Decoupling Business Logic from HTTP Layers

Controllers should orchestrate, not implement domain rules.

Recommended flow

Controller -> FormRequest -> Service -> Repository -> Model

Example dependency boundary

public function __construct(private readonly OrderService $orderService) {}

Keep mutation rules in services so they can be tested without HTTP context.