souryaneelpal/whistledrop ? reverse-engineered prompt

Build me a backend for anonymous whistleblowing reports.

People should be able to send in a report without making an account, with a category, a description, and an optional evidence link, then get back a random case code they can use later to check progress. I want a simple moderator flow too, where a moderator can log in, see reports, filter and search them, open one report, add notes, and move it through the usual status steps from submitted to under review, resolved, or dismissed.

Please make the privacy side real, so it does not store reporter identity or request details, and keep the case code hard to guess. Add basic rate limiting, error responses that are consistent, and a health check. Also expose interactive API docs at /docs so I can try everything easily.

Use TypeScript and make sure it runs cleanly with tests. If anything is unclear, check the current docs online and make sensible choices.