We should use the pass plugin mechanism for this. For some reason it’s currently documented in the legacy pass documentation: Writing an LLVM Pass — LLVM 16.0.0git documentation. I’ll move it to the new pass manager docs.
There’s an in-tree example here.