OpenClaw does not appear to expect people to DM the operator’s normal personal WeChat account. The openclaw-weixin plugin is direct-chat only, and the published plugin flow stores an ilink_bot_id bot identity plus the scanner’s ilink_user_id. Inbound messages are modeled as ...@im.wechat -> ...@im.bot, so user #2 should be messaging the bot identity, not the personal account.
Once user #2 actually reaches the bot, OpenClaw applies normal DM pairing. So yes, the expected approval path for a new sender is openclaw pairing approve openclaw-weixin <CODE>. The QR login only authenticates the owner account; it does not document any public discovery mechanism for a second user.
What I still cannot find in the docs/package is the Tencent-side entry point for user #2: no documented share link, bot card, or public bot QR. If Fay tests this live, the most useful next question is what exact bot/contact/chat appeared in WeChat after QR login, if any. If nothing discoverable appeared, I’d treat that as either missing Tencent/iLink documentation or an upstream plugin bug.
Refs: Channels, Pairing, Package