Command on model : bug undo/redo, guard against deleted model