FrameworkProcessor._package_code fails on Windows with PermissionError (WinError 32) when deleting temp tar.gz #5873

"""Minimal repro for FrameworkProcessor._package_code WinError 32 on Windows."""

import os
import sys
from unittest.mock import patch

if sys.platform != "win32":
    print("Skip: this bug only reproduces on Windows.")
    sys.exit(0)

from sagemaker.core.helper.session_helper import Session
from sagemaker.core.processing import FrameworkProcessor

SOURCE_DIR = "minimal_src"
os.makedirs(SOURCE_DIR, exist_ok=True)
with open(os.path.join(SOURCE_DIR, "script.py"), "w", encoding="utf-8") as f:
    f.write("print('hello')\n")

sess = Session()
processor = FrameworkProcessor(
    image_uri="123456789012.dkr.ecr.us-east-1.amazonaws.com/pytorch-training:1.0.0-cpu-py3",
    role="arn:aws:iam::123456789012:role/SageMakerExecutionRole",
    instance_type="ml.m5.large",
    instance_count=1,
    sagemaker_session=sess,
)

with patch("sagemaker.core.s3.S3Uploader.upload_string_as_file_body"):
    processor._package_code(
        entry_point="script.py",
        source_dir=SOURCE_DIR,
        requirements=None,
        job_name="test-job",
        kms_key=None,
    )

from sagemaker.core.helper.session_helper import Session
from sagemaker.core.image_uris import get_training_image_uri
from sagemaker.core.processing import FrameworkProcessor

sess = Session()
processor = FrameworkProcessor(
    image_uri=get_training_image_uri(
        region=sess.boto_region_name,
        framework="pytorch",
        instance_type="ml.m5.large",
    ),
    role="<SageMaker execution role ARN>",
    instance_type="ml.m5.large",
    instance_count=1,
)

processor.run(
    code="script.py", # script to execute
    source_dir="src",  # local directory
    job_name="test-job",
    wait=False,
)

fd, tmp_path = tempfile.mkstemp(suffix=".tar.gz")
os.close(fd)
try:
    with tarfile.open(tmp_path, "w:gz") as tar:
        ...
    with open(tmp_path, "rb") as f:
        body = f.read()
    s3.S3Uploader.upload_string_as_file_body(body=body, ...)
    return s3_uri
finally:
    if os.path.exists(tmp_path):
        os.unlink(tmp_path)