The .modelcraft file, undo/redo on the journal, atomic saves and autosave recovery (M3) (#21)

* modelcraft-io: the .modelcraft file (modelcraft/1), atomic writes, autosave storage

A stored ZIP of a manifest (format tag, geometry sources with SHA-256,
part sizes and hashes), the model definition as stable pretty JSON, the
mesh and geometry tags in a compact binary part, and the journal one
command per line. Reading caps every size, checks every checksum and
replays the model through its checked methods. Model::without_mesh and
empty mesh fields left out of the model's JSON; geometry::read_file.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NmAttHhUZTokgPeEJia8sm

* engine: undo/redo on the journal, file.open/save/save_as, autosave and recovery

CommandSpec gains a kind: Model commands are journalled and become undo
steps; Session commands (file.*, edit.*) manage the session. Undo history
is bounded by steps and estimated memory. Geometry sources are recorded
with content hashes and reopened on file.open (missing or changed files
are warnings). Desktop app autosaves every 30 s and reports recoverable
models; Ctrl/Cmd+Z and Shift+Z/Y undo and redo.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NmAttHhUZTokgPeEJia8sm

* docs: the .modelcraft format, undo history, roadmap and parity status

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NmAttHhUZTokgPeEJia8sm

* simplify: shared path parameter, one load path for open/recover, history accounting in History

Session commands skip the per-command model copy; saved revision is an
Option; journal written from borrowed entries and read without an
intermediate tree; backups copied by the file system; recovery lock and
error helpers; geometry file wrappers use read_file.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NmAttHhUZTokgPeEJia8sm

---------

Co-authored-by: jyviko <2501648+jyviko@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

apps/modelcraft/src/main.rs

@@ -13,19 +13,51 @@
 mod control_server;
 
 use modelcraft_engine::Session;
+use modelcraft_engine::autosave::{self, Autosaver};
 use modelcraft_ui_egui::ModelApp;
 
 const USAGE: &str = "usage: modelcraft [--sample] [--control PORT]";
 const DEPTH_BITS: u8 = 24;
 const MSAA: u16 = 4;
 
+/// How often unsaved changes are autosaved for recovery (seconds).
+const AUTOSAVE_SECONDS: f64 = 30.0;
+
 struct App {
     app: ModelApp,
+    /// Autosave for crash recovery (`None` when the recovery folder is unavailable).
+    autosaver: Option<Autosaver>,
+    /// App time of the last autosave check.
+    autosaved_at: f64,
+}
+
+impl App {
+    fn autosave(&mut self) {
+        if let Some(a) = &mut self.autosaver
+            && let Err(e) = a.save(&self.app.session)
+        {
+            log::warn!("autosave: {e}");
+        }
+    }
 }
 
 impl eframe::App for App {
     fn logic(&mut self, ctx: &egui::Context, _frame: &mut eframe::Frame) {
         self.app.logic(ctx);
+        if self.app.now - self.autosaved_at >= AUTOSAVE_SECONDS {
+            self.autosaved_at = self.app.now;
+            self.autosave();
+        }
+        if self.autosaver.is_some() {
+            ctx.request_repaint_after(std::time::Duration::from_secs_f64(AUTOSAVE_SECONDS));
+        }
+    }
+    fn on_exit(&mut self) {
+        if let Some(a) = self.autosaver.take()
+            && let Err(e) = a.close(&self.app.session)
+        {
+            log::warn!("autosave: {e}");
+        }
     }
     fn raw_input_hook(&mut self, _ctx: &egui::Context, raw: &mut egui::RawInput) {
         self.app.raw_input_hook(raw);
@@ -98,7 +130,15 @@ fn main() -> eframe::Result {
                 // The status bar reports a failure; the app still opens.
                 let _ = app.run_script(&modelcraft_engine::sample::script());
             }
-            Ok(Box::new(App { app }))
+            let autosaver = autosave::default_dir().and_then(|dir| {
+                let listed = app.session.execute("file.recovery.list", &serde_json::json!({"dir": dir}));
+                let recoverable = listed.ok().and_then(|v| v.as_array().map(Vec::len)).unwrap_or(0);
+                if recoverable > 0 {
+                    app.set_status(format!("{recoverable} autosaved model(s) can be recovered (file.recovery.list, file.recover)"), false);
+                }
+                Autosaver::new(&dir).map_err(|e| log::warn!("autosave unavailable: {e}")).ok()
+            });
+            Ok(Box::new(App { app, autosaver, autosaved_at: 0.0 }))
         }),
     )
 }