feat(cli): add --debug-app and --debug-cli flags

[mrgrain]

Granular debug flags

The --debug flag now splits into two independent targets:

• --debug-app — Sets CDK_DEBUG=true for the synthesized app. Logs additional information during synthesis (e.g. token creation stack traces). Slows down synthesis.
• --debug-cli — Enables verbose AWS SDK tracing in the CLI itself.

--debug continues to work as before and implies both --debug-app and --debug-cli.

Configuration

The flags are also available in cdk.json / ~/.cdk.json:

{
  "debugApp": true,
  "debugCli": true
}

An existing "debug": true in config files implies both targets for backwards compatibility.

cdk doctor improvements

cdk doctor now reports some CLI configuration (verbosity level, active debug targets).

$ cdk doctor --debug

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[rix0rrr]

This is additive rather than breaking: a bare --debug is unchanged, and --debug=app/--debug=cli previously coerced to false under the boolean option, so they did nothing before.

At the expense of losing the way to write --debug app I suppose? It must be written as --debug=app ?

[mrgrain]

Almost there, but the whole--debug implies both targets things needs better modelling. we can change the configuration generator package.

[mrgrain]

Reworked the --debug implication into the config generator as you suggested. @aws-cdk/user-input-gen now supports an option-level implies field, and debug declares implies: ['debug-app', 'debug-cli']. The generator emits a yargs middleware (yargsImplies) that switches the implied flags on during parsing, so by the time anything reads argv, debugApp/debugCli are already true — no hand-written argv.debug || ... anywhere. A config-file debug: true is normalized to both targets when settings are assembled, and environment.ts keys CDK_DEBUG off debugApp only. All comment threads addressed and resolved.

[mrgrain]

this is always shown, removing the double up