Add company dashboard improvements and upload/auth features

app/templates/company/dashboard.html

@@ -29,9 +29,6 @@
                   <td class="text-end">
                     <div class="d-inline-flex gap-2">
                       <a class="btn btn-ink btn-sm" href="{{ url_for('company.playlist_detail', playlist_id=p.id) }}">Open</a>
-                      <form method="post" action="{{ url_for('company.delete_playlist', playlist_id=p.id) }}" onsubmit="return confirm('Delete playlist? This will remove all items and unassign it from displays.');">
-                        <button class="btn btn-outline-danger btn-sm" type="submit">Delete</button>
-                      </form>
                     </div>
                   </td>
                 </tr>
@@ -59,6 +56,7 @@
                   <div class="display-preview">
                     <iframe
                       title="Preview — {{ d.name }}"
+                      data-display-id="{{ d.id }}"
                       src="{{ url_for('display.display_player', token=d.token) }}?preview=1"
                       loading="lazy"
                       referrerpolicy="no-referrer"
@@ -173,6 +171,22 @@
         return data.display;
       }
 
+      function refreshPreviewIframe(displayId) {
+        const iframe = document.querySelector(`iframe[data-display-id="${displayId}"]`);
+        if (!iframe || !iframe.src) return;
+        try {
+          const u = new URL(iframe.src, window.location.origin);
+          // Ensure preview flag is present (and bust cache).
+          u.searchParams.set('preview', '1');
+          u.searchParams.set('_ts', String(Date.now()));
+          iframe.src = u.toString();
+        } catch (e) {
+          // Fallback: naive cache buster
+          const sep = iframe.src.includes('?') ? '&' : '?';
+          iframe.src = `${iframe.src}${sep}_ts=${Date.now()}`;
+        }
+      }
+
       // Playlist auto-save
       document.querySelectorAll('.js-playlist-select').forEach((sel) => {
         sel.addEventListener('change', async () => {
@@ -182,6 +196,7 @@
           try {
             await postDisplayUpdate(displayId, { playlist_id: playlistId });
             showToast('Playlist saved', 'text-bg-success');
+            refreshPreviewIframe(displayId);
           } catch (e) {
             showToast(e && e.message ? e.message : 'Save failed', 'text-bg-danger');
           } finally {