A SvelteKit file (named +server.js) that runs only on your server and answers HTTP requests. It's where you create checkout sessions and receive webhooks, so your secret keys never reach the browser.