Number::to_int() returned u64, which caused silent wrapping for negative values (e.g. -1.0 as u64 produces a very large number) and was inconsistent with how Number already uses i64 in its Display impl.

Changes

• number.rs: to_int() now returns i64 via self.0 as i64
• builtin.rs: Heading depth callers updated to clamp safely with .max(0).min(u8::MAX as i64) as u8, preventing negative shift amounts from producing incorrect u8 values

// Before: negative shift amounts would silently wrap to large u64/u8 values
pub fn to_int(self) -> u64 { self.0 as u64 }

// After: preserves sign; callers clamp to valid range explicitly
pub fn to_int(self) -> i64 { self.0 as i64 }

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.