From cf1023f64e4be955f0b26b4853b69e5c512132b6 Mon Sep 17 00:00:00 2001
From: Antal Orcsik <antal.orcsik@bitrise.io>
Date: Mon, 22 Jun 2026 11:38:49 +0200
Subject: [PATCH 1/3] Add Intercom Help Center cookie consent head snippet and
 GTM noscript

OneTrust CMP + GTM (GTM-TZK32GR) + Intercom Messenger (e2rdidtm) configured
for support.bitrise.io. Uses static script tags instead of dynamic createElement
loaders to comply with Intercom's CSP. Noscript body element kept separate per
Intercom support's injection process.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
---
 .../intercom-help-center-head-snippet.html    | 60 +++++++++++++++++++
 src/html/intercom-help-center-noscript.html   |  2 +
 2 files changed, 62 insertions(+)
 create mode 100644 src/html/intercom-help-center-head-snippet.html
 create mode 100644 src/html/intercom-help-center-noscript.html

diff --git a/src/html/intercom-help-center-head-snippet.html b/src/html/intercom-help-center-head-snippet.html
new file mode 100644
index 0000000..a6a12df
--- /dev/null
+++ b/src/html/intercom-help-center-head-snippet.html
@@ -0,0 +1,60 @@
+<!-- ============================================================
+     1. ONETRUST COOKIE CONSENT (CMP)
+     Domain script ID: 74dfda25-8e61-4fab-9330-4718635e7050
+     ============================================================ -->
+
+<link rel="preconnect" href="https://cdn.cookielaw.org/">
+
+<!-- Must load first — blocks non-consented scripts before the user chooses -->
+<link rel="preload" href="https://cdn.cookielaw.org/consent/74dfda25-8e61-4fab-9330-4718635e7050/OtAutoBlock.js" as="script">
+<script type="text/javascript" src="https://cdn.cookielaw.org/consent/74dfda25-8e61-4fab-9330-4718635e7050/OtAutoBlock.js"></script>
+
+<!-- OneTrust SDK: renders the consent banner and preference centre -->
+<link rel="preload" href="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" as="script">
+<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js"
+        type="text/javascript"
+        charset="UTF-8"
+        data-domain-script="74dfda25-8e61-4fab-9330-4718635e7050"></script>
+
+<!-- Required OneTrust callback -->
+<script type="text/javascript">function OptanonWrapper() { }</script>
+
+<!-- Bitrise brand override for the OneTrust reject-all button -->
+<style>
+  #onetrust-reject-all-handler {
+    background-color: #351d48 !important;
+    color: #fff !important;
+    border-color: #fff !important;
+  }
+</style>
+
+<!-- ============================================================
+     2. GOOGLE TAG MANAGER
+     Container ID: GTM-TZK32GR
+
+     Using a static <script src> tag instead of the standard dynamic
+     loader snippet (document.createElement) because Intercom's CSP
+     blocks dynamically created script elements.
+
+     class="optanon-category-C0002" makes OneTrust gate GTM behind
+     Performance cookie consent (category 2) before it loads.
+     ============================================================ -->
+
+<script>window.dataLayer = window.dataLayer || [];</script>
+<script src="https://www.googletagmanager.com/gtm.js?id=GTM-TZK32GR"
+        class="optanon-category-C0002"
+        defer></script>
+
+<!-- ============================================================
+     3. INTERCOM MESSENGER
+     Without this block, the Messenger is removed when custom scripts
+     are enabled. The standard Intercom snippet uses document.createElement,
+     which is blocked by Intercom's CSP — using a static src tag instead.
+     ============================================================ -->
+
+<script>
+  window.intercomSettings = {
+    app_id: "e2rdidtm"
+  };
+</script>
+<script src="https://widget.intercom.io/widget/e2rdidtm" async></script>
\ No newline at end of file
diff --git a/src/html/intercom-help-center-noscript.html b/src/html/intercom-help-center-noscript.html
new file mode 100644
index 0000000..91af4cf
--- /dev/null
+++ b/src/html/intercom-help-center-noscript.html
@@ -0,0 +1,2 @@
+<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-TZK32GR"
+height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
\ No newline at end of file

From dd6c99bf0d5b79d181fa87ccf1e2df5dcf319994 Mon Sep 17 00:00:00 2001
From: Antal Orcsik <antal.orcsik@bitrise.io>
Date: Tue, 23 Jun 2026 17:01:43 +0200
Subject: [PATCH 2/3] updated the snippet based on Intercom's feedback

---
 .../intercom-help-center-head-snippet.html    | 21 ++++++++++++-------
 1 file changed, 14 insertions(+), 7 deletions(-)

diff --git a/src/html/intercom-help-center-head-snippet.html b/src/html/intercom-help-center-head-snippet.html
index a6a12df..6f2df79 100644
--- a/src/html/intercom-help-center-head-snippet.html
+++ b/src/html/intercom-help-center-head-snippet.html
@@ -3,14 +3,10 @@
      Domain script ID: 74dfda25-8e61-4fab-9330-4718635e7050
      ============================================================ -->
 
-<link rel="preconnect" href="https://cdn.cookielaw.org/">
-
 <!-- Must load first — blocks non-consented scripts before the user chooses -->
-<link rel="preload" href="https://cdn.cookielaw.org/consent/74dfda25-8e61-4fab-9330-4718635e7050/OtAutoBlock.js" as="script">
 <script type="text/javascript" src="https://cdn.cookielaw.org/consent/74dfda25-8e61-4fab-9330-4718635e7050/OtAutoBlock.js"></script>
 
 <!-- OneTrust SDK: renders the consent banner and preference centre -->
-<link rel="preload" href="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" as="script">
 <script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js"
         type="text/javascript"
         charset="UTF-8"
@@ -20,13 +16,24 @@
 <script type="text/javascript">function OptanonWrapper() { }</script>
 
 <!-- Bitrise brand override for the OneTrust reject-all button -->
-<style>
-  #onetrust-reject-all-handler {
+<script>
+(function() {
+  if (document.getElementById('bitrise-onetrust-reject-style')) {
+    return;
+  }
+  const style = document.createElement('style');
+  style.id = 'bitrise-onetrust-reject-style';
+  style.textContent = `
+  #onetrust-reject-all-handler { 
     background-color: #351d48 !important;
     color: #fff !important;
     border-color: #fff !important;
   }
-</style>
+  `;
+  const parent = document.head || document.documentElement;
+  parent.appendChild(style);
+})();
+</script>
 
 <!-- ============================================================
      2. GOOGLE TAG MANAGER

From fc4cde1ecfb7ff6e587f18c11e1200d37dc75b7a Mon Sep 17 00:00:00 2001
From: Antal Orcsik <antal.orcsik@bitrise.io>
Date: Thu, 25 Jun 2026 09:13:07 +0200
Subject: [PATCH 3/3] small update to intercom widget script

---
 src/html/intercom-help-center-head-snippet.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/html/intercom-help-center-head-snippet.html b/src/html/intercom-help-center-head-snippet.html
index 6f2df79..3382d1a 100644
--- a/src/html/intercom-help-center-head-snippet.html
+++ b/src/html/intercom-help-center-head-snippet.html
@@ -64,4 +64,4 @@
     app_id: "e2rdidtm"
   };
 </script>
-<script src="https://widget.intercom.io/widget/e2rdidtm" async></script>
\ No newline at end of file
+<script src="https://widget.intercom.io/widget/e2rdidtm" class="optanon-category-C0003" async></script>
\ No newline at end of file