feat: new chain

app/Telegram/Middleware/OfficialOnly.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Telegram\Middleware;
+
+use App\Telegram\TelegramBotContext;
+use SergiX44\Nutgram\Nutgram;
+
+/** Blocks /transfer (and similar) on agent bots. */
+class OfficialOnly
+{
+    public function __construct(
+        private readonly TelegramBotContext $context,
+    ) {}
+
+    public function __invoke(Nutgram $bot, callable $next): mixed
+    {
+        if (! $this->context->isOfficial()) {
+            $bot->sendMessage('⛔ /transfer 仅限官方机器人使用');
+
+            return null;
+        }
+
+        return $next($bot);
+    }
+}