@djh /...
Having the controller on the pump is critical: a separate uncoordinated component means that you cannot fail open or closed, only fail. The pump user interface and programmability are awful, I'd ove to replace it. But the complete system is now important. Everything fails, so this is literally vital.