File checkpoint and recovery — auto-quicksaves before destructive commands, manual checkpoints for safe rollback