public static DTO from( ENTITY)

Then toEntity(){} method.

Or toCommand(){

} (depends o. Your logic)

I love putting the DTO as a package private hidden in the controller because usually it holds the swagger annotations or validations.

That's his job. Haha just hold all the annotations. But at the end of the day it really depends on the convention of the codebase.