[TeoVader]

What changes

Before: the project "⋯" sheet (project card on Home) and the "⋯" in a project's top bar offered Rename, Restricted, Archive, Delete, Share links, Recently deleted and "Send project link" to every member. A viewer could tap them, and Frame.io then refused.

After: both menus follow the user's role on the project, as file menus already do (#42). A viewer or commenter sees notifications, Members and Collections. Rows the role allows appear once the role is known.

How

• FileAccess gets a project-level projectSettings flag. editor is no longer Full: it keeps every file action but not project settings.
• projectActionsFor(access) in ProjectSheets.kt turns the access into the sheet's rows. ProjectMenuSheet now wraps a stateless ProjectMenuContent, so the screenshot test can render it.
• The role is read only when the sheet opens, never per card, through FrameioRepository.fileAccess, which is cached per session. cachedFileAccess gives the sheet's first frame the cached value, so a second open doesn't jump. While the role is still loading, the sheet shows only the read-only rows. An unknown role, or a lookup that fails, still shows everything: the server has the last word.
• In FolderScreen, the top-bar ProjectActions.shares and ProjectActions.trash are null when the role can't use them.

Mapping, from Frame.io's Managing user permissions guide (project roles: full_access = "upload, manage, share, comment, view, download, manage settings, and invite users"; editor = everything except settings and invites; edit_only = "cannot share or download"; commenter = view and comment; viewer = view only). Restricted projects also follow the help center footnote "Edit & Share and Edit cannot make restricted projects".

Row	Shown for
Notifications	everyone (a local setting)
Members (list)	everyone (read-only list; the guide doesn't restrict viewing it)
Collections	everyone (viewing; the guide is silent, so the server decides)
Recently deleted	edit_only and up ("manage" files, which covers delete and restore)
Share links, Send project link	editor and up ("share")
Rename, Restricted, Archive/Restore, Delete	full_access, account owner/admin, workspace_admin ("manage settings")
any row, unknown role	shown

Not in this PR: the Members screen itself still shows its invite and role controls to everyone.

Checks

• :app:testDebugUnitTest --tests FileAccessTest and :app:lintDebug pass on the workstation (lint at 0). The new project_menu_viewer baseline was recorded from CI (Linux).
• New or changed UI has a Roborazzi screenshot (project_menu_viewer)
• Tried on a phone (with a viewer member on a shared project): not done yet, nothing is installed on the phone without the maintainer's OK

🤖 Generated with Claude Code