proof explorer: command list, undo support