Simplify output; remove role information

Author: mwaskom

modal/cli/token.py

@@ -91,16 +91,6 @@ async def identity():
 
     if resp.HasField("user_identity"):
         console.print(f"[bold]User:[/bold] {resp.user_identity.username} [dim]({resp.user_identity.user_id})[/dim]")
-
-        role_map = {
-            api_pb2.MEMBER_ROLE_USER: "User",
-            api_pb2.MEMBER_ROLE_MANAGER: "Manager",
-            api_pb2.MEMBER_ROLE_OWNER: "Owner",
-        }
-        if role_display := role_map.get(resp.member_role):
-            if resp.is_admin:
-                role_display += " / Platform Admin"
-            console.print(f"[bold]Role:[/bold] {role_display}")
     elif resp.HasField("service_user_identity"):
         service = resp.service_user_identity
         console.print(f"[bold]Service User:[/bold] {service.service_user_name} [dim]({service.service_user_id})[/dim]")

modal_proto/api.proto

@@ -164,13 +164,6 @@ enum GPUType {
   GPU_TYPE_H200 = 12;
 }
 
-enum MemberRole {
-  MEMBER_ROLE_UNSPECIFIED = 0;
-  MEMBER_ROLE_USER = 1;
-  MEMBER_ROLE_MANAGER = 2;
-  MEMBER_ROLE_OWNER = 3;
-}
-
 enum ObjectCreationType {
   OBJECT_CREATION_TYPE_UNSPECIFIED = 0;  // just lookup
   OBJECT_CREATION_TYPE_CREATE_IF_MISSING = 1;
@@ -3340,18 +3333,14 @@ message TokenIdentityGetResponse {
   string workspace_id = 2;
   string workspace_name = 3;
 
-  oneof principal {
+  oneof identity {
     UserIdentity user_identity = 4;
     ServiceUserIdentity service_user_identity = 5;
   }
 
-  // Role and permissions
-  MemberRole member_role = 6;  // OWNER/MANAGER/USER (for users only)
-  bool is_admin = 7;  // Modal platform admin status
-
   // Token metadata
-  google.protobuf.Timestamp created_at = 8;
-  google.protobuf.Timestamp expires_at = 9;
+  google.protobuf.Timestamp created_at = 6;
+  google.protobuf.Timestamp expires_at = 7;
 }
 
 message TunnelData {

test/cli_test.py

@@ -169,8 +169,6 @@ def test_token_identity(servicer, set_env_client):
     assert "ak-test123" in res.stdout
     assert "test-workspace" in res.stdout
     assert "test-user" in res.stdout
-    assert "Owner" in res.stdout
-    assert "Platform Admin" not in res.stdout
 
 
 def test_token_identity_from_env(servicer, set_env_client, monkeypatch):