@elementor/editor-canvas 4.4.0-1137 → 4.4.0-1139

package/dist/index.mjs

@@ -1750,6 +1750,7 @@ import { __ } from "@wordpress/i18n";
 import { getAllDescendants } from "@elementor/editor-elements";
 var FORM_ELEMENT_TYPE = "e-form";
 var FORM_HIDDEN_FIELD_ELEMENT_TYPE = "e-form-hidden";
+var FORM_HONEYPOT_ELEMENT_TYPE = "e-form-honeypot";
 var FORM_FIELD_ELEMENT_TYPES = /* @__PURE__ */ new Set([
   "e-form-input",
   "e-form-textarea",
@@ -1761,11 +1762,31 @@ var FORM_FIELD_ELEMENT_TYPES = /* @__PURE__ */ new Set([
   "e-form-file-upload",
   "e-form-date-picker",
   "e-form-time-picker",
-  FORM_HIDDEN_FIELD_ELEMENT_TYPE
+  FORM_HIDDEN_FIELD_ELEMENT_TYPE,
+  FORM_HONEYPOT_ELEMENT_TYPE
 ]);
 function getArgsElementType(args) {
   return args.model?.widgetType || args.model?.elType;
 }
+function hasModelElementType(model, type) {
+  if (!model) {
+    return false;
+  }
+  if ((model.widgetType || model.elType) === type) {
+    return true;
+  }
+  return (model.elements ?? []).some((child) => hasModelElementType(child, type));
+}
+function getFormContainer(element) {
+  let current = element;
+  while (current) {
+    if (getElementType(current) === FORM_ELEMENT_TYPE) {
+      return current;
+    }
+    current = current.parent;
+  }
+  return void 0;
+}
 function getElementType(element) {
   return element?.model.get("widgetType") || element?.model.get("elType");
 }
@@ -1902,25 +1923,108 @@ function initHiddenFieldHint() {
   });
 }
 
-// src/form-structure/prevent-form-nesting-commands.ts
+// src/form-structure/honeypot-hint.ts
 import { notify as notify3 } from "@elementor/editor-notifications";
-import { blockCommand as blockCommand2 } from "@elementor/editor-v1-adapters";
+import { registerDataHook as registerDataHook4 } from "@elementor/editor-v1-adapters";
 import { __ as __3 } from "@wordpress/i18n";
+var MOVE_COMMAND2 = "document/elements/move";
+var notificationCounter2 = 0;
+function createHoneypotNotification() {
+  return {
+    type: "default",
+    message: __3("Honeypot added - invisible on your form. Reorder it in the Structure panel.", "elementor"),
+    id: `honeypot-added-${++notificationCounter2}`
+  };
+}
+function initHoneypotHint() {
+  registerDataHook4("after", "document/elements/create", (args, _result, options) => {
+    if (options?.commandsCurrentTrace?.includes(MOVE_COMMAND2)) {
+      return;
+    }
+    if (getArgsElementType(args) === FORM_HONEYPOT_ELEMENT_TYPE) {
+      notify3(createHoneypotNotification());
+    }
+  });
+}
+
+// src/form-structure/prevent-duplicate-honeypot-commands.ts
+import { getAllDescendants as getAllDescendants2 } from "@elementor/editor-elements";
+import { notify as notify4 } from "@elementor/editor-notifications";
+import { blockCommand as blockCommand2, registerDataHook as registerDataHook5 } from "@elementor/editor-v1-adapters";
+import { __ as __4 } from "@wordpress/i18n";
+var MOVE_COMMAND3 = "document/elements/move";
+var DUPLICATE_HONEYPOT_ALERT = {
+  type: "default",
+  message: __4("Only one Honeypot can be added per form.", "elementor"),
+  id: "duplicate-honeypot-blocked"
+};
+function initDuplicateHoneypotPrevention() {
+  registerDataHook5("dependency", "document/elements/create", (args, options) => {
+    return !blockHoneypotCreate(args, options);
+  });
+  blockCommand2({
+    command: "document/elements/move",
+    condition: blockHoneypotMove
+  });
+}
+function blockHoneypotCreate(args, options) {
+  if (options?.commandsCurrentTrace?.includes(MOVE_COMMAND3)) {
+    return false;
+  }
+  if (!hasModelElementType(args.model, FORM_HONEYPOT_ELEMENT_TYPE)) {
+    return false;
+  }
+  const containers = args.containers ?? [args.container];
+  if (containers.some((container) => formHasHoneypot(getFormContainer(container)))) {
+    handleBlockedHoneypot();
+    return true;
+  }
+  return false;
+}
+function blockHoneypotMove(args) {
+  const { containers = [args.container], target } = args;
+  const movedContainers = containers.filter((container) => !!container);
+  if (!movedContainers.some((container) => hasElementType(container, FORM_HONEYPOT_ELEMENT_TYPE))) {
+    return false;
+  }
+  const movedElements = new Set(movedContainers.flatMap((container) => getAllDescendants2(container)));
+  if (formHasHoneypot(getFormContainer(target), movedElements)) {
+    handleBlockedHoneypot();
+    return true;
+  }
+  return false;
+}
+function formHasHoneypot(form, excluded = /* @__PURE__ */ new Set()) {
+  if (!form) {
+    return false;
+  }
+  return getAllDescendants2(form).some(
+    (element) => !excluded.has(element) && getElementType(element) === FORM_HONEYPOT_ELEMENT_TYPE
+  );
+}
+function handleBlockedHoneypot() {
+  notify4(DUPLICATE_HONEYPOT_ALERT);
+}
+
+// src/form-structure/prevent-form-nesting-commands.ts
+import { notify as notify5 } from "@elementor/editor-notifications";
+import { blockCommand as blockCommand3 } from "@elementor/editor-v1-adapters";
+import { __ as __5 } from "@wordpress/i18n";
 var FORM_NESTING_ALERT = {
   type: "default",
-  message: __3("Forms can't be nested. Create separate forms instead.", "elementor"),
+  message: __5("Forms can't be nested. Create separate forms instead.", "elementor"),
   id: "form-nesting-blocked"
 };
 function initFormNestingPrevention() {
-  blockCommand2({
+  blockCommand3({
     command: "document/elements/create",
     condition: blockFormCreate
   });
-  blockCommand2({
+  blockCommand3({
     command: "document/elements/move",
     condition: blockFormMove
   });
-  blockCommand2({
+  blockCommand3({
     command: "document/elements/paste",
     condition: blockFormPaste
   });
@@ -1964,7 +2068,7 @@ function blockFormPaste(args) {
   return false;
 }
 function handleBlockedFormField2() {
-  notify3(FORM_NESTING_ALERT);
+  notify5(FORM_NESTING_ALERT);
 }
 
 // src/settings-transformers-registry.ts
@@ -3422,7 +3526,7 @@ import {
   stringPropTypeUtil as stringPropTypeUtil2
 } from "@elementor/editor-props";
 import { __privateRunCommandSync as runCommandSync, getCurrentEditMode, undoable } from "@elementor/editor-v1-adapters";
-import { __ as __4 } from "@wordpress/i18n";
+import { __ as __6 } from "@wordpress/i18n";
 
 // src/legacy/replacements/base.ts
 var TRIGGER_TIMING = {
@@ -3844,7 +3948,7 @@ var InlineEditingReplacement = class extends ReplacementBase {
       {
         title: getElementLabel(this.id),
         // translators: %s is the name of the property that was edited.
-        subtitle: __4("%s edited", "elementor").replace(
+        subtitle: __6("%s edited", "elementor").replace(
           "%s",
           this.getInlineEditablePropTypeKey() ?? "Inline editing"
         ),
@@ -5616,15 +5720,15 @@ import {
   getAnchoredDescendantId,
   isElementAnchored
 } from "@elementor/editor-elements";
-import { notify as notify4 } from "@elementor/editor-notifications";
-import { blockCommand as blockCommand3 } from "@elementor/editor-v1-adapters";
-import { __ as __5 } from "@wordpress/i18n";
+import { notify as notify6 } from "@elementor/editor-notifications";
+import { blockCommand as blockCommand4 } from "@elementor/editor-v1-adapters";
+import { __ as __7 } from "@wordpress/i18n";
 function initLinkInLinkPrevention() {
-  blockCommand3({
+  blockCommand4({
     command: "document/elements/paste",
     condition: blockLinkInLinkPaste
   });
-  blockCommand3({
+  blockCommand4({
     command: "document/elements/move",
     condition: blockLinkInLinkMove
   });
@@ -5652,7 +5756,7 @@ function blockLinkInLinkPaste(args) {
   const sourceElements = data.clipboard.elements;
   const notification = {
     type: "default",
-    message: __5(
+    message: __7(
       "To paste a link to this element, first remove the link from it's parent container.",
       "elementor"
     ),
@@ -5661,7 +5765,7 @@ function blockLinkInLinkPaste(args) {
   };
   const blocked = shouldBlock(sourceElements, targetElements);
   if (blocked) {
-    notify4(notification);
+    notify6(notification);
   }
   return blocked;
 }
@@ -5671,13 +5775,13 @@ function blockLinkInLinkMove(args) {
   const targetElement = target;
   const notification = {
     type: "default",
-    message: __5("To drag a link to this element, first remove the link from it's parent container.", "elementor"),
+    message: __7("To drag a link to this element, first remove the link from it's parent container.", "elementor"),
     id: "move-in-link-blocked",
     additionalActionProps: [learnMoreActionProps]
   };
   const isBlocked = shouldBlock(sourceElements, [targetElement]);
   if (isBlocked) {
-    notify4(notification);
+    notify6(notification);
   }
   return isBlocked;
 }
@@ -5702,14 +5806,14 @@ import { getContainer as getContainer5, getElementSetting, updateElementSettings
 import { classesPropTypeUtil } from "@elementor/editor-props";
 import {
   __privateListenTo as listenTo5,
-  blockCommand as blockCommand4,
+  blockCommand as blockCommand5,
   commandStartEvent
 } from "@elementor/editor-v1-adapters";
 
 // src/utils/command-utils.ts
 import { getElementLabel as getElementLabel2, getWidgetsCache as getWidgetsCache7 } from "@elementor/editor-elements";
 import { CLASSES_PROP_KEY } from "@elementor/editor-props";
-import { __ as __6 } from "@wordpress/i18n";
+import { __ as __8 } from "@wordpress/i18n";
 function hasAtomicWidgets(args) {
   const { containers = [args.container] } = args;
   return containers.some(isAtomicWidget);
@@ -5745,7 +5849,7 @@ function getClipboardElements(storageKey = "clipboard") {
   }
 }
 function getTitleForContainers(containers) {
-  return containers.length > 1 ? __6("Elements", "elementor") : getElementLabel2(containers[0].id);
+  return containers.length > 1 ? __8("Elements", "elementor") : getElementLabel2(containers[0].id);
 }
 
 // src/style-commands/undoable-actions/paste-element-style.ts
@@ -5757,7 +5861,7 @@ import {
 } from "@elementor/editor-elements";
 import { ELEMENTS_STYLES_RESERVED_LABEL } from "@elementor/editor-styles-repository";
 import { undoable as undoable2 } from "@elementor/editor-v1-adapters";
-import { __ as __7 } from "@wordpress/i18n";
+import { __ as __9 } from "@wordpress/i18n";
 var undoablePasteElementStyle = () => undoable2(
   {
     do: ({ containers, newStyle }) => {
@@ -5827,14 +5931,14 @@ var undoablePasteElementStyle = () => undoable2(
   },
   {
     title: ({ containers }) => getTitleForContainers(containers),
-    subtitle: __7("Style Pasted", "elementor")
+    subtitle: __9("Style Pasted", "elementor")
   }
 );
 
 // src/style-commands/paste-style.ts
 function initPasteStyleCommand() {
   const pasteElementStyleCommand = undoablePasteElementStyle();
-  blockCommand4({
+  blockCommand5({
     command: "document/elements/paste-style",
     condition: hasAtomicWidgets
   });
@@ -5892,7 +5996,7 @@ function pasteClasses(containers, classes) {
 // src/style-commands/reset-style.ts
 import {
   __privateListenTo as listenTo6,
-  blockCommand as blockCommand5,
+  blockCommand as blockCommand6,
   commandStartEvent as commandStartEvent2
 } from "@elementor/editor-v1-adapters";
 
@@ -5900,7 +6004,7 @@ import {
 import { createElementStyle as createElementStyle3, deleteElementStyle as deleteElementStyle2, getElementStyles as getElementStyles3 } from "@elementor/editor-elements";
 import { ELEMENTS_STYLES_RESERVED_LABEL as ELEMENTS_STYLES_RESERVED_LABEL2 } from "@elementor/editor-styles-repository";
 import { undoable as undoable3 } from "@elementor/editor-v1-adapters";
-import { __ as __8 } from "@wordpress/i18n";
+import { __ as __10 } from "@wordpress/i18n";
 var undoableResetElementStyle = () => undoable3(
   {
     do: ({ containers }) => {
@@ -5938,14 +6042,14 @@ var undoableResetElementStyle = () => undoable3(
   },
   {
     title: ({ containers }) => getTitleForContainers(containers),
-    subtitle: __8("Style Reset", "elementor")
+    subtitle: __10("Style Reset", "elementor")
   }
 );
 
 // src/style-commands/reset-style.ts
 function initResetStyleCommand() {
   const resetElementStyles = undoableResetElementStyle();
-  blockCommand5({
+  blockCommand6({
     command: "document/elements/reset-style",
     condition: hasAtomicWidgets
   });
@@ -5977,6 +6081,8 @@ function init() {
   initFormNestingPrevention();
   initFormAncestorEnforcement();
   initHiddenFieldHint();
+  initDuplicateHoneypotPrevention();
+  initHoneypotHint();
   initViewReplacements();
   initLegacyViews();
   initSettingsTransformers();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@elementor/editor-canvas",
   "description": "Elementor Editor Canvas",
-  "version": "4.4.0-1137",
+  "version": "4.4.0-1139",
   "private": false,
   "author": "Elementor Team",
   "homepage": "https://elementor.com/",
@@ -37,26 +37,26 @@
     "react-dom": "^18.3.1"
   },
   "dependencies": {
-    "@elementor/editor": "4.4.0-1137",
-    "@elementor/editor-controls": "4.4.0-1137",
-    "@elementor/editor-documents": "4.4.0-1137",
-    "@elementor/editor-elements": "4.4.0-1137",
-    "@elementor/editor-interactions": "4.4.0-1137",
-    "@elementor/editor-mcp": "4.4.0-1137",
-    "@elementor/editor-notifications": "4.4.0-1137",
-    "@elementor/editor-props": "4.4.0-1137",
-    "@elementor/editor-responsive": "4.4.0-1137",
-    "@elementor/editor-styles": "4.4.0-1137",
-    "@elementor/editor-styles-repository": "4.4.0-1137",
-    "@elementor/editor-ui": "4.4.0-1137",
-    "@elementor/editor-v1-adapters": "4.4.0-1137",
-    "@elementor/events": "4.4.0-1137",
-    "@elementor/http-client": "4.4.0-1137",
-    "@elementor/schema": "4.4.0-1137",
-    "@elementor/twing": "4.4.0-1137",
+    "@elementor/editor": "4.4.0-1139",
+    "@elementor/editor-controls": "4.4.0-1139",
+    "@elementor/editor-documents": "4.4.0-1139",
+    "@elementor/editor-elements": "4.4.0-1139",
+    "@elementor/editor-interactions": "4.4.0-1139",
+    "@elementor/editor-mcp": "4.4.0-1139",
+    "@elementor/editor-notifications": "4.4.0-1139",
+    "@elementor/editor-props": "4.4.0-1139",
+    "@elementor/editor-responsive": "4.4.0-1139",
+    "@elementor/editor-styles": "4.4.0-1139",
+    "@elementor/editor-styles-repository": "4.4.0-1139",
+    "@elementor/editor-ui": "4.4.0-1139",
+    "@elementor/editor-v1-adapters": "4.4.0-1139",
+    "@elementor/events": "4.4.0-1139",
+    "@elementor/http-client": "4.4.0-1139",
+    "@elementor/schema": "4.4.0-1139",
+    "@elementor/twing": "4.4.0-1139",
     "@elementor/ui": "1.41.3",
-    "@elementor/utils": "4.4.0-1137",
-    "@elementor/wp-media": "4.4.0-1137",
+    "@elementor/utils": "4.4.0-1139",
+    "@elementor/wp-media": "4.4.0-1139",
     "@floating-ui/react": "^0.27.5",
     "@wordpress/i18n": "^5.13.0",
     "dompurify": "^3.2.6"

package/src/form-structure/__tests__/honeypot-hint.test.ts

@@ -0,0 +1,137 @@
+import { createHooksRegistry, setupHooksRegistry } from 'test-utils';
+import { notify } from '@elementor/editor-notifications';
+
+import { initHoneypotHint } from '../honeypot-hint';
+
+jest.mock( '@elementor/editor-notifications', () => ( {
+	notify: jest.fn(),
+} ) );
+
+const CREATE_COMMAND = 'document/elements/create';
+const MOVE_COMMAND = 'document/elements/move';
+const HONEYPOT_TYPE = 'e-form-honeypot';
+
+describe( 'honeypot hint', () => {
+	const hooksRegistry = createHooksRegistry();
+
+	beforeEach( () => {
+		jest.mocked( notify ).mockClear();
+		setupHooksRegistry( hooksRegistry );
+		initHoneypotHint();
+	} );
+
+	it( 'should notify when a honeypot is added', () => {
+		// Arrange
+		const hook = hooksRegistry.getByCommand( CREATE_COMMAND );
+
+		// Act
+		hook?.apply( { model: { widgetType: HONEYPOT_TYPE } } );
+
+		// Assert
+		expect( notify ).toHaveBeenCalledWith(
+			expect.objectContaining( {
+				message: 'Honeypot added - invisible on your form. Reorder it in the Structure panel.',
+			} )
+		);
+	} );
+
+	it( 'should use unique notification ids for back-to-back adds (not collapsed by the notification system)', () => {
+		// Arrange
+		const hook = hooksRegistry.getByCommand( CREATE_COMMAND );
+
+		// Act
+		hook?.apply( { model: { widgetType: HONEYPOT_TYPE } } );
+		hook?.apply( { model: { widgetType: HONEYPOT_TYPE } } );
+
+		// Assert
+		expect( notify ).toHaveBeenCalledTimes( 2 );
+		const firstCallId = jest.mocked( notify ).mock.calls[ 0 ][ 0 ].id;
+		const secondCallId = jest.mocked( notify ).mock.calls[ 1 ][ 0 ].id;
+		expect( firstCallId ).not.toBe( secondCallId );
+	} );
+
+	it( 'should notify again after remove and re-add (simulated by separate create calls)', () => {
+		// Arrange
+		const hook = hooksRegistry.getByCommand( CREATE_COMMAND );
+
+		// Act - first add
+		hook?.apply( { model: { widgetType: HONEYPOT_TYPE } } );
+
+		// simulate removal (no hook for delete affects this)
+
+		// Act - re-add
+		hook?.apply( { model: { widgetType: HONEYPOT_TYPE } } );
+
+		// Assert
+		expect( notify ).toHaveBeenCalledTimes( 2 );
+	} );
+
+	it( 'should not notify when another element type is created', () => {
+		// Arrange
+		const hook = hooksRegistry.getByCommand( CREATE_COMMAND );
+
+		// Act
+		hook?.apply( { model: { widgetType: 'e-form-input' } } );
+
+		// Assert
+		expect( notify ).not.toHaveBeenCalled();
+	} );
+
+	it( 'should not notify when the honeypot is created as part of a move', () => {
+		// Arrange
+		const hook = hooksRegistry.getByCommand( CREATE_COMMAND );
+		const eWindow = window as unknown as { $e: { commands?: { currentTrace?: string[] } } };
+		eWindow.$e.commands = { currentTrace: [ MOVE_COMMAND, CREATE_COMMAND ] };
+
+		// Act
+		hook?.apply( { model: { widgetType: HONEYPOT_TYPE } } );
+
+		// Assert
+		expect( notify ).not.toHaveBeenCalled();
+	} );
+
+	it( 'should not notify on selection (selection does not trigger create command)', () => {
+		// Arrange - selection uses a different command path, not document/elements/create
+		const hook = hooksRegistry.getByCommand( CREATE_COMMAND );
+
+		// Act - no create call is made for selection
+		// Selection triggers commands like document/elements/toggle-selection, not create
+
+		// Assert
+		expect( hook ).toBeDefined();
+		expect( notify ).not.toHaveBeenCalled();
+	} );
+
+	it( 'should notify on paste when it triggers create (current behavior: paste triggers toast)', () => {
+		// Arrange
+		const hook = hooksRegistry.getByCommand( CREATE_COMMAND );
+
+		// Act - paste internally calls create, so it will trigger the notification
+		hook?.apply( { model: { widgetType: HONEYPOT_TYPE } } );
+
+		// Assert
+		expect( notify ).toHaveBeenCalledTimes( 1 );
+	} );
+
+	it( 'should notify on duplicate when it triggers create (current behavior: duplicate triggers toast)', () => {
+		// Arrange
+		const hook = hooksRegistry.getByCommand( CREATE_COMMAND );
+
+		// Act - duplicate internally calls create, so it will trigger the notification
+		hook?.apply( { model: { widgetType: HONEYPOT_TYPE } } );
+
+		// Assert
+		expect( notify ).toHaveBeenCalledTimes( 1 );
+	} );
+
+	it( 'should notify on undo of delete (undo-delete triggers create, so toast shows)', () => {
+		// Arrange
+		const hook = hooksRegistry.getByCommand( CREATE_COMMAND );
+
+		// Act - undo of a delete restores via create command
+		hook?.apply( { model: { widgetType: HONEYPOT_TYPE } } );
+
+		// Assert
+		expect( notify ).toHaveBeenCalledTimes( 1 );
+	} );
+} );

package/src/form-structure/__tests__/prevent-duplicate-honeypot-commands.test.ts

@@ -0,0 +1,133 @@
+import { createHooksRegistry, setupHooksRegistry } from 'test-utils';
+import { type V1Element } from '@elementor/editor-elements';
+import { notify } from '@elementor/editor-notifications';
+
+import { initDuplicateHoneypotPrevention } from '../prevent-duplicate-honeypot-commands';
+
+jest.mock( '@elementor/editor-notifications', () => ( {
+	notify: jest.fn(),
+} ) );
+
+const CREATE_COMMAND = 'document/elements/create';
+const MOVE_COMMAND = 'document/elements/move';
+const HONEYPOT_TYPE = 'e-form-honeypot';
+
+function createElement( type: string, children: V1Element[] = [] ): V1Element {
+	const element = {
+		id: type,
+		model: { get: () => type },
+		children,
+	} as unknown as V1Element;
+
+	children.forEach( ( child ) => {
+		child.parent = element;
+	} );
+
+	return element;
+}
+
+describe( 'prevent duplicate honeypot', () => {
+	const hooksRegistry = createHooksRegistry();
+
+	const isAllowed = ( command: string, args: unknown ) => hooksRegistry.getByCommand( command )?.apply( args );
+
+	beforeEach( () => {
+		jest.mocked( notify ).mockClear();
+		setupHooksRegistry( hooksRegistry );
+		initDuplicateHoneypotPrevention();
+	} );
+
+	it( 'should allow adding the first honeypot to a form', () => {
+		// Arrange
+		const flexbox = createElement( 'e-flexbox' );
+		createElement( 'e-form', [ flexbox ] );
+
+		// Act
+		const result = isAllowed( CREATE_COMMAND, { container: flexbox, model: { widgetType: HONEYPOT_TYPE } } );
+
+		// Assert
+		expect( result ).toBe( true );
+		expect( notify ).not.toHaveBeenCalled();
+	} );
+
+	it( 'should block a second honeypot in the same form and show a toast', () => {
+		// Arrange
+		const flexbox = createElement( 'e-flexbox' );
+		createElement( 'e-form', [ createElement( HONEYPOT_TYPE ), flexbox ] );
+
+		// Act
+		const result = isAllowed( CREATE_COMMAND, { container: flexbox, model: { widgetType: HONEYPOT_TYPE } } );
+
+		// Assert
+		expect( result ).toBe( false );
+		expect( notify ).toHaveBeenCalledWith(
+			expect.objectContaining( { message: 'Only one Honeypot can be added per form.' } )
+		);
+	} );
+
+	it( 'should block pasting a container that holds a honeypot into a form that already has one', () => {
+		// Arrange
+		const form = createElement( 'e-form', [ createElement( HONEYPOT_TYPE ) ] );
+
+		// Act
+		const result = isAllowed( CREATE_COMMAND, {
+			container: form,
+			model: { elType: 'e-flexbox', elements: [ { widgetType: HONEYPOT_TYPE } ] },
+		} );
+
+		// Assert
+		expect( result ).toBe( false );
+	} );
+
+	it( 'should allow a honeypot in a second form on the same page', () => {
+		// Arrange
+		const secondForm = createElement( 'e-form' );
+		createElement( 'document', [ createElement( 'e-form', [ createElement( HONEYPOT_TYPE ) ] ), secondForm ] );
+
+		// Act
+		const result = isAllowed( CREATE_COMMAND, { container: secondForm, model: { widgetType: HONEYPOT_TYPE } } );
+
+		// Assert
+		expect( result ).toBe( true );
+	} );
+
+	it( 'should ignore the create that runs as part of a move', () => {
+		// Arrange
+		const form = createElement( 'e-form', [ createElement( HONEYPOT_TYPE ) ] );
+		const eWindow = window as unknown as { $e: { commands?: { currentTrace?: string[] } } };
+		eWindow.$e.commands = { currentTrace: [ MOVE_COMMAND, CREATE_COMMAND ] };
+
+		// Act
+		const result = isAllowed( CREATE_COMMAND, { container: form, model: { widgetType: HONEYPOT_TYPE } } );
+
+		// Assert
+		expect( result ).toBe( true );
+	} );
+
+	it( 'should allow reordering a honeypot inside its own form', () => {
+		// Arrange
+		const honeypot = createElement( HONEYPOT_TYPE );
+		const flexbox = createElement( 'e-flexbox' );
+		createElement( 'e-form', [ honeypot, flexbox ] );
+
+		// Act
+		const result = isAllowed( MOVE_COMMAND, { containers: [ honeypot ], target: flexbox } );
+
+		// Assert
+		expect( result ).toBe( true );
+	} );
+
+	it( 'should block moving a honeypot into another form that already has one', () => {
+		// Arrange
+		const honeypot = createElement( HONEYPOT_TYPE );
+		const targetForm = createElement( 'e-form', [ createElement( HONEYPOT_TYPE ) ] );
+		createElement( 'document', [ createElement( 'e-form', [ honeypot ] ), targetForm ] );
+
+		// Act
+		const result = isAllowed( MOVE_COMMAND, { containers: [ honeypot ], target: targetForm } );
+
+		// Assert
+		expect( result ).toBe( false );
+		expect( notify ).toHaveBeenCalledTimes( 1 );
+	} );
+} );

package/src/form-structure/honeypot-hint.ts

@@ -0,0 +1,29 @@
+import { type NotificationData, notify } from '@elementor/editor-notifications';
+import { type HookOptions, registerDataHook } from '@elementor/editor-v1-adapters';
+import { __ } from '@wordpress/i18n';
+
+import { type CreateArgs, FORM_HONEYPOT_ELEMENT_TYPE, getArgsElementType } from './utils';
+
+const MOVE_COMMAND = 'document/elements/move';
+
+let notificationCounter = 0;
+
+function createHoneypotNotification(): NotificationData {
+	return {
+		type: 'default',
+		message: __( 'Honeypot added - invisible on your form. Reorder it in the Structure panel.', 'elementor' ),
+		id: `honeypot-added-${ ++notificationCounter }`,
+	};
+}
+
+export function initHoneypotHint() {
+	registerDataHook( 'after', 'document/elements/create', ( args: CreateArgs, _result, options?: HookOptions ) => {
+		if ( options?.commandsCurrentTrace?.includes( MOVE_COMMAND ) ) {
+			return;
+		}
+
+		if ( getArgsElementType( args ) === FORM_HONEYPOT_ELEMENT_TYPE ) {
+			notify( createHoneypotNotification() );
+		}
+	} );
+}