document.addEventListener('DOMContentLoaded', function() {
    // ⚠️ CHANGE 'password' BELOW to match your actual RSForm field name
    // Example: if your field is called 'access_code', use: '[name="form[access_code]"]'
    var passwordField = document.querySelector('[name="form[password]"]');
 
    if (passwordField) {
        // Function to check validity and show messages
        function checkPassword() {
            var passwordValue = passwordField.value.trim();
            // Regex: at least one letter, one number, min 8 chars, only letters & numbers
            var passwordPattern = /^(?=.*[A-Za-z])(?=.*\d)[A-Za-z\d]{8,}$/;
 
            // Remove previous message if any
            var oldMessage = document.querySelector('#rsform_error_password');
            if (oldMessage) oldMessage.remove();
 
            var messageSpan = document.createElement('span');
            messageSpan.id = 'rsform_error_password';
 
            if (passwordValue === '') {
                // Field empty, clear styling
                passwordField.classList.remove('valid', 'invalid');
                return false;
            } else if (!passwordPattern.test(passwordValue)) {
                // Invalid password
                messageSpan.className = 'formError';
                messageSpan.textContent = 'Password must include letters and numbers (min 8 characters).';
                passwordField.classList.remove('valid');
                passwordField.classList.add('invalid');
            } else {
                // Valid password
                messageSpan.className = 'formSuccess';
                messageSpan.textContent = 'Password looks good!';
                passwordField.classList.remove('invalid');
                passwordField.classList.add('valid');
            }
 
            // Insert message after the field
            passwordField.parentNode.insertBefore(messageSpan, passwordField.nextSibling);
        }
 
        // Events: live typing and leaving field
        passwordField.addEventListener('keyup', checkPassword);
        passwordField.addEventListener('blur', checkPassword);
 
        // Also validate on form submission
        var form = passwordField.closest('form');
        if (form) {
            form.addEventListener('submit', function(e) {
                var passwordValue = passwordField.value.trim();
                var passwordPattern = /^(?=.*[A-Za-z])(?=.*\d)[A-Za-z\d]{8,}$/;
 
                if (!passwordPattern.test(passwordValue)) {
                    checkPassword(); // Show message if invalid
                    passwordField.focus();
                    e.preventDefault(); // Stop submission
                    return false;
                }
            });
        }
    }
});

document.addEventListener('DOMContentLoaded', function() {
    var passwordField = document.querySelector('[name="form[password]"]'); // ⚠️ change field name if needed
    if (!passwordField) return;
 
    function checkPassword(showMessage = true) {
        var value = passwordField.value.trim();
 
        // Remove any old message
        var oldMsg = document.querySelector('#rsform_error_password'); // ⚠️ change error ID if renaming
        if (oldMsg) oldMsg.remove();
 
        // Empty field is allowed
        if (value === '') {
            passwordField.classList.remove('valid', 'invalid');
            return true;
        }
 
        // ⚠️ Change this number to set a different minimum password length
        var minLength = 8;  
        var longEnough = value.length >= minLength;
 
        // Validation checks
        var hasLetter  = /[A-Za-z]/.test(value);
        var hasNumber  = /\d/.test(value);
        var hasSpecial = /[@$!%*?&]/.test(value);
        var validChars = /^[A-Za-z0-9@$!%*?&]+$/.test(value);
 
        var isValid = hasLetter && hasNumber && hasSpecial && validChars && longEnough;
 
        // Only show message if password is long enough
        if (showMessage && longEnough) {
            var msg = document.createElement('span');
            msg.id = 'rsform_error_password';
            msg.style.display = 'block';
            msg.style.marginTop = '4px';
            msg.style.fontSize = '0.9em';
            msg.style.color = isValid ? 'green' : 'red';
 
            msg.textContent = isValid
                ? 'Password looks good!'
                : `Password must include letters, numbers and a special character (@$!%*?&) and be at least ${minLength} characters.`;
 
            passwordField.parentNode.insertBefore(msg, passwordField.nextSibling);
        }
 
        // Add/remove classes for styling
        if (longEnough) {
            passwordField.classList.toggle('valid', isValid);
            passwordField.classList.toggle('invalid', !isValid);
        } else {
            passwordField.classList.remove('valid', 'invalid');
        }
 
        return isValid;
    }
 
    // Live feedback
    passwordField.addEventListener('keyup', () => checkPassword());
    passwordField.addEventListener('blur', () => checkPassword());
 
    // Validate before submission
    var form = passwordField.closest('form');
    if (form) {
        form.addEventListener('submit', function(e) {
            if (passwordField.value.trim() === '') return true;
            if (!checkPassword(false)) {
                checkPassword(true);
                passwordField.focus();
                e.preventDefault();
                return false;
            }
        }, true);
    }
});