document.addEventListener('DOMContentLoaded', function() {
    // ⚠️ CHANGE 'password' BELOW to match your actual RSForm field name
    // Example: if your field is called 'access_code', use: '[name="form[access_code]"]'
    var passwordField = document.querySelector('[name="form[password]"]');
 
    if (passwordField) {
        // Function to check validity and show messages
        function checkPassword() {
            var passwordValue = passwordField.value.trim();
            // Regex: at least one letter, one number, min 8 chars, only letters & numbers
            var passwordPattern = /^(?=.*[A-Za-z])(?=.*\d)[A-Za-z\d]{8,}$/;
 
            // Remove previous message if any
            var oldMessage = document.querySelector('#rsform_error_password');
            if (oldMessage) oldMessage.remove();
 
            var messageSpan = document.createElement('span');
            messageSpan.id = 'rsform_error_password';
 
            if (passwordValue === '') {
                // Field empty, clear styling
                passwordField.classList.remove('valid', 'invalid');
                return false;
            } else if (!passwordPattern.test(passwordValue)) {
                // Invalid password
                messageSpan.className = 'formError';
                messageSpan.textContent = 'Password must include letters and numbers (min 8 characters).';
                passwordField.classList.remove('valid');
                passwordField.classList.add('invalid');
            } else {
                // Valid password
                messageSpan.className = 'formSuccess';
                messageSpan.textContent = 'Password looks good!';
                passwordField.classList.remove('invalid');
                passwordField.classList.add('valid');
            }
 
            // Insert message after the field
            passwordField.parentNode.insertBefore(messageSpan, passwordField.nextSibling);
        }
 
        // Events: live typing and leaving field
        passwordField.addEventListener('keyup', checkPassword);
        passwordField.addEventListener('blur', checkPassword);
 
        // Also validate on form submission
        var form = passwordField.closest('form');
        if (form) {
            form.addEventListener('submit', function(e) {
                var passwordValue = passwordField.value.trim();
                var passwordPattern = /^(?=.*[A-Za-z])(?=.*\d)[A-Za-z\d]{8,}$/;
 
                if (!passwordPattern.test(passwordValue)) {
                    checkPassword(); // Show message if invalid
                    passwordField.focus();
                    e.preventDefault(); // Stop submission
                    return false;
                }
            });
        }
    }
});