wifi: patch cosmic to not use secret agent auth

- force disable secret agent for cosmic-applet-network
- force disable secret agent for cosmic-initial-setup
- force disable secret agent for cosmic-settings

- to be re-evaluated with cosmic 1.0.5

Signed-off-by: Kajus Naujokaitis <kajus.naujokaitis@unikie.com>

Author: kajusnau

REUSE.toml

@@ -28,13 +28,8 @@ path = [
   "modules/microvm/sysvms/idsvm/mitmproxy/mitmproxy-ca/*",
   "modules/reference/hardware/jetpack/0001-ARM-SMMU-drivers-return-always-true-for-IOMMU_CAP_CA.patch",
   "packages/pkgs-by-name/ghaf-intro/**/*.png",
-  "overlays/custom-packages/cosmic/cosmic-comp/0001-Add-security-context-indicator.patch",
-  "overlays/custom-packages/cosmic/cosmic-comp/0001-Disable-VRR-by-default.patch",
-  "overlays/custom-packages/cosmic/cosmic-initial-setup/0001-Preselect-Ghaf-themes.patch",
-  "overlays/custom-packages/cosmic/cosmic-greeter/0001-Replace-fallback-background-with-Ghaf-default.patch",
-  "overlays/custom-packages/cosmic/cosmic-applets/*.patch",
+  "overlays/custom-packages/cosmic/**/*.patch",
   "overlays/custom-packages/system76-scheduler/0001-fix-add-missing-loop-in-process-scheduler-refresh-ta.patch",
-  "overlays/custom-packages/cosmic/cosmic-greeter/0002-fix-username-handle-empty-usernames.patch",
   "modules/secureboot/keys/*",
   "modules/hardware/passthrough/pci-acs-override/0001-pci-add-pcie_acs_override-for-pci-passthrough.patch",
   "overlays/custom-packages/systemd/0001-pam_systemd_home-Use-PAM_TEXT_INFO-for-token-prompts.patch"

overlays/custom-packages/cosmic/cosmic-applets/0003-dont-use-secret-agent.patch

@@ -0,0 +1,35 @@
+From 3ea3a82a17a6a096eac0870e4575e9b65fec8174 Mon Sep 17 00:00:00 2001
+From: Kajus Naujokaitis <kajusn@gmail.com>
+Date: Wed, 4 Feb 2026 13:23:33 +0200
+Subject: [PATCH] dont use secret agent
+
+Signed-off-by: Kajus Naujokaitis <kajusn@gmail.com>
+---
+ cosmic-applet-network/src/app.rs | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/cosmic-applet-network/src/app.rs b/cosmic-applet-network/src/app.rs
+index ae956bd1..2490a3a4 100644
+--- a/cosmic-applet-network/src/app.rs
++++ b/cosmic-applet-network/src/app.rs
+@@ -851,7 +851,7 @@ impl cosmic::Application for CosmicNetworkApplet {
+                             access_point.ssid.clone(),
+                             access_point.hw_address,
+                             access_point.network_type,
+-                            self.secret_tx.clone(),
++                            None,
+                         ))
+                     {
+                         if err.is_disconnected() {
+@@ -1065,7 +1065,7 @@ impl cosmic::Application for CosmicNetworkApplet {
+                         identity: is_enterprise.then(|| identity.clone()),
+                         password,
+                         hw_address: access_point.hw_address,
+-                        secret_tx: self.secret_tx.clone(),
++                        secret_tx: None,
+                     }) {
+                         if err.is_disconnected() {
+                             return system_conn().map(cosmic::Action::App);
+--
+2.52.0
+

overlays/custom-packages/cosmic/cosmic-applets/default.nix

@@ -10,6 +10,7 @@ prev.cosmic-applets.overrideAttrs (oldAttrs: {
     # audio and bluetooth patches should be removed when dbus-proxy allows
     ./0001-bluetooth-applet-hide-bluetooth-settings-button.patch
     ./0002-network-applet-hide-airplane-mode-toggle.patch
+    ./0003-dont-use-secret-agent.patch
   ];
   postInstall = oldAttrs.postInstall or "" + ''
     sed -i 's|^Exec=.*|Exec=env PIPEWIRE_RUNTIME_DIR=/tmp cosmic-applet-audio|' $out/share/applications/com.system76.CosmicAppletAudio.desktop

overlays/custom-packages/cosmic/cosmic-initial-setup/0002-dont-use-secret-agent.patch

@@ -0,0 +1,35 @@
+From 410cea4877925b0cb2537e64f6be75d80df51c1a Mon Sep 17 00:00:00 2001
+From: Kajus Naujokaitis <kajusn@gmail.com>
+Date: Wed, 4 Feb 2026 13:23:41 +0200
+Subject: [PATCH] dont use secret agent
+
+Signed-off-by: Kajus Naujokaitis <kajusn@gmail.com>
+---
+ src/page/wifi.rs | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/src/page/wifi.rs b/src/page/wifi.rs
+index 5b279d9..254f610 100644
+--- a/src/page/wifi.rs
++++ b/src/page/wifi.rs
+@@ -532,7 +532,7 @@ impl Page {
+                             ssid,
+                             ap.hw_address,
+                             ap.network_type,
+-                            self.secret_tx.clone(),
++                            None,
+                         ));
+                 }
+             }
+@@ -606,7 +606,7 @@ impl Page {
+                                 identity,
+                                 hw_address,
+                                 password,
+-                                secret_tx,
++                                secret_tx: None,
+                             });
+                         }
+                     })
+--
+2.52.0
+

overlays/custom-packages/cosmic/cosmic-initial-setup/default.nix

@@ -4,6 +4,7 @@
 prev.cosmic-initial-setup.overrideAttrs (oldAttrs: {
   patches = oldAttrs.patches ++ [
     ./0001-Preselect-Ghaf-themes.patch
+    ./0002-dont-use-secret-agent.patch
   ];
   # Don't install default cosmic themes and layouts
   postPatch = oldAttrs.postPatch or "" + ''

overlays/custom-packages/cosmic/cosmic-settings/0001-dont-use-secret-agent.patch

@@ -0,0 +1,35 @@
+From ba8e64a345952e6c0669fbec0a5ac99dda7b53da Mon Sep 17 00:00:00 2001
+From: Kajus Naujokaitis <kajusn@gmail.com>
+Date: Wed, 4 Feb 2026 18:35:37 +0200
+Subject: [PATCH] dont use secret agent
+
+Signed-off-by: Kajus Naujokaitis <kajusn@gmail.com>
+---
+ cosmic-settings/src/pages/networking/wifi.rs | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/cosmic-settings/src/pages/networking/wifi.rs b/cosmic-settings/src/pages/networking/wifi.rs
+index 7a8a09a..c6fa115 100644
+--- a/cosmic-settings/src/pages/networking/wifi.rs
++++ b/cosmic-settings/src/pages/networking/wifi.rs
+@@ -501,7 +501,7 @@ impl Page {
+                             ssid,
+                             ap.hw_address,
+                             ap.network_type,
+-                            self.secret_tx.clone(),
++                            None,
+                         ));
+                 }
+             }
+@@ -572,7 +572,7 @@ impl Page {
+                                 identity,
+                                 hw_address,
+                                 password,
+-                                secret_tx,
++                                secret_tx: None,
+                             });
+                         }
+                     })
+--
+2.52.0
+

overlays/custom-packages/cosmic/cosmic-settings/default.nix

@@ -4,6 +4,9 @@
 # Ref: https://github.com/pop-os/cosmic-settings/blob/master/cosmic-settings/Cargo.toml
 { prev }:
 (prev.cosmic-settings.overrideAttrs (oldAttrs: {
+  patches = oldAttrs.patches ++ [
+    ./0001-dont-use-secret-agent.patch
+  ];
   cargoBuildNoDefaultFeatures = true;
   cargoBuildFeatures = [
     "a11y"