Just in case anyone else finds this, that is in fact a bug in the json.
Jamf support said it is PI-002662. The solution is to have the api
return xml. You can make this happen by forcing a header. Here's what it
looks like in powershell. Invoke-RestM...
I'm seeing this same thing. If I look at a device via the api in a web
browser, I see all the partitions. If I make the call to the API via a
script (PowerShell, in my case), I'm only seeing a single partition.