision is now a command, and the agent's panel says the null downlink kept it and sent nothing. **Disarm now**, or wait for the section's end - it disarms itself, and says why.
 5. Back in GEA, choose the well the records go under and press **Pull from it**: a job fetches the records, checks each against its SHA-256 and keeps them under the well. The table says how many decisions, accepted, rejected, done otherwise, the hole under advice, the armed sections and the commands; the last decisions are listed below. **Stop it** closes the twin's records.
-6. A real rig PC: its address in **The rig PC's address** (`http://192.168.1.60:8790`), the well, **Pull** - the same table. **Open the driller's screen** opens its screen from here. Over a modem, the rig PC joins GEA-VPN as a member of kind `driller` (lesson 23) and the address is its private one, `http://10.77.0.4:8790`.
+6. **Shadow a drilled well**: choose a well with a drilling-recorder export and press it. A job replays the drilled lateral through the advisor - at every 30 ft the agent sees only what the rig had shown to that point - and sets its recommendation beside what the record did next; the table says how often the steer agreed or opposed, the weight, speed and flow, and at each stretch the gamma marks as out of the layer whether the advisor called the way back at the first reading; the **SHADOW MODE** report under the well's reports has the drawing. Nothing of the export leaves this computer.
+7. A real rig PC: its address in **The rig PC's address** (`http://192.168.1.60:8790`), the well, **Pull** - the same table. **Open the driller's screen** opens its screen from here. Over a modem, the rig PC joins GEA-VPN as a member of kind `driller` (lesson 23) and the address is its private one, `http://10.77.0.4:8790`.
 
 ## You know it worked when
 The table shows your three answers under your name, one armed section with its commands and none sent, and the well's folder holds `driller\decisions.jsonl` with its `.sha256`.

{gea_program-0.78.1 → gea_program-0.79.0}/gea/help/tutorial/29-driller-rig.md

@@ -5,7 +5,7 @@ Takes: 30 minutes
 > One install, one config file, and the driller's screen on the rig.
 
 ## Before you start
-The rig PC (the EDR's own, or the directional driller's laptop) on the rig network, with the EDR's WITS0 feed available on a TCP port or a serial line - ask the EDR vendor's hand for the port; it is read-only and nothing is ever sent to it. The kit `GEA-Driller-0.78.1.tar.gz` from the office's `installers\` folder (lesson 22) or the release page. On Windows, Python 3.9 or newer from python.org with "Add to PATH" ticked.
+The rig PC (the EDR's own, or the directional driller's laptop) on the rig network, with the EDR's WITS0 feed available on a TCP port or a serial line - ask the EDR vendor's hand for the port; it is read-only and nothing is ever sent to it. The kit `GEA-Driller-0.79.0.tar.gz` from the office's `installers\` folder (lesson 22) or the release page. On Windows, Python 3.9 or newer from python.org with "Add to PATH" ticked.
 
 ## Steps
 1. Unpack the kit. On a Linux PC: `sudo sh install.sh`. On Windows: double-click `install.cmd`. Either makes a Python environment of its own with the package and the trained policy inside it, writes the example config beside it, makes the data folder, runs the self-test (a minute: the twin, the policy against the textbook driller, a short training that learns, the service), and sets the program to start with the PC.

{gea_program-0.78.1 → gea_program-0.79.0}/gea/help/tutorial.md

@@ -2,9 +2,9 @@
 
 > Every step of GEA and the programs around it - the control panel, the Reader, the Recorder on the pad, GEA-VPN, GEA Driller - as 29 lessons: the office's first, the pad attendant's after, each naming the page it is done on, what you press, and how you know it worked.
 
-**The command**: the **Tutorial** tab. The lessons are listed by part - Getting started, Wells and their data, Watching the pad, The engineering pages, Seismic, Reports for the client, Keeping it running, On the pad, The driller's agent - each with who it is for and how long it takes. Open one: **Open the page this lesson is about** goes to the tab it is done on, the numbered steps say what to press, **You know it worked when** says what to look for, and **Mark this lesson done** ticks it off for you (each account has its own progress; the list says how many are done and which comes next). **Print the handout** opens the whole course as one page for the people who do not sit at this screen - the attendant on the pad - and the browser's Print makes the PDF; **Write the handout into exports\tutorial** (the operator role) writes the same as `GEA-Tutorial-0.78.1.html` and `.md` into the workspace. From a terminal: `gea tutorial` lists the lessons, `gea tutorial --lesson 3` prints one, `gea tutorial --lesson install` the same by name, `gea tutorial --handout --workspace C:\site` writes the handout into the workspace, `gea tutorial --handout --out C:\site\GEA-Tutorial.html` writes it anywhere. The lessons are Markdown files under the program's `help\tutorial` folder.
+**The command**: the **Tutorial** tab. The lessons are listed by part - Getting started, Wells and their data, Watching the pad, The engineering pages, Seismic, Reports for the client, Keeping it running, On the pad, The driller's agent - each with who it is for and how long it takes. Open one: **Open the page this lesson is about** goes to the tab it is done on, the numbered steps say what to press, **You know it worked when** says what to look for, and **Mark this lesson done** ticks it off for you (each account has its own progress; the list says how many are done and which comes next). **Print the handout** opens the whole course as one page for the people who do not sit at this screen - the attendant on the pad - and the browser's Print makes the PDF; **Write the handout into exports\tutorial** (the operator role) writes the same as `GEA-Tutorial-0.79.0.html` and `.md` into the workspace. From a terminal: `gea tutorial` lists the lessons, `gea tutorial --lesson 3` prints one, `gea tutorial --lesson install` the same by name, `gea tutorial --handout --workspace C:\site` writes the handout into the workspace, `gea tutorial --handout --out C:\site\GEA-Tutorial.html` writes it anywhere. The lessons are Markdown files under the program's `help\tutorial` folder.
 
-**What it writes**: `records\tutorial_progress.json` in the workspace (who finished which lesson, when); `exports\tutorial\GEA-Tutorial-0.78.1.html` and `.md` when the handout is written, with the audit line `tutorial.handout`; `tutorial.print` when the handout is opened from the page. Reading a lesson writes nothing.
+**What it writes**: `records\tutorial_progress.json` in the workspace (who finished which lesson, when); `exports\tutorial\GEA-Tutorial-0.79.0.html` and `.md` when the handout is written, with the audit line `tutorial.handout`; `tutorial.print` when the handout is opened from the page. Reading a lesson writes nothing.
 
 **The number to check**: the list's "done" count against 29, and on the Tutorial tab which lesson is next. A lesson's own check is its **You know it worked when** - the thing on the screen or the disk that is there only if the steps were done; a tick without it is a tick.